Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Log-Analyse und Auswertung: Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 31.10.2014, 10:16   #1
maraidan
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Hallo, nachdem ich selbst keine Lösung finde möchte ich hier mein Glück versuchen.
Hab es gestern schonmal versucht und dabei ist mein Rechner abgestürzt.
Nach dem Download einer stark Viren und Malware befallenen Datei, haben (fast) alle Programme etwas gefunden.
Seitdem habe ich Probleme in Firefox. Wenn ich z.B. versuche die obige Internetadresse mit rechter Maustaste anzuklicken um z.B. zu kopieren, bekomme ich nur einen leeren Kasten angezeigt, ohne das ich ein Menü sehen kann oder was auswählen kann. Auf einigen Seiten habe ich das Problem auch woanders mit der rechten Maustaste. Im Internetexplorer geht es und auf dem Desktop oder in anderen Dateien auch. Wenn ich mit der Maustaste über einige Links im Net gehe erscheint auch der graue Kasten ohne Text, desweiteren auch oben in der Taskleiste des Browsers, wenn ich z.B. über das Symbol "Lesezeichen" gehe oder auch bei anderen Symbolen. auch hier beim Text schreiben bekomme ich keine Info wenn ich mit der Maus oben über die Symbole gehe. Bei einigen Seiten wo es eine Menüauswahl gibt so wie hier bei Schriftart und Größe kann ich das Menü nicht aufklappen. Hier geht es.
Ich hoffe ihr versteht das Problem.

Was ich bereits versucht habe.
Ich habe Scans mit folgenden Programmen durchgeführt.
-Comodovirenscan
-Ad-Aware Antivirus
-Malewarebytes Anti-Malware
-Spybot
-CCleaner

die logs führe ich gerne bei.
Einige Programme haben dabei Viren und Maleware gefunden.
Ich hatte auch Probleme eine Suchmaschine aus der Startseite loszuwerden, wessen Name mir gerade nicht einfällt. Habe dazu ein paar Internet tipps ausprobiert und Firefox deinstalliert und neuinstalliert.
Die Suchmaschine bin ich los aber mein Problem beim rechtsklicken und ähnliches hat sich nicht gelöst.

Dann habe ich die genannten Schritte aus dem Forum ausgeführt und werde die Ergebnisse von defogger_disable.txt, FRST.txt mit Additions.txt, Gmer.txt auch beifügen.

Ich würde mich freuen wenn jemand mir helfen kann, da ich selbst gerade keine Lösung finde und im Net keine gefunden habe.
Als ich gestern versucht habe diesen Text zu posten, hatte ich teilweise keine Adminrechte auf meinen PC mehr, konnte nicht auf Comodo zugreifen und nicht auf Textdateien. Als meine Dateien als zu groß angezeigt wurden, wollte ich diese mit 7zip anzeigen. Auch dabei fehlten mir die Adminrechte. Wollte dann in den Adminmodus(eigentlich kann ich auch als anderer Nutzer alles wichtige machen) doch dabei bekam ich eine Fehlermeldung und dann ließ sich der PC nur noch ausschalten.
Nach dem Neustart bekam ich bluescreen und eine frühere Version musste wieder hergestllt werden.
Nun versuche ich nochmal mein Glück hier.
Vielen Dank

Leider finde ich bei Comodo die logs nicht

Code:
ATTFilter
# AdwCleaner v3.311 - Bericht erstellt am 08/10/2014 um 00:22:22
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : tester - COMPOSTER
# Gestartet von : C:\Users\tester\Downloads\adwcleaner_3.311.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : CltMngSvc
Dienst Gefunden : SPPD

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Ordner Gefunden : C:\Program Files (x86)\Conduit
Ordner Gefunden : C:\Program Files (x86)\RadioTotal4
Ordner Gefunden : C:\Program Files (x86)\SearchProtect
Ordner Gefunden : C:\ProgramData\Conduit
Ordner Gefunden : C:\SoftwareUpdater
Ordner Gefunden : C:\Users\tester\AppData\Local\Conduit
Ordner Gefunden : C:\Users\tester\AppData\Local\DownloadGuide
Ordner Gefunden : C:\Users\tester\AppData\Local\SearchProtect
Ordner Gefunden : C:\Users\tester\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\tester\AppData\LocalLow\PriceGong
Ordner Gefunden : C:\Users\tester\AppData\LocalLow\RadioTotal4
Ordner Gefunden : C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Ordner Gefunden : C:\Windows\SysWOW64\SearchProtect

***** [ Tasks ] *****

Task Gefunden : BackgroundContainer Startup Task

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Daten Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Daten Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\BackgroundContainer
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\RadioTotal4
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT3317893
Schlüssel Gefunden : HKLM\SOFTWARE\Conduit
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{898C6F9E-E672-450E-BA8B-EB2BD1860C76}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{977B751C-6E9E-4822-9564-B94FEC4C4838}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3317893
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gefunden : HKLM\SOFTWARE\RadioTotal4
Schlüssel Gefunden : HKLM\SOFTWARE\SearchProtect
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://search.conduit.com/?ctid=CT3317893&octid=CT3317893&SearchSource=61&CUI=UN40818337833256331&UM=2&UP=SPD01BB771-ACBE-41DA-9D60-012B6BA05709&SSPV=

-\\ Mozilla Firefox v32.0.3 (x86 de)

[ Datei : C:\Users\tester\AppData\Roaming\Mozilla\Firefox\Profiles\yvn6b3ym.default\prefs.js ]

Zeile gefunden : user_pref("extensions.GjhgjhgCXhjj.shoplist", "{\"shop\":{\"quelle.de\":[\"10003\",\"Quelle\",8,\"75\\u20ac Rabatt\"],\"schwab.de\":[\"10004\",\"Schwab\",4,\"15\\u20ac Rabatt\"],\"valentins.de\":[\"10[...]

-\\ Google Chrome v

[ Datei : C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo
Gefunden [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg
Gefunden [Extension] : hphibigbodkkohoglgfkddblldpfohjl
Gefunden [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej
Gefunden [Extension] : kincjchfokkeneeofpeefomkikfkiedl
Gefunden [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
Gefunden [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc

*************************

AdwCleaner[R0].txt - [6948 octets] - [08/10/2014 00:22:22]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [7008 octets] ##########

# AdwCleaner v3.311 - Bericht erstellt am 08/10/2014 um 00:26:07
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : tester - COMPOSTER
# Gestartet von : C:\Users\tester\Downloads\adwcleaner_3.311.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : CltMngSvc
Dienst Gefunden : SPPD

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\END
Ordner Gefunden : C:\Program Files (x86)\Conduit
Ordner Gefunden : C:\Program Files (x86)\RadioTotal4
Ordner Gefunden : C:\Program Files (x86)\SearchProtect
Ordner Gefunden : C:\ProgramData\Conduit
Ordner Gefunden : C:\SoftwareUpdater
Ordner Gefunden : C:\Users\tester\AppData\Local\Conduit
Ordner Gefunden : C:\Users\tester\AppData\Local\DownloadGuide
Ordner Gefunden : C:\Users\tester\AppData\Local\SearchProtect
Ordner Gefunden : C:\Users\tester\AppData\LocalLow\Conduit
Ordner Gefunden : C:\Users\tester\AppData\LocalLow\PriceGong
Ordner Gefunden : C:\Users\tester\AppData\LocalLow\RadioTotal4
Ordner Gefunden : C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Ordner Gefunden : C:\Windows\SysWOW64\SearchProtect

***** [ Tasks ] *****

Task Gefunden : BackgroundContainer Startup Task

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Daten Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Daten Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\BackgroundContainer
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\RadioTotal4
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT3317893
Schlüssel Gefunden : HKLM\SOFTWARE\Conduit
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{898C6F9E-E672-450E-BA8B-EB2BD1860C76}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{977B751C-6E9E-4822-9564-B94FEC4C4838}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3317893
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gefunden : HKLM\SOFTWARE\RadioTotal4
Schlüssel Gefunden : HKLM\SOFTWARE\SearchProtect
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://search.conduit.com/?ctid=CT3317893&octid=CT3317893&SearchSource=61&CUI=UN40818337833256331&UM=2&UP=SPD01BB771-ACBE-41DA-9D60-012B6BA05709&SSPV=

-\\ Mozilla Firefox v32.0.3 (x86 de)

[ Datei : C:\Users\tester\AppData\Roaming\Mozilla\Firefox\Profiles\yvn6b3ym.default\prefs.js ]

Zeile gefunden : user_pref("extensions.GjhgjhgCXhjj.shoplist", "{\"shop\":{\"quelle.de\":[\"10003\",\"Quelle\",8,\"75\\u20ac Rabatt\"],\"schwab.de\":[\"10004\",\"Schwab\",4,\"15\\u20ac Rabatt\"],\"valentins.de\":[\"10[...]

-\\ Google Chrome v

[ Datei : C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo
Gefunden [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg
Gefunden [Extension] : hphibigbodkkohoglgfkddblldpfohjl
Gefunden [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej
Gefunden [Extension] : kincjchfokkeneeofpeefomkikfkiedl
Gefunden [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
Gefunden [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc

*************************

AdwCleaner[R0].txt - [7104 octets] - [08/10/2014 00:22:22]
AdwCleaner[R1].txt - [7008 octets] - [08/10/2014 00:26:07]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [7068 octets] ##########

# AdwCleaner v4.002 - Bericht erstellt am 30/10/2014 um 12:58:41
# Aktualisiert 27/10/2014 von Xplode
# Datenbank : 2014-10-26.6
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : tester - COMPOSTER
# Gestartet von : C:\Users\tester\Downloads\AdwCleaner_4.002.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gefunden : C:\Program Files (x86)\globalUpdate
Ordner Gefunden : C:\SmootherWeb
Ordner Gefunden : C:\Users\tester\AppData\Local\globalUpdate
Ordner Gefunden : C:\Users\tester\AppData\Local\Temp\clicup
Ordner Gefunden : C:\Users\tester\AppData\LocalLow\GutscheinCodes
Ordner Gefunden : C:\Users\tester\AppData\Roaming\DigitalSites
Ordner Gefunden : C:\Users\tester\AppData\Roaming\InetStat
Ordner Gefunden : C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmootherWeb
Ordner Gefunden : C:\Users\tester\AppData\Roaming\SmootherWeb

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Daten Gefunden : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1414094586&from=ild&uid=ST380815AS_9RW6JCF5
Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\adawarebp
Schlüssel Gefunden : HKCU\Software\clicup
Schlüssel Gefunden : HKCU\Software\dsiteproducts
Schlüssel Gefunden : HKCU\Software\GlobalUpdate
Schlüssel Gefunden : HKCU\Software\InetStat
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SmootherWeb
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\clicup
Schlüssel Gefunden : [x64] HKCU\Software\dsiteproducts
Schlüssel Gefunden : [x64] HKCU\Software\GlobalUpdate
Schlüssel Gefunden : [x64] HKCU\Software\InetStat
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [smoother]
Wert Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe]
Wert Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe]
Wert Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe]
Wert Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v33.0.2 (x86 de)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [7104 octets] - [07/10/2014 23:22:22]
AdwCleaner[R1].txt - [7164 octets] - [07/10/2014 23:26:07]
AdwCleaner[R2].txt - [8191 octets] - [30/10/2014 12:58:41]
AdwCleaner[S0].txt - [6909 octets] - [07/10/2014 23:32:02]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [8311 octets] ##########

# AdwCleaner v3.311 - Bericht erstellt am 08/10/2014 um 00:32:02
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : tester - COMPOSTER
# Gestartet von : C:\Users\tester\Downloads\adwcleaner_3.311.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : CltMngSvc
Dienst Gelöscht : SPPD

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\SoftwareUpdater
Ordner Gelöscht : C:\ProgramData\Conduit
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\SearchProtect
Ordner Gelöscht : C:\Program Files (x86)\RadioTotal4
Ordner Gelöscht : C:\Windows\SysWOW64\SearchProtect
Ordner Gelöscht : C:\Users\tester\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\tester\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\tester\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\tester\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\tester\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\tester\AppData\LocalLow\RadioTotal4
Ordner Gelöscht : C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Datei Gelöscht : C:\END

***** [ Tasks ] *****

Task Gelöscht : BackgroundContainer Startup Task

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3317893
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3317893
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{898C6F9E-E672-450E-BA8B-EB2BD1860C76}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{977B751C-6E9E-4822-9564-B94FEC4C4838}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BackgroundContainer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\RadioTotal4
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\RadioTotal4
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17280

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v32.0.3 (x86 de)

[ Datei : C:\Users\tester\AppData\Roaming\Mozilla\Firefox\Profiles\yvn6b3ym.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.GjhgjhgCXhjj.shoplist", "{\"shop\":{\"quelle.de\":[\"10003\",\"Quelle\",8,\"75\\u20ac Rabatt\"],\"schwab.de\":[\"10004\",\"Schwab\",4,\"15\\u20ac Rabatt\"],\"valentins.de\":[\"10[...]

-\\ Google Chrome v

[ Datei : C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo
Gelöscht [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg
Gelöscht [Extension] : hphibigbodkkohoglgfkddblldpfohjl
Gelöscht [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej
Gelöscht [Extension] : kincjchfokkeneeofpeefomkikfkiedl
Gelöscht [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
Gelöscht [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc

*************************

AdwCleaner[R0].txt - [7104 octets] - [08/10/2014 00:22:22]
AdwCleaner[R1].txt - [7164 octets] - [08/10/2014 00:26:07]
AdwCleaner[S0].txt - [6761 octets] - [08/10/2014 00:32:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6821 octets] ##########

# AdwCleaner v4.002 - Bericht erstellt am 30/10/2014 um 13:01:38
# DB v2014-10-26.6
# Aktualisiert 27/10/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : tester - COMPOSTER
# Gestartet von : C:\Users\tester\Downloads\AdwCleaner_4.002.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\tester\AppData\Local\Temp\clicup
Ordner Gelöscht : C:\Users\tester\AppData\Roaming\DigitalSites
Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
Ordner Gelöscht : C:\Users\tester\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\tester\AppData\LocalLow\GutscheinCodes
Ordner Gelöscht : C:\Users\tester\AppData\Roaming\InetStat
Ordner Gelöscht : C:\SmootherWeb
Ordner Gelöscht : C:\Users\tester\AppData\Roaming\SmootherWeb
Ordner Gelöscht : C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmootherWeb

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\tester\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [smoother]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Wert Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe]
Wert Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe]
Wert Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe]
Wert Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe]
Schlüssel Gelöscht : HKCU\Software\clicup
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InetStat
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\adawarebp
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SmootherWeb

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v33.0.2 (x86 de)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [7104 octets] - [07/10/2014 23:22:22]
AdwCleaner[R1].txt - [7164 octets] - [07/10/2014 23:26:07]
AdwCleaner[R2].txt - [8447 octets] - [30/10/2014 12:58:41]
AdwCleaner[S0].txt - [6909 octets] - [07/10/2014 23:32:02]
AdwCleaner[S1].txt - [8345 octets] - [30/10/2014 13:01:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [8405 octets] ##########
Malewarebytes Anti-Maleware

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 09.10.2014
Suchlauf-Zeit: 22:12:27
Logdatei: maleware.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.10.09.10
Rootkit Datenbank: v2014.10.08.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: tester

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 348666
Verstrichene Zeit: 27 Min, 17 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 9
PUP.Optional.WinGuard.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{e4bf64e4-237e-48e7-b43b-da6e1b60d81a}, In Quarantäne, [a509848e473584b273537c1cde240ef2], 
PUP.Optional.WinGuard.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{E4BF64E4-237E-48E7-B43B-DA6E1B60D81A}, In Quarantäne, [a509848e473584b273537c1cde240ef2], 
PUP.Optional.WinGuard.A, HKU\S-1-5-21-3301257352-363032961-1859707185-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{E4BF64E4-237E-48E7-B43B-DA6E1B60D81A}, In Quarantäne, [a509848e473584b273537c1cde240ef2], 
PUP.Optional.WinGuard.A, HKU\S-1-5-21-3301257352-363032961-1859707185-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{E4BF64E4-237E-48E7-B43B-DA6E1B60D81A}, In Quarantäne, [a509848e473584b273537c1cde240ef2], 
PUP.Optional.WinGuard.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WinGuard, In Quarantäne, [406ea56d601ca2943d1751d21ae9e917], 
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, In Quarantäne, [efbfd939186437ff5768d7ac689c956b], 
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, In Quarantäne, [971735dd314bda5cd9e5c2c1cc38c739], 
Rogue.WinGuard, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WinGuard, In Quarantäne, [4569dd358bf17db9b04acd0d778c9070], 
PUP.Optional.BestMarkIt.A, HKU\S-1-5-21-3301257352-363032961-1859707185-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\best_markit, In Quarantäne, [c0ee13ffbebe6ccab2a233099e6532ce], 

Registrierungswerte: 1
PUP.Optional.ConduitSearchProtect, HKU\S-1-5-21-3301257352-363032961-1859707185-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SearchProtect, C:\Users\Gast\AppData\Roaming\SearchProtect\bin\cltmng.exe, In Quarantäne, [911d44ce3f3dce68b9d6c09c4eb66a96]

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 1
PUP.Optional.WinGuard.A, C:\Program Files (x86)\WinGuard, In Quarantäne, [406ea56d601ca2943d1751d21ae9e917], 

Dateien: 9
PUP.Optional.WinGuard.A, C:\Program Files (x86)\WinGuard\winguard.dll, In Quarantäne, [a509848e473584b273537c1cde240ef2], 
PUP.Optional.Breitschopp, C:\Users\tester\Downloads\free+pdf+perfect_1.0.exe, In Quarantäne, [b4fa0a0881fb8aaca076707c9c68f60a], 
PUP.Optional.BundleInstaller.A, C:\Users\tester\Downloads\Apache-OpenOffice_Setup_Download.exe, In Quarantäne, [e9c5789a126ae1553047f8312dd3ee12], 
PUP.Optional.SearchProtect.A, C:\Windows\AppPatch\AppPatch64\SPVCLdr64.dll, In Quarantäne, [614d19f92c5077bfd40f5e418a7728d8], 
PUP.Optional.WinGuard.A, C:\Program Files (x86)\WinGuard\winguard.crx, In Quarantäne, [406ea56d601ca2943d1751d21ae9e917], 
PUP.Optional.WinGuard.A, C:\Program Files (x86)\WinGuard\icon.ico, In Quarantäne, [406ea56d601ca2943d1751d21ae9e917], 
PUP.Optional.WinGuard.A, C:\Program Files (x86)\WinGuard\Uninst.exe, In Quarantäne, [406ea56d601ca2943d1751d21ae9e917], 
PUP.Optional.WinGuard.A, C:\Program Files (x86)\WinGuard\winguard.xpi, In Quarantäne, [406ea56d601ca2943d1751d21ae9e917], 
PUP.Optional.SearchProtect, C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, In Quarantäne, [b0fe70a2b7c585b16d55cfb409fbb64a], 

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 29.10.2014
Suchlauf-Zeit: 23:29:00
Logdatei: Maleware2.txt
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.10.29.08
Rootkit Datenbank: v2014.10.22.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: tester

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 355644
Verstrichene Zeit: 21 Min, 39 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, In Quarantäne, [6e0e9c7ee09c45f17b2bcb5821e2c838], 

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 2
PUP.Optional.Amonetize, C:\$Recycle.Bin\S-1-5-21-3301257352-363032961-1859707185-1001\$R5GYPW0.exe, In Quarantäne, [b7c54bcfe5971e18acb4aa2e9869d42c], 
PUP.Optional.Amonetize, C:\$Recycle.Bin\S-1-5-21-3301257352-363032961-1859707185-1001\$R5WFCNI.exe, In Quarantäne, [97e547d3611bbd791c44518722dfab55], 

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
spybot

Code:
ATTFilter
Search results from Spybot - Search & Destroy

24.10.2014 09:49:42
Scan took 00:28:16.
115 items found.

YourFileDownloader: [SBI $406D3162] Settings (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\YourFileDownloader

Barowwsoe2Save: [SBI $72F95947] User settings (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Optimizer Pro

PCUtilities.OptimizerPro: [SBI $7AF08CCA] Program directory (Directory, nothing done)
  C:\Users\tester\Documents\Optimizer Pro\
  Directory.subfile=C:\Users\tester\Documents\Optimizer Pro\CookiesException.txt
  Directory.subfile.size=91
  Directory.subfile.md5=19C728153EF70C31E021D3F7E3CBE20C
  Directory.subfile.filedate=1414094696
  Directory.subfile.filedatetext=2014-10-23 22:04:55

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\account.goodgamestudios.com\GGSAccount.sol
  Properties.size=64
  Properties.md5=776E4E43DB2AC41FE95FB18C4BF834C5
  Properties.filedate=1414088231
  Properties.filedatetext=2014-10-23 20:17:11

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\cachebreaker.goodgamestudios.com\analytics.sol
  Properties.size=419
  Properties.md5=E0876F3986B6A78C3DB05AA4FE6C1BF7
  Properties.filedate=1414089349
  Properties.filedatetext=2014-10-23 20:35:48

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\casino.skillonnet.com\Data.sol
  Properties.size=230
  Properties.md5=6DCDCC42E6F853717E3386A14662A46B
  Properties.filedate=1413319858
  Properties.filedatetext=2014-10-14 22:50:58

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\cdn.flashtalking.com\FT_cookie.sol
  Properties.size=43
  Properties.md5=5BD98BB813EEDA3C606E3671EE84AA76
  Properties.filedate=1413199002
  Properties.filedatetext=2014-10-13 13:16:42

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\clicktoview.org\com.jeroenwijering.sol
  Properties.size=54
  Properties.md5=1FE690ECBBEE603C3B749968EA366783
  Properties.filedate=1413583410
  Properties.filedatetext=2014-10-18 00:03:30

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\fbstatic-a.akamaihd.net\play.spotify.com.sol
  Properties.size=87
  Properties.md5=77FA0E87348AFAC0621707A8E6CB1A1D
  Properties.filedate=1414134546
  Properties.filedatetext=2014-10-24 09:09:05

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\games.mafa.com\analytics.sol
  Properties.size=351
  Properties.md5=6597C1C68C08447D19D63B43F6B336CB
  Properties.filedate=1414085134
  Properties.filedatetext=2014-10-23 19:25:34

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\h2r5i8s8.map2.ssl.hwcdn.net\analytics.sol
  Properties.size=458
  Properties.md5=86172FD121E8D59F622C2AA3751B6989
  Properties.filedate=1413385395
  Properties.filedatetext=2014-10-15 17:03:14

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\hub.freshmilk.tv\analytics.sol
  Properties.size=257
  Properties.md5=1F7FC8E501348842603A1CC166F4A1A4
  Properties.filedate=1414068163
  Properties.filedatetext=2014-10-23 14:42:42

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\images-na.ssl-images-amazon.com\mercury.sol
  Properties.size=69
  Properties.md5=47B903EEFF15067C232EDE8A361BE303
  Properties.filedate=1413799408
  Properties.filedatetext=2014-10-20 12:03:27

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\ncookie.ranch.goodgamestudios.com\GoodgameRanch_1.sol
  Properties.size=205
  Properties.md5=EFF2A55288C3D0513A247F0A44235C8A
  Properties.filedate=1414089266
  Properties.filedatetext=2014-10-23 20:34:26

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s-assets.tp-cdn.com\dealspot.sol
  Properties.size=84
  Properties.md5=DD1C47FE6D7DC88E25817C74545D85AD
  Properties.filedate=1413385346
  Properties.filedatetext=2014-10-15 17:02:26

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s.yimg.com\com.yahoo.yep.sol
  Properties.size=54
  Properties.md5=DD1B9267261B724A5805D9401E5ADAE0
  Properties.filedate=1413905097
  Properties.filedatetext=2014-10-21 17:24:57

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s.ytimg.com\soundData.sol
  Properties.size=58
  Properties.md5=0C496C36B0B95C03CC63EFEF28768456
  Properties.filedate=1413961523
  Properties.filedatetext=2014-10-22 09:05:23

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\secureinclude.ebaystatic.com\ebayLSO.sol
  Properties.size=131
  Properties.md5=9B9EB2D014217DBC41BAE17D53CCD1FB
  Properties.filedate=1413925145
  Properties.filedatetext=2014-10-21 22:59:04

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\secureinclude.ebaystatic.com\ebayT.sol
  Properties.size=39
  Properties.md5=B43F43445AA3414DDC22EC80FBB22871
  Properties.filedate=1413925145
  Properties.filedatetext=2014-10-21 22:59:04

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\static.wix.com\WixComputerID.sol
  Properties.size=153
  Properties.md5=899176F3B8FED98C4780C9FA0672BBC9
  Properties.filedate=1414089342
  Properties.filedatetext=2014-10-23 20:35:41

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\video.fashiondaily.tv\analytics.sol
  Properties.size=257
  Properties.md5=2278F5E07E9B98729A3576A4295ADF59
  Properties.filedate=1414068151
  Properties.filedatetext=2014-10-23 14:42:31

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.paypalobjects.com\PayPalLSO.sol
  Properties.size=49
  Properties.md5=D97223D19DA3D396651426AB5B2559CB
  Properties.filedate=1413925133
  Properties.filedatetext=2014-10-21 22:58:52

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.paypalobjects.com\ppLsoTest.sol
  Properties.size=48
  Properties.md5=74EE4375686A2069414EEF13E7B62789
  Properties.filedate=1414087954
  Properties.filedatetext=2014-10-23 20:12:33

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www1.belboon.de\000020029.sol
  Properties.size=169
  Properties.md5=207C5FD0820AD42DEC7424FC400B4B8D
  Properties.filedate=1412973662
  Properties.filedatetext=2014-10-10 22:41:01

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\aa.online-metrix.net\fpc.swf\session.sol
  Properties.size=76
  Properties.md5=2A0A0E59B463B4B8BADD0B247B1EDC9E
  Properties.filedate=1413925135
  Properties.filedatetext=2014-10-21 22:58:54

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\ndirect.ppro.de\vft\clickIDs.sol
  Properties.size=66
  Properties.md5=D63323619FD93CE50D8A585EFFB6522D
  Properties.filedate=1414077887
  Properties.filedatetext=2014-10-23 17:24:46

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\skype.com\#ui\preferences.sol
  Properties.size=234
  Properties.md5=59B759209E3DD94EA715491F968098F6
  Properties.filedate=1414095330
  Properties.filedatetext=2014-10-23 22:15:30

Macromedia.FlashPlayer.Cookies: [SBI $5555F3D7]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\games.mafa.com\3\Rapunzel-Playground-Accident.swf\flashgamesubmitter.sol
  Properties.size=126
  Properties.md5=BA0BD2FD974C058B5950A594C9F26509
  Properties.filedate=1414083125
  Properties.filedatetext=2014-10-23 18:52:04

Macromedia.FlashPlayer.Cookies: [SBI $5555F3D7]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\play.snacktv.de\player\videoplayer.swf\SnackTV.sol
  Properties.size=103
  Properties.md5=69B2BE37960FA69919CAA14E33CCBE94
  Properties.filedate=1414078208
  Properties.filedatetext=2014-10-23 17:30:07

Macromedia.FlashPlayer.Cookies: [SBI $5555F3D7]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.filmon.com\#com.junkbyte\Console\UserData.sol
  Properties.size=105
  Properties.md5=6C97375D550C57FF13E902BC7EF7E57C
  Properties.filedate=1413578069
  Properties.filedatetext=2014-10-17 22:34:29

Macromedia.FlashPlayer.Cookies: [SBI $5555F3D7]  Text file (File, nothing done)
  C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.kinderspelletjes.nl\spelswf\snoepfabriek.swf\ts_fabricsaga_1403221.sol
  Properties.size=64
  Properties.md5=D2E80928C2627791BE76124E8790D40F
  Properties.filedate=1413478276
  Properties.filedatetext=2014-10-16 18:51:15

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Internet Explorer (Benutzer): tester) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Internet Explorer (Benutzer): tester) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

FastClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

WebTrends live: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Zedo: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Zedo: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

FastClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Firefox: tester (default-1414105285531)) (Browser: Cookie, nothing done)
  

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: [SBI $FF589D0C] Download directory (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Internet Explorer\Download Directory

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

MS Management Console: [SBI $ECD50EAD] Recent command list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Microsoft Management Console\Recent File List

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Direct3D: [SBI $7FB7B83F] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name

MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id

MS Paint: [SBI $07867C39] Recent file list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

MS Regedit: [SBI $C3B62FC1] Recent open key (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows Explorer: [SBI $7308A845] Run history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

WinRAR: [SBI $0B56E92B] Recent file list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\WinRAR\ArcHistory

WinRAR: [SBI $B84F9965] Last used directory (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\WinRAR\General\LastFolder

Cookie: [SBI $49804B54] Browser: Cookie (122) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (1271) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (122) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (3096) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.4.40.131  DLL (build: 20140425) ---

2014-06-24 blindman.exe (2.4.40.151)
2014-06-24 explorer.exe (2.4.40.181)
2014-06-24 SDBootCD.exe (2.4.40.109)
2014-06-24 SDCleaner.exe (2.4.40.110)
2014-06-24 SDDelFile.exe (2.4.40.94)
2013-06-18 SDDisableProxy.exe
2014-06-24 SDFiles.exe (2.4.40.135)
2014-06-24 SDFileScanHelper.exe (2.4.40.1)
2014-06-24 SDFSSvc.exe (2.4.40.217)
2014-06-24 SDHelp.exe (2.4.40.1)
2014-04-25 SDHookHelper.exe (2.3.39.2)
2014-04-25 SDHookInst32.exe (2.3.39.2)
2014-04-25 SDHookInst64.exe (2.3.39.2)
2014-06-24 SDImmunize.exe (2.4.40.130)
2014-06-24 SDLogReport.exe (2.4.40.107)
2014-06-24 SDOnAccess.exe (2.4.40.11)
2014-06-24 SDPESetup.exe (2.4.40.3)
2014-06-24 SDPEStart.exe (2.4.40.86)
2014-06-24 SDPhoneScan.exe (2.4.40.28)
2014-06-24 SDPRE.exe (2.4.40.22)
2014-06-24 SDPrepPos.exe (2.4.40.15)
2014-06-24 SDQuarantine.exe (2.4.40.103)
2014-06-24 SDRootAlyzer.exe (2.4.40.116)
2014-06-24 SDSBIEdit.exe (2.4.40.39)
2014-06-24 SDScan.exe (2.4.40.181)
2014-06-24 SDScript.exe (2.4.40.54)
2014-06-24 SDSettings.exe (2.4.40.139)
2014-06-24 SDShell.exe (2.4.40.2)
2014-06-24 SDShred.exe (2.4.40.108)
2014-06-24 SDSysRepair.exe (2.4.40.102)
2014-06-24 SDTools.exe (2.4.40.157)
2014-06-24 SDTray.exe (2.4.40.129)
2014-06-27 SDUpdate.exe (2.4.40.94)
2014-06-27 SDUpdSvc.exe (2.4.40.77)
2014-06-24 SDWelcome.exe (2.4.40.130)
2014-04-25 SDWSCSvc.exe (2.3.39.2)
2014-05-20 spybotsd2-install-bdcore-update.exe (2.3.39.0)
2014-07-31 spybotsd2-translation-esx.exe
2013-06-19 spybotsd2-translation-frx.exe
2014-08-25 spybotsd2-translation-hux2.exe
2014-10-01 spybotsd2-translation-nlx2.exe
2014-10-24 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2014-04-25 NotificationSpreader.dll
2014-06-24 SDAdvancedCheckLibrary.dll (2.4.40.98)
2014-04-25 SDAV.dll
2014-06-24 SDECon32.dll (2.4.40.114)
2014-06-24 SDECon64.dll (2.3.39.113)
2014-06-24 SDEvents.dll (2.4.40.2)
2014-06-24 SDFileScanLibrary.dll (2.4.40.14)
2014-04-25 SDHook32.dll (2.3.39.2)
2014-04-25 SDHook64.dll (2.3.39.2)
2014-06-24 SDImmunizeLibrary.dll (2.4.40.2)
2014-06-24 SDLicense.dll (2.4.40.0)
2014-06-24 SDLists.dll (2.4.40.4)
2014-06-24 SDResources.dll (2.4.40.7)
2014-06-24 SDScanLibrary.dll (2.4.40.131)
2014-06-24 SDTasks.dll (2.4.40.15)
2014-06-24 SDWinLogon.dll (2.4.40.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2014-06-24 Tools.dll (2.4.40.36)
2014-03-05 Includes\Adware-000.sbi (*)
2014-01-08 Includes\Adware-001.sbi (*)
2014-10-22 Includes\Adware-C.sbi (*)
2014-01-13 Includes\Adware.sbi (*)
2014-01-13 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2014-01-08 Includes\Dialer-000.sbi (*)
2014-01-08 Includes\Dialer-001.sbi (*)
2014-01-08 Includes\Dialer-C.sbi (*)
2014-01-13 Includes\Dialer.sbi (*)
2014-01-13 Includes\DialerC.sbi (*)
2014-01-09 Includes\Fraud-000.sbi (*)
2014-01-09 Includes\Fraud-001.sbi (*)
2014-03-31 Includes\Fraud-002.sbi (*)
2014-01-09 Includes\Fraud-003.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2014-01-08 Includes\Hijackers-000.sbi (*)
2014-01-08 Includes\Hijackers-001.sbi (*)
2014-01-08 Includes\Hijackers-C.sbi (*)
2014-01-13 Includes\Hijackers.sbi (*)
2014-01-13 Includes\HijackersC.sbi (*)
2014-01-08 Includes\iPhone-000.sbi (*)
2014-01-08 Includes\iPhone.sbi (*)
2014-01-08 Includes\Keyloggers-000.sbi (*)
2014-09-24 Includes\Keyloggers-C.sbi (*)
2014-01-13 Includes\Keyloggers.sbi (*)
2014-01-13 Includes\KeyloggersC.sbi (*)
2014-10-07 Includes\Malware-000.sbi (*)
2014-01-09 Includes\Malware-001.sbi (*)
2014-01-09 Includes\Malware-002.sbi (*)
2014-02-05 Includes\Malware-003.sbi (*)
2014-01-28 Includes\Malware-004.sbi (*)
2014-04-15 Includes\Malware-005.sbi (*)
2014-02-26 Includes\Malware-006.sbi (*)
2014-01-09 Includes\Malware-007.sbi (*)
2014-10-14 Includes\Malware-C.sbi (*)
2014-01-13 Includes\Malware.sbi (*)
2013-12-23 Includes\MalwareC.sbi (*)
2014-01-15 Includes\PUPS-000.sbi (*)
2014-01-15 Includes\PUPS-001.sbi (*)
2014-01-15 Includes\PUPS-002.sbi (*)
2014-10-22 Includes\PUPS-C.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2014-01-07 Includes\PUPSC.sbi (*)
2014-01-08 Includes\Security-000.sbi (*)
2014-01-08 Includes\Security-C.sbi (*)
2014-01-21 Includes\Security.sbi (*)
2014-01-21 Includes\SecurityC.sbi (*)
2014-01-08 Includes\Spyware-000.sbi (*)
2014-01-08 Includes\Spyware-001.sbi (*)
2014-01-08 Includes\Spyware-C.sbi (*)
2014-01-21 Includes\Spyware.sbi (*)
2014-01-21 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2014-01-15 Includes\Trojans-000.sbi (*)
2014-01-15 Includes\Trojans-001.sbi (*)
2014-01-15 Includes\Trojans-002.sbi (*)
2014-01-15 Includes\Trojans-003.sbi (*)
2014-01-15 Includes\Trojans-004.sbi (*)
2014-03-19 Includes\Trojans-005.sbi (*)
2014-07-09 Includes\Trojans-006.sbi (*)
2014-01-15 Includes\Trojans-007.sbi (*)
2014-07-09 Includes\Trojans-008.sbi (*)
2014-07-09 Includes\Trojans-009.sbi (*)
2014-10-22 Includes\Trojans-C.sbi (*)
2014-01-15 Includes\Trojans-OG-000.sbi (*)
2014-01-15 Includes\Trojans-TD-000.sbi (*)
2014-01-15 Includes\Trojans-VM-000.sbi (*)
2014-01-15 Includes\Trojans-VM-001.sbi (*)
2014-01-15 Includes\Trojans-VM-002.sbi (*)
2014-01-15 Includes\Trojans-VM-003.sbi (*)
2014-01-15 Includes\Trojans-VM-004.sbi (*)
2014-01-15 Includes\Trojans-VM-005.sbi (*)
2014-01-15 Includes\Trojans-VM-006.sbi (*)
2014-01-15 Includes\Trojans-VM-007.sbi (*)
2014-01-15 Includes\Trojans-VM-008.sbi (*)
2014-01-15 Includes\Trojans-VM-009.sbi (*)
2014-01-15 Includes\Trojans-VM-010.sbi (*)
2014-01-15 Includes\Trojans-VM-011.sbi (*)
2014-01-15 Includes\Trojans-VM-012.sbi (*)
2014-01-15 Includes\Trojans-VM-013.sbi (*)
2014-01-15 Includes\Trojans-VM-014.sbi (*)
2014-01-15 Includes\Trojans-VM-015.sbi (*)
2014-01-15 Includes\Trojans-VM-016.sbi (*)
2014-01-15 Includes\Trojans-VM-017.sbi (*)
2014-01-15 Includes\Trojans-VM-018.sbi (*)
2014-01-15 Includes\Trojans-VM-019.sbi (*)
2014-01-15 Includes\Trojans-VM-020.sbi (*)
2014-01-15 Includes\Trojans-VM-021.sbi (*)
2014-01-15 Includes\Trojans-VM-022.sbi (*)
2014-01-15 Includes\Trojans-VM-023.sbi (*)
2014-01-15 Includes\Trojans-VM-024.sbi (*)
2014-01-15 Includes\Trojans-ZB-000.sbi (*)
2014-01-15 Includes\Trojans-ZL-000.sbi (*)
2014-01-09 Includes\Trojans.sbi (*)
2014-01-16 Includes\TrojansC-01.sbi (*)
2014-01-16 Includes\TrojansC-02.sbi (*)
2014-01-16 Includes\TrojansC-03.sbi (*)
2014-01-16 Includes\TrojansC-04.sbi (*)
2014-01-16 Includes\TrojansC-05.sbi (*)
2014-01-09 Includes\TrojansC.sbi (*)

[i]	14-10-24 09:53:15		
[i]	14-10-24 09:53:15	Product	YourFileDownloader
[+]	14-10-24 09:53:15	Moving into quarantine	HKEY_LOCAL_MACHINE\SOFTWARE\YourFileDownloader
[+]	14-10-24 09:53:15	Successfully cleaned	HKEY_LOCAL_MACHINE\SOFTWARE\YourFileDownloader
[i]	14-10-24 09:53:15		
[i]	14-10-24 09:53:15	Product	Barowwsoe2Save
[+]	14-10-24 09:53:15	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Optimizer Pro
[+]	14-10-24 09:53:15	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Optimizer Pro
[i]	14-10-24 09:53:15		
[i]	14-10-24 09:53:15	Product	PCUtilities.OptimizerPro
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\Documents\Optimizer Pro\
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\Documents\Optimizer Pro\
[i]	14-10-24 09:53:15		
[i]	14-10-24 09:53:15	Product	Macromedia.FlashPlayer.Cookies
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\account.goodgamestudios.com\GGSAccount.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\cachebreaker.goodgamestudios.com\analytics.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\casino.skillonnet.com\Data.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\cdn.flashtalking.com\FT_cookie.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\clicktoview.org\com.jeroenwijering.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\fbstatic-a.akamaihd.net\play.spotify.com.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\games.mafa.com\analytics.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\h2r5i8s8.map2.ssl.hwcdn.net\analytics.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\hub.freshmilk.tv\analytics.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\images-na.ssl-images-amazon.com\mercury.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\ncookie.ranch.goodgamestudios.com\GoodgameRanch_1.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s-assets.tp-cdn.com\dealspot.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s.yimg.com\com.yahoo.yep.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s.ytimg.com\soundData.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\secureinclude.ebaystatic.com\ebayLSO.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\secureinclude.ebaystatic.com\ebayT.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\static.wix.com\WixComputerID.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\video.fashiondaily.tv\analytics.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.paypalobjects.com\PayPalLSO.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.paypalobjects.com\ppLsoTest.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www1.belboon.de\000020029.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\aa.online-metrix.net\fpc.swf\session.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\ndirect.ppro.de\vft\clickIDs.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\skype.com\#ui\preferences.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\games.mafa.com\3\Rapunzel-Playground-Accident.swf\flashgamesubmitter.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\play.snacktv.de\player\videoplayer.swf\SnackTV.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.filmon.com\#com.junkbyte\Console\UserData.sol
[+]	14-10-24 09:53:15	Moving into quarantine	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.kinderspelletjes.nl\spelswf\snoepfabriek.swf\ts_fabricsaga_1403221.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\account.goodgamestudios.com\GGSAccount.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\cachebreaker.goodgamestudios.com\analytics.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\casino.skillonnet.com\Data.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\cdn.flashtalking.com\FT_cookie.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\clicktoview.org\com.jeroenwijering.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\fbstatic-a.akamaihd.net\play.spotify.com.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\games.mafa.com\analytics.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\h2r5i8s8.map2.ssl.hwcdn.net\analytics.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\hub.freshmilk.tv\analytics.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\images-na.ssl-images-amazon.com\mercury.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\ncookie.ranch.goodgamestudios.com\GoodgameRanch_1.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s-assets.tp-cdn.com\dealspot.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s.yimg.com\com.yahoo.yep.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\s.ytimg.com\soundData.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\secureinclude.ebaystatic.com\ebayLSO.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\secureinclude.ebaystatic.com\ebayT.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\static.wix.com\WixComputerID.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\video.fashiondaily.tv\analytics.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.paypalobjects.com\PayPalLSO.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.paypalobjects.com\ppLsoTest.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www1.belboon.de\000020029.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\aa.online-metrix.net\fpc.swf\session.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\ndirect.ppro.de\vft\clickIDs.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\skype.com\#ui\preferences.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\games.mafa.com\3\Rapunzel-Playground-Accident.swf\flashgamesubmitter.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\play.snacktv.de\player\videoplayer.swf\SnackTV.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.filmon.com\#com.junkbyte\Console\UserData.sol
[+]	14-10-24 09:53:15	Successfully cleaned	C:\Users\tester\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\PPTV3GG9\www.kinderspelletjes.nl\spelswf\snoepfabriek.swf\ts_fabricsaga_1403221.sol
[i]	14-10-24 09:53:15		
[i]	14-10-24 09:53:15	Product	BurstMedia
[+]	14-10-24 09:53:15	Moving into quarantine	Cookie (Internet Explorer (Benutzer): tester)Cookie:tester@burstnet.com/ ()
[+]	14-10-24 09:53:15	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI81304)
[+]	14-10-24 09:53:15	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (TID)
[+]	14-10-24 09:53:15	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI77335)
[+]	14-10-24 09:53:15	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI77161)
[+]	14-10-24 09:53:15	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI76200)
[+]	14-10-24 09:53:15	Successfully cleaned	Cookie (Internet Explorer (Benutzer): tester)Cookie:tester@burstnet.com/ ()
[+]	14-10-24 09:53:15	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI81304)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (TID)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI77335)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI77161)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).burstnet.com/ (BI76200)
[i]	14-10-24 09:53:16		
[i]	14-10-24 09:53:16	Product	DoubleClick
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Internet Explorer (Benutzer): tester)Cookie:tester@doubleclick.net/ ()
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).doubleclick.net/ (id)
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).survey.g.doubleclick.net/ (PAIDCONTENT)
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).ad-emea.doubleclick.net/ (ebNewBandWidth_.ad-emea.doubleclick.net)
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531))ad-emea.doubleclick.net/ (axd)
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531))ad.doubleclick.net/ (axd)
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).doubleclick.net/ (_drt_)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Internet Explorer (Benutzer): tester)Cookie:tester@doubleclick.net/ ()
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).doubleclick.net/ (id)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).survey.g.doubleclick.net/ (PAIDCONTENT)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).ad-emea.doubleclick.net/ (ebNewBandWidth_.ad-emea.doubleclick.net)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531))ad-emea.doubleclick.net/ (axd)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531))ad.doubleclick.net/ (axd)
[+]	14-10-24 09:53:16	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).doubleclick.net/ (_drt_)
[i]	14-10-24 09:53:16		
[i]	14-10-24 09:53:16	Product	FastClick
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).fastclick.net/ (cttutcid)
[+]	14-10-24 09:53:16	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).fastclick.net/ (pluto)
[+]	14-10-24 09:53:17	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).fastclick.net/ (cttutcid)
[+]	14-10-24 09:53:17	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).fastclick.net/ (pluto)
[i]	14-10-24 09:53:17		
[i]	14-10-24 09:53:17	Product	MediaPlex
[+]	14-10-24 09:53:17	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (svid)
[+]	14-10-24 09:53:17	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (mojo2)
[+]	14-10-24 09:53:17	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).emjcd.com/ (S)
[+]	14-10-24 09:53:17	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).emjcd.com/ (LCLK)
[+]	14-10-24 09:53:17	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (rts)
[+]	14-10-24 09:53:17	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (mojo1)
[+]	14-10-24 09:53:17	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (mojo3)
[+]	14-10-24 09:53:17	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (svid)
[+]	14-10-24 09:53:17	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (mojo2)
[+]	14-10-24 09:53:17	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).emjcd.com/ (S)
[+]	14-10-24 09:53:17	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).emjcd.com/ (LCLK)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (rts)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (mojo1)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).mediaplex.com/ (mojo3)
[i]	14-10-24 09:53:18		
[i]	14-10-24 09:53:18	Product	Tradedoubler
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (GUID)
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (TradeDoublerGUID)
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (EH_0)
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (EH_1)
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531))solutions.tradedoubler.com/ (TD_SOFT)
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (BT)
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (PI)
[+]	14-10-24 09:53:18	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (UI)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (GUID)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (TradeDoublerGUID)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (EH_0)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (EH_1)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531))solutions.tradedoubler.com/ (TD_SOFT)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (BT)
[+]	14-10-24 09:53:18	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (PI)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).tradedoubler.com/ (UI)
[i]	14-10-24 09:53:19		
[i]	14-10-24 09:53:19	Product	Statcounter
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_unique_1)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_visitor_unique)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_unique_2)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_unique)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_unique_1)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_visitor_unique)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_unique_2)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).statcounter.com/ (is_unique)
[i]	14-10-24 09:53:19		
[i]	14-10-24 09:53:19	Product	WebTrends live
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531))statse.webtrendslive.com/ (ACOOKIE)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531))statse.webtrendslive.com/ (ACOOKIE)
[i]	14-10-24 09:53:19		
[i]	14-10-24 09:53:19	Product	CasaleMedia
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMPS)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMRUM2)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMST)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMDD)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMID)
[+]	14-10-24 09:53:19	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMTS)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMPS)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMRUM2)
[+]	14-10-24 09:53:19	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMST)
[+]	14-10-24 09:53:20	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMDD)
[+]	14-10-24 09:53:20	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMID)
[+]	14-10-24 09:53:20	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).casalemedia.com/ (CMTS)
[i]	14-10-24 09:53:20		
[i]	14-10-24 09:53:20	Product	Zedo
[+]	14-10-24 09:53:20	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).zedo.com/ (ZEDOIDA)
[+]	14-10-24 09:53:20	Moving into quarantine	Cookie (Firefox: tester (default-1414105285531)).zedo.com/ (FFIDA)
[+]	14-10-24 09:53:20	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).zedo.com/ (ZEDOIDA)
[+]	14-10-24 09:53:20	Successfully cleaned	Cookie (Firefox: tester (default-1414105285531)).zedo.com/ (FFIDA)
[i]	14-10-24 09:53:20		
[i]	14-10-24 09:53:20	Product	Internet Explorer
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Internet Explorer\TypedURLs
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Internet Explorer\Download Directory
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Internet Explorer\TypedURLs
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Internet Explorer\Download Directory
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
[i]	14-10-24 09:53:20		
[i]	14-10-24 09:53:20	Product	MS Management Console
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Microsoft Management Console\Recent File List
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Microsoft Management Console\Recent File List
[i]	14-10-24 09:53:20		
[i]	14-10-24 09:53:20	Product	MS Media Player
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
[i]	14-10-24 09:53:20		
[i]	14-10-24 09:53:20	Product	MS Direct3D
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Direct3D\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Direct3D\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name
[i]	14-10-24 09:53:20		
[i]	14-10-24 09:53:20	Product	MS DirectDraw
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Successfully cleaned	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name
[i]	14-10-24 09:53:20		
[i]	14-10-24 09:53:20	Product	MS DirectInput
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name
[+]	14-10-24 09:53:20	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	MS Paint
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	MS Regedit
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	Windows.OpenWith
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	Windows Explorer
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	Windows Media SDK
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-501\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	WinRAR
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\WinRAR\ArcHistory
[+]	14-10-24 09:53:21	Moving into quarantine	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\WinRAR\General\LastFolder
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\WinRAR\ArcHistory
[+]	14-10-24 09:53:21	Successfully cleaned	HKEY_USERS\S-1-5-21-3301257352-363032961-1859707185-1001\Software\WinRAR\General\LastFolder
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	Cookie
[+]	14-10-24 09:53:21	Moving into quarantine	Internet Explorer (Benutzer) (tester)Cookies
[+]	14-10-24 09:53:21	Moving into quarantine	Firefox (tester (default-1414105285531))Cookies
[+]	14-10-24 09:53:21	Successfully cleaned	Internet Explorer (Benutzer) (tester)Cookies
[+]	14-10-24 09:53:21	Successfully cleaned	Firefox (tester (default-1414105285531))Cookies
[i]	14-10-24 09:53:21		
[i]	14-10-24 09:53:21	Product	Cache
[+]	14-10-24 09:53:21	Moving into quarantine	Internet Explorer (Benutzer) (tester)Cache
[+]	14-10-24 09:53:23	Successfully cleaned	Internet Explorer (Benutzer) (tester)Cache
[i]	14-10-24 09:53:23		
[i]	14-10-24 09:53:23	Product	Verlauf
[+]	14-10-24 09:53:23	Moving into quarantine	Internet Explorer (Benutzer) (tester)History
[+]	14-10-24 09:53:23	Successfully cleaned	Internet Explorer (Benutzer) (tester)History
[i]	14-10-24 09:53:23		
[i]	14-10-24 09:53:23	Summary	
[i]	14-10-24 09:53:23	Errors while cleaning	0
[i]	14-10-24 09:53:23	Files moved into quarantine	115
[i]	14-10-24 09:53:23	Files successfully cleaned	115
Von spybot habe ich auch noch spätere scans wenn benötigt

nun die erwünschten textdateien

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:03 on 30/10/2014 (tester)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
Da die Dateien zu groß sind füge ich FRST.txt mit Additions.txt in den Anhang
Hoffe das ist in Ordnung

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-10-30 21:21:09
Windows 6.1.7601 Service Pack 1 x64 
Running: Gmer-19357.exe


---- Registry - GMER 2.1 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\CmdAgent\Mode\Configurations@SymbolicLinkValue                                                0x5C 0x00 0x52 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\CmdAgent\Mode\Data@SymbolicLinkValue                                                          0x5C 0x00 0x52 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\CmdAgent\Mode\Options@SymbolicLinkValue                                                       0x5C 0x00 0x52 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Teredo\PreviousState\00-26-5b-ee-2d-b2@TeredoAddress                                 2001:0:5ef5:79fd:38d1:b4d3:a0a4:290f
Reg  HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch@Epoch                                                                      11931
Reg  HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch2@Epoch                                                                     5734
Reg  HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{9B33729C-D774-44E8-933B-72A52F52CDBC}@DhcpIPAddress              192.168.0.12
Reg  HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{9B33729C-D774-44E8-933B-72A52F52CDBC}@LeaseObtainedTime          1414694578
Reg  HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{9B33729C-D774-44E8-933B-72A52F52CDBC}@T1                         1414996978
Reg  HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{9B33729C-D774-44E8-933B-72A52F52CDBC}@T2                         1415223778
Reg  HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{9B33729C-D774-44E8-933B-72A52F52CDBC}@LeaseTerminatesTime        1415299378
Reg  HKLM\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters\Interfaces\{9b33729c-d774-44e8-933b-72a52f52cdbc}@Dhcpv6MaxLeaseExpireTime  1414701331
Reg  HKLM\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters\Interfaces\{9b33729c-d774-44e8-933b-72a52f52cdbc}@Dhcpv6LeaseObtainedTime   1414695931
Reg  HKLM\SYSTEM\ControlSet002\services\CmdAgent\Mode\Configurations@SymbolicLinkValue                                                    0x5C 0x00 0x52 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\CmdAgent\Mode\Data@SymbolicLinkValue                                                              0x5C 0x00 0x52 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\CmdAgent\Mode\Options@SymbolicLinkValue                                                           0x5C 0x00 0x52 0x00 ...
Reg  HKLM\SYSTEM\Software\COMODO\Cam@SymbolicLinkValue                                                                                    0x5C 0x00 0x52 0x00 ...
Reg  HKLM\SYSTEM\Software\COMODO\Firewall Pro@SymbolicLinkValue                                                                           0x5C 0x00 0x52 0x00 ...

---- EOF - GMER 2.1 ----
Die erwünschten Logfiles habe ich vor dem PC Absturz erstellt.

Vielen Dank für eure Hilfe
Freue mich über Antwort und Rat

Alt 31.10.2014, 11:19   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Hi und

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 31.10.2014, 12:24   #3
maraidan
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


ok, danke, kein Problem dann schreibe ich die logs hier. Hatte eine automatische Nachricht bekomme das die Datei zu groß ist bzw mein Post zu groß und da kam der Tip zum anhängen, deshalb hab ichs so gemacht.


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014 01
Ran by tester (administrator) on COMPOSTER on 30-10-2014 20:07:39
Running from C:\Users\tester\Downloads
Loaded Profile: tester (Available profiles: tester & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Microsoft Corporation) C:\Windows\splwow64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.3.6321.0\AdAwareTray.exe [8886592 2014-08-27] ()
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1875048 2010-06-22] ()
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3301257352-363032961-1859707185-1001\...\Run: [Spotify Web Helper] => C:\Users\tester\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-04] (Spotify Ltd)
HKU\S-1-5-21-3301257352-363032961-1859707185-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-3301257352-363032961-1859707185-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x740F56F5FEF0CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\tester\AppData\Roaming\Mozilla\Firefox\Profiles\0qcpqacg.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @soft-xpansion/npsxpdf -> C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @phonostar.de/phonostar-Player -> C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\tester\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

Chrome: 
=======
CHR Profile: C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-17]
CHR Extension: (Google Drive) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-17]
CHR Extension: (YouTube) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-17]
CHR Extension: (Google Mail) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-17]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2014-02-27] (Comodo Security Solutions, Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-01-28] ()
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242912 2014-09-11] (Foxit Software Inc.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-08-14] (Freemake) [File not signed]
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-02-27] (Comodo Security Solutions, Inc.)
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.3.6321.0\AdAwareService.exe [706864 2014-08-27] ()
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [1340432 2014-09-25] (Lavasoft Limited)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2014-09-25] ()
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2014-03-09] (soft Xpansion)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] ()
R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2014-06-26] (Windows (R) Win 7 DDK provider) [File not signed]
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO)
R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2014-06-26] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-30] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [389240 2014-07-10] (BitDefender S.R.L.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-30 20:07 - 2014-10-30 20:08 - 00012411 _____ () C:\Users\tester\Downloads\FRST.txt
2014-10-30 20:07 - 2014-10-30 20:07 - 00000000 ____D () C:\FRST
2014-10-30 20:05 - 2014-10-30 20:05 - 02113536 _____ (Farbar) C:\Users\tester\Downloads\FRST64.exe
2014-10-30 20:03 - 2014-10-30 20:03 - 00000474 _____ () C:\Users\tester\Downloads\defogger_disable.log
2014-10-30 20:03 - 2014-10-30 20:03 - 00000000 _____ () C:\Users\tester\defogger_reenable
2014-10-30 20:01 - 2014-10-30 20:01 - 00050477 _____ () C:\Users\tester\Downloads\Defogger.exe
2014-10-30 16:20 - 2014-10-30 19:43 - 00000224 _____ () C:\Windows\setupact.log
2014-10-30 16:20 - 2014-10-30 16:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-30 14:32 - 2014-10-30 14:32 - 01706144 _____ (Thisisu) C:\Users\tester\Downloads\JRT.exe
2014-10-30 14:26 - 2014-10-30 14:26 - 01998336 _____ () C:\Users\tester\Downloads\AdwCleaner_4.002(1).exe
2014-10-30 14:17 - 2014-10-30 14:18 - 01705698 _____ (Thisisu) C:\Users\tester\Downloads\JRT633(1).exe
2014-10-30 14:17 - 2014-10-30 14:17 - 01705698 _____ (Thisisu) C:\Users\tester\Downloads\JRT633.exe
2014-10-30 13:09 - 2014-10-30 14:33 - 00000000 ____D () C:\Windows\ERUNT
2014-10-30 12:58 - 2014-10-30 12:58 - 01998336 _____ () C:\Users\tester\Downloads\AdwCleaner_4.002.exe
2014-10-30 12:50 - 2014-10-30 12:51 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Mozilla
2014-10-30 12:50 - 2014-10-30 12:50 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-30 12:50 - 2014-10-30 12:50 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-30 12:50 - 2014-10-30 12:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-30 12:50 - 2014-10-30 12:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-30 12:43 - 2014-10-30 12:43 - 00070264 _____ () C:\Users\tester\Documents\cc_20141030_124312.reg
2014-10-30 12:38 - 2014-10-30 12:38 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-10-30 12:38 - 2014-10-30 12:38 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-10-30 12:38 - 2014-10-30 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-10-30 12:38 - 2014-10-30 12:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-10-30 12:37 - 2014-10-30 12:38 - 04974864 _____ (Piriform Ltd) C:\Users\tester\Downloads\ccsetup419.exe
2014-10-30 08:36 - 2014-10-30 08:36 - 00000000 ____D () C:\Windows\Sun
2014-10-30 08:36 - 2014-10-30 08:36 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Oracle
2014-10-30 08:36 - 2014-10-30 08:36 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-30 08:34 - 2014-10-30 08:34 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-30 08:34 - 2014-10-30 08:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-30 08:34 - 2014-10-30 08:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-30 08:34 - 2014-10-30 08:34 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-30 08:34 - 2014-10-30 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-30 08:34 - 2014-10-30 08:34 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-30 01:45 - 2014-10-30 01:45 - 01206389 _____ () C:\Users\tester\Documents\Jobcenter-Bescheid.odt
2014-10-29 23:35 - 2014-10-29 23:35 - 00000000 ____D () C:\ProgramData\Sun
2014-10-29 23:31 - 2014-10-29 23:31 - 31473568 _____ (Oracle Corporation) C:\Users\tester\Downloads\jre-7u11-windows-i586.exe
2014-10-29 23:27 - 2014-10-29 23:27 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\tester\Downloads\mbam-setup-2.0.3.1025.exe
2014-10-29 23:08 - 2014-10-29 23:08 - 00053786 _____ () C:\Users\tester\Desktop\bookmarks-2014-10-29.json
2014-10-27 21:50 - 2014-10-27 21:50 - 00016223 _____ () C:\Users\tester\Documents\Jobcenter Mitwirkung.odt
2014-10-25 21:49 - 2014-10-30 10:01 - 00000000 ____D () C:\ProgramData\eMule
2014-10-25 21:49 - 2014-10-25 21:49 - 00000000 ____D () C:\Users\tester\Downloads\eMule
2014-10-25 21:48 - 2014-10-30 09:42 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-10-25 21:48 - 2014-10-25 21:49 - 00000000 ____D () C:\Users\tester\AppData\Local\Abelssoft
2014-10-25 21:48 - 2014-10-25 21:48 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-10-25 21:48 - 2014-10-25 21:48 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Abelssoft
2014-10-25 21:48 - 2014-10-25 21:48 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-10-25 21:46 - 2014-10-25 21:46 - 01125200 _____ () C:\Users\tester\Downloads\eMule - CHIP-Installer.exe
2014-10-25 00:00 - 2014-10-25 00:00 - 05184415 _____ (Igor Pavlov) C:\Users\tester\Downloads\DSACharGenV0.8.7update1_setup(1).exe
2014-10-25 00:00 - 2014-10-25 00:00 - 05124821 _____ () C:\Users\tester\Downloads\DSACharGenV0.8.7update1.jar
2014-10-24 23:51 - 2014-10-24 23:52 - 05184415 _____ (Igor Pavlov) C:\Users\tester\Downloads\DSACharGenV0.8.7update1_setup.exe
2014-10-24 12:59 - 2014-10-24 12:59 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-10-24 12:59 - 2014-10-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-10-24 12:59 - 2014-10-24 12:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-10-24 12:58 - 2014-10-24 12:58 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-10-24 12:58 - 2014-10-24 12:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-10-24 12:57 - 2012-10-03 15:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-10-24 12:56 - 2014-10-24 12:57 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-10-24 12:56 - 2014-10-24 12:57 - 00000000 ____D () C:\Program Files\iTunes
2014-10-24 12:56 - 2014-10-24 12:57 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-10-24 12:56 - 2014-10-24 12:56 - 00000000 ____D () C:\Program Files\iPod
2014-10-24 08:15 - 2014-10-24 08:53 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-24 08:15 - 2014-10-24 08:17 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-10-24 08:15 - 2014-10-24 08:15 - 00001391 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-10-24 08:15 - 2014-10-24 08:15 - 00001379 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-10-24 08:15 - 2014-10-24 08:15 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-10-24 08:15 - 2014-10-24 08:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-10-24 08:15 - 2013-09-20 09:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-10-24 08:13 - 2014-10-24 08:14 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\tester\Downloads\spybot-2.4.exe
2014-10-23 23:17 - 2014-10-24 08:03 - 00003210 _____ () C:\Windows\System32\Tasks\YourFileDownloader Installer Starter
2014-10-23 21:06 - 2014-10-30 16:24 - 00001340 _____ () C:\Windows\Tasks\QPQKN.job
2014-10-23 21:06 - 2014-10-23 21:06 - 00004370 _____ () C:\Windows\System32\Tasks\QPQKN
2014-10-23 21:04 - 2014-10-23 21:04 - 00000000 ____D () C:\Users\tester\AppData\Roaming\BandExtend
2014-10-23 21:02 - 2014-10-30 19:43 - 00001334 _____ () C:\Windows\Tasks\DK.job
2014-10-23 21:02 - 2014-10-23 21:02 - 00004364 _____ () C:\Windows\System32\Tasks\DK
2014-10-21 22:55 - 2014-10-21 22:57 - 250104428 _____ () C:\Users\tester\Downloads\bases(1).cav
2014-10-18 19:57 - 2014-10-18 19:57 - 00001674 _____ () C:\Users\tester\Desktop\Diner Dash - Flo On The Go.lnk
2014-10-18 19:55 - 2014-10-18 19:57 - 00000000 ____D () C:\Program Files (x86)\Diner Dash - Flo On The Go
2014-10-18 19:55 - 2014-10-18 19:55 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diner Dash - Flo On The Go
2014-10-18 19:55 - 2014-10-18 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diner Dash - Flo On The Go
2014-10-18 19:54 - 2014-10-18 19:56 - 00000000 ____D () C:\Users\tester\AppData\Roaming\PlayFirst
2014-10-18 19:54 - 2014-10-18 19:56 - 00000000 ____D () C:\ProgramData\PlayFirst
2014-10-18 19:54 - 2014-10-18 19:54 - 00001085 _____ () C:\Users\tester\Desktop\Diner Dash 2.lnk
2014-10-18 19:54 - 2014-10-18 19:54 - 00001085 _____ () C:\Users\Gast\Desktop\Diner Dash 2.lnk
2014-10-18 19:54 - 2014-10-18 19:54 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diner Dash 2
2014-10-18 19:54 - 2014-10-18 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diner Dash 2
2014-10-18 19:53 - 2014-10-21 18:57 - 00000000 ____D () C:\Program Files (x86)\Diner Dash
2014-10-18 19:53 - 2014-10-18 19:53 - 00001917 _____ () C:\Users\tester\Desktop\Diner Dash.lnk
2014-10-18 19:53 - 2014-10-18 19:53 - 00001917 _____ () C:\Users\Gast\Desktop\Diner Dash.lnk
2014-10-18 19:53 - 2014-10-18 19:53 - 00000000 ____D () C:\Windows\Diner Dash
2014-10-18 19:53 - 2014-10-18 19:53 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diner Dash
2014-10-18 19:53 - 2014-10-18 19:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diner Dash
2014-10-18 19:53 - 2014-10-18 19:53 - 00000000 ____D () C:\Program Files (x86)\Diner Dash 2
2014-10-18 19:47 - 2014-10-30 20:00 - 00000000 ____D () C:\Users\tester\AppData\Roaming\uTorrent
2014-10-17 23:31 - 2014-10-17 23:31 - 00000000 ____D () C:\Users\tester\Documents\my games
2014-10-17 22:35 - 2014-10-17 22:35 - 00000222 _____ () C:\Users\tester\Desktop\XCOM Enemy Unknown.url
2014-10-17 21:32 - 2014-10-17 21:32 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-10-17 21:14 - 2014-10-30 14:42 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-10-17 21:14 - 2014-10-17 21:14 - 00002539 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-10-17 21:14 - 2014-10-17 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-10-17 21:13 - 2010-06-02 03:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-10-17 21:13 - 2008-07-31 09:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-10-17 21:13 - 2008-07-31 09:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-10-17 21:13 - 2008-07-31 09:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-10-17 21:13 - 2008-07-31 09:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-10-17 21:12 - 2008-07-31 09:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-10-17 21:12 - 2008-07-31 09:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-10-17 21:12 - 2008-07-10 10:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-10-17 21:12 - 2008-05-30 13:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-10-17 21:12 - 2008-05-30 13:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-10-17 21:12 - 2008-05-30 13:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-10-17 21:12 - 2008-05-30 13:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-10-17 21:12 - 2008-05-30 13:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-10-17 21:12 - 2008-05-30 13:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-10-17 21:12 - 2008-05-30 13:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-10-17 21:12 - 2008-05-30 13:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-10-17 21:12 - 2008-03-05 15:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-10-17 21:12 - 2008-03-05 15:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-10-17 21:12 - 2008-03-05 15:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-10-17 21:12 - 2008-03-05 15:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-10-17 21:12 - 2008-03-05 15:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-10-17 21:12 - 2008-03-05 15:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-10-17 21:12 - 2008-02-05 22:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-10-17 21:12 - 2008-02-05 22:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-10-17 21:12 - 2007-10-22 02:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-10-17 21:12 - 2007-10-22 02:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-10-17 21:12 - 2007-10-22 02:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-10-17 21:12 - 2007-10-22 02:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-10-17 21:12 - 2007-10-02 08:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-10-17 21:12 - 2007-10-02 08:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-10-17 21:12 - 2007-07-19 23:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-10-17 21:12 - 2007-07-19 23:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-10-17 21:12 - 2007-06-20 19:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-10-17 21:12 - 2007-06-20 19:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-10-17 21:12 - 2007-04-04 17:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-10-17 21:12 - 2007-04-04 17:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-10-17 21:12 - 2007-04-04 17:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-10-17 21:12 - 2007-04-04 17:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-10-17 21:12 - 2007-03-15 15:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-10-17 21:12 - 2007-03-15 15:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-10-17 21:12 - 2007-03-05 11:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-10-17 21:12 - 2007-03-05 11:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-10-17 21:12 - 2007-01-24 14:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-10-17 21:12 - 2007-01-24 14:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-10-17 21:12 - 2006-12-08 11:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-10-17 21:12 - 2006-12-08 11:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-10-17 21:12 - 2006-09-28 15:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-10-17 21:12 - 2006-09-28 15:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-10-17 21:12 - 2006-09-28 15:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-10-17 21:12 - 2006-09-28 15:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-10-17 21:12 - 2006-07-28 08:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-10-17 21:12 - 2006-07-28 08:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-10-17 21:12 - 2006-07-28 08:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-10-17 21:12 - 2006-07-28 08:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-10-17 21:12 - 2006-05-31 06:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-10-17 21:12 - 2006-05-31 06:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-10-17 21:12 - 2006-03-31 11:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-10-17 21:12 - 2006-03-31 11:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-10-17 21:12 - 2006-03-31 11:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-10-17 21:12 - 2006-03-31 11:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-10-17 21:12 - 2006-03-31 11:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-10-17 21:12 - 2006-03-31 11:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-10-17 21:12 - 2006-02-03 07:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-10-17 21:12 - 2006-02-03 07:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-10-17 21:12 - 2006-02-03 07:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-10-17 21:12 - 2006-02-03 07:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-10-17 21:12 - 2006-02-03 07:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-10-17 21:12 - 2006-02-03 07:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-10-17 21:12 - 2005-12-05 17:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-10-17 21:12 - 2005-12-05 17:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-10-17 21:12 - 2005-07-22 18:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-10-17 21:12 - 2005-07-22 18:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-10-17 21:12 - 2005-05-26 14:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-10-17 21:12 - 2005-05-26 14:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-10-17 21:12 - 2005-03-18 16:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-10-17 21:12 - 2005-03-18 16:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-10-17 21:12 - 2005-02-05 18:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-10-17 21:12 - 2005-02-05 18:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-10-17 08:59 - 2014-10-17 08:59 - 01054912 _____ (Adobe) C:\Users\tester\Downloads\install_flashplayer15x32au_mssa_aaa_aih.exe
2014-10-16 09:25 - 2014-10-16 09:26 - 00000000 ____D () C:\Windows\rescache
2014-10-15 08:08 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 08:08 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 08:08 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 08:08 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 08:08 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-15 08:08 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-15 08:08 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-15 08:08 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-15 08:08 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-15 08:08 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-15 08:08 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-15 08:08 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 08:08 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 08:08 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 08:08 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-15 08:08 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 08:08 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 08:08 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 08:08 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 08:08 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-15 08:08 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 08:08 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-15 08:08 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 08:08 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 08:08 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-15 08:08 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-15 08:08 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-15 08:08 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-15 08:08 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-15 08:08 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-15 08:08 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-15 08:08 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-15 08:08 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 08:08 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 08:08 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-15 08:08 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-15 08:08 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-15 08:08 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 08:08 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-15 08:08 - 2014-08-19 04:11 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-10-15 08:08 - 2014-08-19 04:10 - 00616352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-10-15 08:08 - 2014-08-19 04:08 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-10-15 08:08 - 2014-08-19 04:08 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-15 08:08 - 2014-08-19 04:08 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-10-15 08:08 - 2014-08-19 04:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-10-15 08:08 - 2014-08-19 04:07 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 08:08 - 2014-08-19 04:07 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-15 08:08 - 2014-08-19 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-15 08:08 - 2014-08-19 04:07 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 08:08 - 2014-08-19 03:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2014-10-15 08:08 - 2014-08-19 03:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-10-15 08:08 - 2014-08-19 03:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-15 08:08 - 2014-07-07 03:07 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-15 08:08 - 2014-07-07 03:07 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-15 08:08 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 05551032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-15 08:08 - 2014-07-07 03:06 - 04120576 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-15 08:08 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-15 08:08 - 2014-07-07 03:06 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-15 08:08 - 2014-07-07 03:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-15 08:08 - 2014-07-07 03:05 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-15 08:08 - 2014-07-07 03:05 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-15 08:08 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-15 08:08 - 2014-07-07 02:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-15 08:08 - 2014-07-07 02:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2014-10-15 08:08 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2014-10-15 08:08 - 2014-07-07 02:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-10-15 08:08 - 2014-07-07 02:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-10-15 08:08 - 2014-07-07 02:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-10-15 08:08 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-10-15 08:08 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-10-15 08:08 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-10-15 08:08 - 2014-06-28 01:21 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-15 08:08 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-15 08:08 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 08:07 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 08:07 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 08:07 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 08:07 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 08:07 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 08:07 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 08:07 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 08:07 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 08:07 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 08:07 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 08:07 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-15 08:07 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 08:07 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 08:07 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-15 08:07 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 08:07 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 08:07 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 08:07 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-15 08:07 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-15 08:07 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 08:07 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-15 08:07 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-15 08:07 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-15 08:07 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 08:07 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-15 08:07 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 08:07 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-15 08:07 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 08:07 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 08:07 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-15 08:07 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-15 08:07 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 08:07 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-12 13:33 - 2014-10-12 22:15 - 00048128 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-10-12 13:33 - 2014-10-12 13:33 - 00000000 ___HD () C:\VTRoot
2014-10-12 01:06 - 2014-10-12 01:06 - 00000000 ____D () C:\Users\tester\Documents\Diablo III
2014-10-12 00:34 - 2014-10-12 00:34 - 00001156 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-10-12 00:19 - 2014-10-12 01:06 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-10-12 00:19 - 2014-10-12 00:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2014-10-10 21:03 - 2014-10-20 11:29 - 00000000 ____D () C:\Users\tester\AppData\Local\Battle.net
2014-10-10 21:03 - 2014-10-11 23:47 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Battle.net
2014-10-10 21:03 - 2014-10-10 21:03 - 00001118 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\Users\tester\AppData\Local\Blizzard Entertainment
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-10-10 21:02 - 2014-10-10 21:02 - 00000000 ____D () C:\ProgramData\Battle.net
2014-10-09 21:52 - 2014-10-21 17:06 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Foxit Software
2014-10-09 21:52 - 2014-10-09 21:52 - 00001351 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk
2014-10-09 21:52 - 2014-10-09 21:52 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-10-09 21:52 - 2014-10-09 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-10-09 21:52 - 2014-10-09 21:52 - 00000000 ____D () C:\Program Files (x86)\Foxit Software
2014-10-09 21:24 - 2014-10-09 21:24 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-10-09 21:24 - 2014-10-09 21:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-09 21:24 - 2014-10-09 21:24 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-10-09 21:24 - 2014-02-26 14:16 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-10-09 21:19 - 2014-10-09 21:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-10-09 21:19 - 2014-10-09 21:19 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-09 21:18 - 2014-10-30 14:28 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-09 21:14 - 2014-10-09 21:15 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-10-09 21:13 - 2014-10-09 21:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-10-09 21:11 - 2010-06-09 18:49 - 19107944 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 14513768 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 14097000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 13151336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-10-09 21:11 - 2010-06-09 18:49 - 12396136 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 10267240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 06086760 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 04992104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 04531816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 03062888 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02806376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02500712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02336360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02025064 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 01617512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00930272 _____ (Microsoft Corporation) C:\Windows\system32\dpinst.exe
2014-10-09 21:11 - 2010-06-09 18:49 - 00406120 _____ (NVIDIA Corporation) C:\Windows\system32\nvdecodemft.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00331368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvdecodemft.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00255592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod1921.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00255592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00065128 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00056936 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00011240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd
2014-10-09 21:11 - 2010-06-09 18:49 - 00011114 _____ () C:\Windows\system32\nvinfo.pb
2014-10-09 21:10 - 2014-10-30 19:43 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-09 21:10 - 2014-10-09 21:10 - 00000000 ____D () C:\ProgramData\Auslogics
2014-10-09 21:08 - 2014-10-29 23:28 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-09 21:08 - 2014-10-29 23:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-10-09 21:07 - 2014-10-29 23:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-10-09 21:07 - 2014-10-09 21:07 - 00001169 _____ () C:\Users\tester\Desktop\Auslogics DiskDefrag.lnk
2014-10-09 21:07 - 2014-10-09 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2014-10-09 21:07 - 2014-10-09 21:07 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-09 21:07 - 2014-10-09 21:07 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2014-10-09 21:07 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-09 21:07 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-09 21:07 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-09 21:06 - 2014-10-09 21:06 - 06580960 _____ (Auslogics Labs Pty Ltd ) C:\Users\tester\Downloads\disk-defrag-setup.exe
2014-10-09 21:05 - 2014-10-09 21:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tester\Downloads\mbam-setup-2.0.2.1012.exe
2014-10-09 21:05 - 2014-10-09 21:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tester\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-10-09 21:03 - 2014-10-26 20:32 - 00066064 _____ () C:\Users\tester\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-09 21:02 - 2014-10-30 20:02 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-10-09 21:02 - 2014-10-09 21:03 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-10-09 21:02 - 2014-10-09 21:02 - 02865688 _____ (Intel Corporation) C:\Users\tester\Downloads\INF_allOS_9.1.2.1008_PV.exe
2014-10-09 21:02 - 2014-10-09 21:02 - 00001888 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2014-10-09 21:01 - 2014-10-09 21:02 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-10-09 20:55 - 2014-10-09 20:55 - 00001175 _____ () C:\Users\tester\Desktop\AIDA64 Extreme.lnk
2014-10-09 20:55 - 2014-10-09 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2014-10-09 20:55 - 2014-10-09 20:55 - 00000000 ____D () C:\Program Files (x86)\FinalWire
2014-10-09 20:54 - 2014-10-09 20:54 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Wise Registry Cleaner
2014-10-09 20:53 - 2014-10-09 20:53 - 00000000 ____D () C:\Windows\pss
2014-10-09 20:52 - 2014-10-09 21:14 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Wise Disk Cleaner
2014-10-09 20:51 - 2014-10-09 20:51 - 00000000 ____D () C:\Users\tester\AppData\Roaming\WinRAR
2014-10-09 20:50 - 2014-10-09 20:50 - 02034504 _____ () C:\Users\tester\Downloads\winrar-x64-511d.exe
2014-10-09 20:50 - 2014-10-09 20:50 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-09 20:50 - 2014-10-09 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-09 20:50 - 2014-10-09 20:50 - 00000000 ____D () C:\Program Files\WinRAR
2014-10-09 20:48 - 2014-10-09 20:48 - 15217928 _____ (FinalWire Ltd. ) C:\Users\tester\Downloads\aida64extreme470.exe
2014-10-09 20:32 - 2014-10-09 20:32 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-10-09 20:32 - 2014-10-09 20:32 - 00001162 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-10-09 20:32 - 2014-10-09 20:32 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-10-07 23:51 - 2014-10-07 23:51 - 00000000 ____D () C:\Users\tester\AppData\Roaming\LavasoftStatistics
2014-10-07 23:50 - 2014-10-07 23:50 - 00004560 _____ () C:\Windows\SysWOW64\LavasoftTcpService.ini
2014-10-07 23:50 - 2014-10-07 23:50 - 00002416 _____ () C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2014-10-07 23:50 - 2014-10-07 23:50 - 00002416 _____ () C:\Windows\system32\LavasoftTcpServiceOff.ini
2014-10-07 23:50 - 2014-10-07 23:50 - 00002165 _____ () C:\Users\Public\Desktop\Web Companion.lnk
2014-10-07 23:50 - 2014-10-07 23:50 - 00000000 ____D () C:\Users\tester\AppData\Local\Lavasoft
2014-10-07 23:50 - 2014-10-07 23:50 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-10-07 23:50 - 2014-09-25 13:44 - 00346976 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2014-10-07 23:50 - 2014-09-25 13:44 - 00303728 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2014-10-07 23:49 - 2014-10-30 14:30 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2014-10-07 23:49 - 2014-10-07 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2014-10-07 23:49 - 2014-10-07 23:49 - 00000000 ____D () C:\Program Files\Lavasoft
2014-10-07 23:48 - 2014-10-07 23:48 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Lavasoft
2014-10-07 23:45 - 2014-10-07 23:45 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-10-07 23:42 - 2014-10-07 23:49 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-10-07 23:42 - 2014-10-07 23:42 - 02806920 _____ () C:\Users\tester\Downloads\Adaware_Installer_11.3.exe
2014-10-07 23:28 - 2014-10-09 21:01 - 00000000 ____D () C:\Program Files\COMODO
2014-10-07 23:28 - 2014-10-07 23:28 - 00002013 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-10-07 23:27 - 2014-10-09 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-10-07 23:27 - 2014-10-07 23:27 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-10-07 23:27 - 2014-10-07 23:27 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-10-07 23:27 - 2014-10-07 23:27 - 00001116 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-10-07 23:27 - 2014-10-07 23:27 - 00000000 ____D () C:\Users\tester\AppData\Local\Comodo
2014-10-07 23:27 - 2014-10-07 23:27 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-10-07 23:27 - 2014-10-07 23:27 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-10-07 23:26 - 2014-10-09 21:02 - 00000000 ____D () C:\ProgramData\Comodo
2014-10-07 23:23 - 2010-08-30 07:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-10-07 23:21 - 2014-10-30 14:27 - 00000000 ____D () C:\AdwCleaner
2014-10-07 23:21 - 2014-10-07 23:21 - 01375089 _____ () C:\Users\tester\Downloads\adwcleaner_3.311.exe
2014-10-02 13:23 - 2014-10-02 13:23 - 00094208 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTimeVR.qtx
2014-10-02 13:23 - 2014-10-02 13:23 - 00069632 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTime.qts
2014-10-01 16:27 - 2014-10-23 21:16 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Skype
2014-10-01 16:27 - 2014-10-01 16:28 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-10-01 16:27 - 2014-10-01 16:27 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-10-01 16:27 - 2014-10-01 16:27 - 00000000 ____D () C:\Users\tester\AppData\Local\Skype
2014-10-01 16:27 - 2014-10-01 16:27 - 00000000 ____D () C:\ProgramData\Skype
2014-10-01 16:27 - 2014-10-01 16:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-01 15:45 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 15:45 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-30 20:03 - 2013-12-04 11:14 - 00000000 ____D () C:\Users\tester
2014-10-30 19:47 - 2014-02-06 15:50 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-30 19:42 - 2013-12-04 11:06 - 01612627 _____ () C:\Windows\WindowsUpdate.log
2014-10-30 14:45 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-30 14:45 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-30 14:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-30 13:10 - 2011-03-20 13:35 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2014-10-30 13:10 - 2011-03-20 13:35 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2014-10-30 13:10 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-30 13:01 - 2013-12-04 11:14 - 00000997 _____ () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-29 23:54 - 2010-11-21 08:17 - 00000000 ____D () C:\Windows\ShellNew
2014-10-29 23:05 - 2014-02-23 18:49 - 00013527 _____ () C:\Users\tester\Desktop\kitchen.odt
2014-10-26 19:52 - 2009-07-14 05:45 - 00299344 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-25 22:10 - 2014-02-11 23:49 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Spotify
2014-10-25 12:49 - 2014-03-09 21:34 - 00000000 ____D () C:\Users\tester\AppData\Local\Adobe
2014-10-25 12:49 - 2014-02-06 15:50 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-25 12:49 - 2014-02-06 15:50 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-25 12:49 - 2014-02-06 15:50 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-24 12:56 - 2014-05-07 09:02 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-10-24 09:30 - 2014-02-11 23:49 - 00000000 ____D () C:\Users\tester\AppData\Local\Spotify
2014-10-24 07:57 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media
2014-10-23 21:06 - 2014-05-17 15:23 - 00000000 ____D () C:\Program Files (x86)\Google
2014-10-20 10:19 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-19 17:09 - 2014-05-18 16:39 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-10-19 17:09 - 2014-02-06 15:50 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Macromedia
2014-10-17 22:11 - 2014-05-18 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2014-10-17 22:10 - 2014-05-18 16:22 - 00000000 ____D () C:\Program Files (x86)\EA GAMES
2014-10-16 08:00 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-10-16 08:00 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-16 07:57 - 2014-05-08 09:02 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-16 07:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-10-16 07:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-10-15 23:41 - 2013-12-04 11:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-15 23:38 - 2013-12-04 11:08 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-12 00:34 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-11 23:50 - 2014-09-19 12:50 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-10-09 22:00 - 2014-03-11 10:49 - 00001062 _____ () C:\Users\Public\Desktop\PDF-Viewer.lnk
2014-10-09 22:00 - 2014-02-06 04:34 - 00001011 _____ () C:\Users\Public\Desktop\DriverEasy.lnk
2014-10-09 22:00 - 2014-02-06 04:21 - 00001050 _____ () C:\Users\tester\Desktop\Unknown Device Identifier.lnk
2014-10-09 21:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Web
2014-10-09 21:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-10-09 20:58 - 2013-12-04 20:01 - 00000000 ____D () C:\Windows\Panther
2014-10-09 20:19 - 2013-12-04 15:44 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-10-07 23:31 - 2014-02-11 23:49 - 00002032 _____ () C:\Users\tester\Desktop\Spotify.lnk

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-27 12:56

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2014 01
Ran by tester at 2014-10-30 20:08:19
Running from C:\Users\tester\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)


==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Ad-Aware Antivirus (HKLM\...\{E39A80AE-0CC0-43EE-AB6B-BE11DC4F969F}_AdAwareUpdater) (Version: 11.3.6321.0 - Lavasoft)
Ad-Aware Web Companion (x32 Version: 1.0.702.1343 - Lavasoft) Hidden
AdAwareInstaller (Version: 11.3.6321.0 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.3.6321.0 - Lavasoft) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AIDA64 Extreme v4.70 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 4.70 - FinalWire Ltd.)
AntimalwareEngine (Version: 3.0.0.56 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 4.5.4.0 - Auslogics Labs Pty Ltd)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 31.1.0.0 - COMODO)
COMODO Internet Security Premium (HKLM\...\{2736B6BD-31EC-4FC8-A48C-F0A5C914C0B6}) (Version: 7.0.55655.4142 - COMODO Security Solutions Inc.)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Diner Dash (HKLM-x32\...\Diner Dash1.0 (Cracked By CoffeeMan)) (Version: 1.0 (Cracked By CoffeeMan) - Sir Galahad)
doPDF 7.3 printer (HKLM\...\doPDF 7 printer_is1) (Version: 7.3.393 - Softland)
DriverEasy 4.6.5 (HKLM\...\DriverEasy_is1) (Version: 4.6.5.0 - Easeware)
Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 2.1.32.905 - Foxit Software Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.0.3.916 - Foxit Software Inc.)
Freemake Video Converter Version 4.1.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation)
GeekBuddy (HKLM\...\{C36B3AE4-FCFE-4A0A-AA3D-71E1A51C1F16}) (Version: 4.11.91 - Comodo Security Solutions Inc)
iCloud (HKLM\...\{6096C0CC-7E19-4355-87F0-627EC5AA146D}) (Version: 4.0.3.56 - Apple Inc.)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
LavasoftTcpService (x32 Version: 2.2.9.5 - Lavasoft) Hidden
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.2 (x86 de)) (Version: 33.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
MyHeritage Family Tree Builder (HKLM-x32\...\Family Tree Builder) (Version: 7.0.0.7129 - MyHeritage.com)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5849 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.61.39 - NVIDIA Corporation)
NVIDIA nView Desktop Manager (HKLM\...\NVIDIA nView Desktop Manager) (Version: 6.14.10.13524 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.5812 - NVIDIA Corporation)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.2 - Tracker Software Products Ltd)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Ravensburger tiptoi (HKLM-x32\...\Ravensburger tiptoi) (Version:  - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unknown Device Identifier 8.00 (HKLM\...\Unknown Device Identifier_is1) (Version:  - Huntersoft)
Web Companion (HKLM-x32\...\{8FD9BD1E-B26C-4688-9840-75E6F9EA4E3A}_WebCompanion) (Version: 1.0.702.1343 - Lavasoft)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
Wizard101(DE) (HKCU\...\Wizard101(DE)_is1) (Version:  - Gameforge 4D GmbH)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {16F8E718-90E9-4735-882F-C26108053ED0} - System32\Tasks\DK => C:\Users\tester\AppData\Roaming\DK.exe <==== ATTENTION
Task: {24578858-9E37-4667-B995-2001B18D12DC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: {2C183499-45B9-43E5-93C0-D7C39943D496} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {35E02BEF-E44D-444B-9D13-0C3251F3DAA4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {63AA6E90-877D-4A8E-8360-4E17ED9DCD06} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-25] (Adobe Systems Incorporated)
Task: {91507CBE-21EF-458E-B370-43676099618B} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO)
Task: {93C8058D-4358-4799-95A2-7472B5D1A05D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {A9397B46-2240-448A-9B61-ED1A04A1672B} - System32\Tasks\QPQKN => C:\Users\tester\AppData\Roaming\QPQKN.exe <==== ATTENTION
Task: {AA3DA200-F735-4D02-AB1D-DABB256C9AA9} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO)
Task: {B571A908-4770-4A94-B196-F3138795D6F8} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO)
Task: {B8EE06FE-881B-40B6-99EA-320DFA9E1011} - System32\Tasks\YourFileDownloader Installer Starter => C:\Users\tester\AppData\Local\Temp\YourFileDownloaderu8YDvMvtPD.exe <==== ATTENTION
Task: {DE63B9E8-83F5-4919-8B3F-D84DF2A1A1B0} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO)
Task: {E4E840A5-58FB-4660-B919-90C924251059} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {F0D60764-8C48-4ED6-A4D3-C23F4920D215} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DK.job => C:\Users\tester\AppData\Roaming\DK.exe <==== ATTENTION
Task: C:\Windows\Tasks\QPQKN.job => C:\Users\tester\AppData\Roaming\QPQKN.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-10-09 21:15 - 2010-06-22 13:03 - 00615016 _____ () C:\Program Files\NVIDIA Corporation\nView\nvshell.dll
2014-10-23 20:19 - 2014-10-23 20:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LavasoftTcpService => ""="service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Start GeekBuddy.lnk => C:\Windows\pss\Start GeekBuddy.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: clicup-Agent => C:\Users\tester\AppData\Local\Temp\clicup\clicup.exe
MSCONFIG\startupreg: Family Tree Builder Update => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
MSCONFIG\startupreg: InetStat => C:\Users\tester\AppData\Roaming\InetStat\inetstat.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: phonostar-PlayerTimer => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\tester\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: tvncontrol => "C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
MSCONFIG\startupreg: Web Companion => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize

========================= Accounts: ==========================

Administrator (S-1-5-21-3301257352-363032961-1859707185-500 - Administrator - Disabled)
Gast (S-1-5-21-3301257352-363032961-1859707185-501 - Limited - Enabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-3301257352-363032961-1859707185-1002 - Limited - Enabled)
tester (S-1-5-21-3301257352-363032961-1859707185-1001 - Administrator - Enabled) => C:\Users\tester

==================== Faulty Device Manager Devices =============

Could not list Devices. Check "winmgmt" service or repair WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/30/2014 02:29:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/30/2014 01:46:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (10/30/2014 01:45:55 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎10.‎2014 um 13:44:21 unerwartet heruntergefahren.

Error: (10/30/2014 01:44:05 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (10/30/2014 01:06:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (10/30/2014 01:06:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (10/30/2014 01:06:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/30/2014 01:06:03 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (10/30/2014 01:06:03 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (10/30/2014 11:30:44 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (10/30/2014 08:25:34 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst TeamViewer9 erreicht.

Error: (10/29/2014 11:57:40 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst TeamViewer9 erreicht.


Microsoft Office Sessions:
=========================
Error: (10/30/2014 02:29:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/30/2014 01:46:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (10/30/2014 01:05:57 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (10/30/2014 01:05:47 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
4700
__________________
Alt 31.10.2014, 14:11   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Zitat:
Diner Dash (HKLM-x32\...\Diner Dash1.0 (Cracked By CoffeeMan)) (Version: 1.0 (Cracked By CoffeeMan) - Sir Galahad)
Wo haste das denn her?
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 31.10.2014, 14:29   #5
maraidan
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Hat mir ein Kumpel aus dem Internet gesucht, weil ich sonst immer ähnliche Spiele bei Facebook spiele.
Soll ich es entfernen? vielleicht hab ich mir dadurch was eingefangen?


Alt 31.10.2014, 16:14   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    Diner Dash

  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 

__________________
--> Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall

Alt 31.10.2014, 17:19   #7
maraidan
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


ok gut hab ich erledigt.

Alt 01.11.2014, 01:18   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Gut

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 01.11.2014, 10:01   #9
maraidan
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


alles erledigt.
AdwCleaner
Code:
ATTFilter
# AdwCleaner v4.002 - Bericht erstellt am 01/11/2014 um 09:12:16
# DB v2014-10-26.6
# Aktualisiert 27/10/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : tester - COMPOSTER
# Gestartet von : C:\Users\tester\Downloads\AdwCleaner_4.002.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\adawarebp

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v33.0.2 (x86 de)


-\\ Google Chrome v


*************************

AdwCleaner[R4].txt - [869 octets] - [01/11/2014 09:09:55]
AdwCleaner[S3].txt - [783 octets] - [01/11/2014 09:12:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [842 octets] ##########
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.5 (10.31.2014:1)
OS: Windows 7 Professional x64
Ran by tester on 01.11.2014 at  9:27:20,78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.11.2014 at  9:38:58,12
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
bei JRT hatte ich das Problem das ich die alte Datei nicht komplett runterbekommen habe(wird mir auch nicht in der Systemsteuerung angezeigt) und eine Fehlermeldung bekommen habe. Der scan ging nun trotzdem

FRST


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014 01
Ran by tester (administrator) on COMPOSTER on 01-11-2014 09:47:00
Running from C:\Users\tester\Downloads
Loaded Profile: tester (Available profiles: tester & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1875048 2010-06-22] ()
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3301257352-363032961-1859707185-1001\...\Run: [Spotify Web Helper] => C:\Users\tester\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-04] (Spotify Ltd)
HKU\S-1-5-21-3301257352-363032961-1859707185-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-3301257352-363032961-1859707185-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x740F56F5FEF0CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\tester\AppData\Roaming\Mozilla\Firefox\Profiles\0qcpqacg.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @soft-xpansion/npsxpdf -> C:\Program Files (x86)\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: @phonostar.de/phonostar-Player -> C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\tester\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

Chrome: 
=======
CHR Profile: C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-17]
CHR Extension: (Google Drive) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-17]
CHR Extension: (YouTube) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-17]
CHR Extension: (Google Mail) - C:\Users\tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-17]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2014-02-27] (Comodo Security Solutions, Inc.)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-01-28] ()
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242912 2014-09-11] (Foxit Software Inc.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-08-14] (Freemake) [File not signed]
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-02-27] (Comodo Security Solutions, Inc.)
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [1340432 2014-09-25] (Lavasoft Limited)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2014-09-25] ()
S3 SXDS10; C:\Program Files (x86)\Common Files\soft Xpansion\sxds10.exe [234096 2014-03-09] (soft Xpansion)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] ()
R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2014-06-26] (Windows (R) Win 7 DDK provider) [File not signed]
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO)
R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2014-06-26] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-01 09:46 - 2014-11-01 09:46 - 02113536 _____ (Farbar) C:\Users\tester\Downloads\FRST64.exe
2014-11-01 09:26 - 2014-11-01 09:26 - 00000000 ____D () C:\Windows\ERUNT
2014-11-01 09:18 - 2014-11-01 09:19 - 01706359 _____ (Thisisu) C:\Users\tester\Downloads\JRT.exe
2014-11-01 09:13 - 2014-11-01 09:13 - 00000312 _____ () C:\Windows\PFRO.log
2014-11-01 09:09 - 2014-11-01 09:12 - 00000000 ____D () C:\AdwCleaner
2014-11-01 09:09 - 2014-11-01 09:09 - 01998336 _____ () C:\Users\tester\Downloads\AdwCleaner_4.002.exe
2014-11-01 09:01 - 2014-10-30 14:27 - 00001227 _____ () C:\Users\tester\Documents\AdwCleaner[S2].txt
2014-11-01 09:01 - 2014-10-30 14:27 - 00001173 _____ () C:\Users\tester\Documents\AdwCleaner[R3].txt
2014-11-01 09:01 - 2014-10-30 13:01 - 00008521 _____ () C:\Users\tester\Documents\AdwCleaner[S1].txt
2014-11-01 09:01 - 2014-10-30 13:00 - 00008447 _____ () C:\Users\tester\Documents\AdwCleaner[R2].txt
2014-11-01 09:01 - 2014-10-07 23:36 - 00006909 _____ () C:\Users\tester\Documents\AdwCleaner[S0].txt
2014-11-01 09:01 - 2014-10-07 23:26 - 00007164 _____ () C:\Users\tester\Documents\AdwCleaner[R1].txt
2014-11-01 09:01 - 2014-10-07 23:23 - 00007104 _____ () C:\Users\tester\Documents\AdwCleaner[R0].txt
2014-10-31 16:57 - 2014-10-31 16:57 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\tester\Downloads\revosetup95.exe
2014-10-31 16:57 - 2014-10-31 16:57 - 00001264 _____ () C:\Users\tester\Desktop\Revo Uninstaller.lnk
2014-10-31 16:57 - 2014-10-31 16:57 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-10-30 23:45 - 2014-11-01 09:13 - 00000896 _____ () C:\Windows\setupact.log
2014-10-30 23:45 - 2014-10-30 23:45 - 00281712 _____ () C:\Windows\Minidump\103014-17503-01.dmp
2014-10-30 23:45 - 2014-10-30 23:45 - 00000000 ____D () C:\Windows\Minidump
2014-10-30 23:45 - 2014-10-30 23:45 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-30 23:23 - 2014-10-31 08:44 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-10-30 22:55 - 2014-10-30 22:55 - 00001611 _____ () C:\Users\tester\Documents\Maleware2.txt
2014-10-30 22:49 - 2014-10-30 22:52 - 00004460 _____ () C:\Users\tester\Documents\maleware.txt
2014-10-30 21:27 - 2014-10-30 21:27 - 00001083 _____ () C:\Users\tester\Documents\text.txt
2014-10-30 21:21 - 2014-10-30 21:21 - 00003021 _____ () C:\Users\tester\Documents\Gmer.txt
2014-10-30 20:08 - 2014-10-30 20:08 - 00022146 _____ () C:\Users\tester\Downloads\Addition.txt
2014-10-30 20:07 - 2014-11-01 09:47 - 00011751 _____ () C:\Users\tester\Downloads\FRST.txt
2014-10-30 20:07 - 2014-11-01 09:47 - 00000000 ____D () C:\FRST
2014-10-30 20:03 - 2014-10-30 20:03 - 00000474 _____ () C:\Users\tester\Downloads\defogger_disable.log
2014-10-30 20:03 - 2014-10-30 20:03 - 00000000 _____ () C:\Users\tester\defogger_reenable
2014-10-30 12:50 - 2014-10-30 12:51 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Mozilla
2014-10-30 12:50 - 2014-10-30 12:50 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-30 12:50 - 2014-10-30 12:50 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-30 12:50 - 2014-10-30 12:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-30 12:50 - 2014-10-30 12:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-30 12:43 - 2014-10-30 12:43 - 00070264 _____ () C:\Users\tester\Documents\cc_20141030_124312.reg
2014-10-30 12:38 - 2014-10-30 12:38 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-10-30 12:38 - 2014-10-30 12:38 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-10-30 12:38 - 2014-10-30 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-10-30 12:38 - 2014-10-30 12:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-10-30 12:37 - 2014-10-30 12:38 - 04974864 _____ (Piriform Ltd) C:\Users\tester\Downloads\ccsetup419.exe
2014-10-30 08:36 - 2014-10-30 08:36 - 00000000 ____D () C:\Windows\Sun
2014-10-30 08:36 - 2014-10-30 08:36 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Oracle
2014-10-30 08:36 - 2014-10-30 08:36 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-30 08:34 - 2014-10-30 08:34 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-30 08:34 - 2014-10-30 08:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-30 08:34 - 2014-10-30 08:34 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-30 08:34 - 2014-10-30 08:34 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-30 08:34 - 2014-10-30 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-30 08:34 - 2014-10-30 08:34 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-30 01:45 - 2014-10-30 01:45 - 01206389 _____ () C:\Users\tester\Documents\Jobcenter-Bescheid.odt
2014-10-29 23:35 - 2014-10-29 23:35 - 00000000 ____D () C:\ProgramData\Sun
2014-10-29 23:31 - 2014-10-29 23:31 - 31473568 _____ (Oracle Corporation) C:\Users\tester\Downloads\jre-7u11-windows-i586.exe
2014-10-29 23:27 - 2014-10-29 23:27 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\tester\Downloads\mbam-setup-2.0.3.1025.exe
2014-10-29 23:08 - 2014-10-29 23:08 - 00053786 _____ () C:\Users\tester\Desktop\bookmarks-2014-10-29.json
2014-10-27 21:50 - 2014-10-27 21:50 - 00016223 _____ () C:\Users\tester\Documents\Jobcenter Mitwirkung.odt
2014-10-25 21:48 - 2014-10-30 09:42 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-10-25 21:48 - 2014-10-25 21:49 - 00000000 ____D () C:\Users\tester\AppData\Local\Abelssoft
2014-10-25 21:48 - 2014-10-25 21:48 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-10-25 21:48 - 2014-10-25 21:48 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Abelssoft
2014-10-25 21:48 - 2014-10-25 21:48 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-10-24 12:59 - 2014-10-24 12:59 - 00001845 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-10-24 12:59 - 2014-10-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-10-24 12:59 - 2014-10-24 12:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-10-24 12:58 - 2014-10-24 12:58 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-10-24 12:58 - 2014-10-24 12:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-10-24 12:57 - 2012-10-03 15:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-10-24 12:56 - 2014-10-24 12:57 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-10-24 12:56 - 2014-10-24 12:57 - 00000000 ____D () C:\Program Files\iTunes
2014-10-24 12:56 - 2014-10-24 12:57 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-10-24 12:56 - 2014-10-24 12:56 - 00000000 ____D () C:\Program Files\iPod
2014-10-24 08:15 - 2014-10-24 08:53 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-24 08:15 - 2014-10-24 08:17 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-10-24 08:15 - 2014-10-24 08:15 - 00001391 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-10-24 08:15 - 2014-10-24 08:15 - 00001379 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-10-24 08:15 - 2014-10-24 08:15 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-10-24 08:15 - 2014-10-24 08:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-10-24 08:15 - 2013-09-20 09:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-10-24 08:13 - 2014-10-24 08:14 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\tester\Downloads\spybot-2.4.exe
2014-10-23 23:17 - 2014-10-24 08:03 - 00003210 _____ () C:\Windows\System32\Tasks\YourFileDownloader Installer Starter
2014-10-23 21:06 - 2014-11-01 09:13 - 00001340 _____ () C:\Windows\Tasks\QPQKN.job
2014-10-23 21:06 - 2014-10-23 21:06 - 00004370 _____ () C:\Windows\System32\Tasks\QPQKN
2014-10-23 21:04 - 2014-10-23 21:04 - 00000000 ____D () C:\Users\tester\AppData\Roaming\BandExtend
2014-10-23 21:02 - 2014-11-01 09:13 - 00001334 _____ () C:\Windows\Tasks\DK.job
2014-10-23 21:02 - 2014-10-23 21:02 - 00004364 _____ () C:\Windows\System32\Tasks\DK
2014-10-21 22:55 - 2014-10-21 22:57 - 250104428 _____ () C:\Users\tester\Downloads\bases(1).cav
2014-10-18 19:54 - 2014-10-18 19:56 - 00000000 ____D () C:\Users\tester\AppData\Roaming\PlayFirst
2014-10-18 19:54 - 2014-10-18 19:56 - 00000000 ____D () C:\ProgramData\PlayFirst
2014-10-18 19:54 - 2014-10-18 19:54 - 00001085 _____ () C:\Users\Gast\Desktop\Diner Dash 2.lnk
2014-10-18 19:53 - 2014-10-18 19:53 - 00000000 ____D () C:\Windows\Diner Dash
2014-10-17 23:31 - 2014-10-17 23:31 - 00000000 ____D () C:\Users\tester\Documents\my games
2014-10-17 22:35 - 2014-10-17 22:35 - 00000222 _____ () C:\Users\tester\Desktop\XCOM Enemy Unknown.url
2014-10-17 21:32 - 2014-10-17 21:32 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-10-17 21:14 - 2014-10-30 14:42 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-10-17 21:14 - 2014-10-17 21:14 - 00002539 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-10-17 21:14 - 2014-10-17 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-10-17 21:13 - 2010-06-02 03:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-10-17 21:13 - 2010-06-02 03:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-10-17 21:13 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-10-17 21:13 - 2010-02-04 09:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-10-17 21:13 - 2009-09-04 16:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-10-17 21:13 - 2009-09-04 16:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-10-17 21:13 - 2009-03-16 13:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-10-17 21:13 - 2009-03-09 14:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-10-17 21:13 - 2008-10-27 09:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-10-17 21:13 - 2008-10-15 05:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-10-17 21:13 - 2008-07-31 09:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-10-17 21:13 - 2008-07-31 09:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-10-17 21:13 - 2008-07-31 09:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-10-17 21:13 - 2008-07-31 09:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-10-17 21:12 - 2008-07-31 09:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-10-17 21:12 - 2008-07-31 09:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-10-17 21:12 - 2008-07-10 10:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-10-17 21:12 - 2008-07-10 10:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-10-17 21:12 - 2008-05-30 13:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-10-17 21:12 - 2008-05-30 13:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-10-17 21:12 - 2008-05-30 13:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-10-17 21:12 - 2008-05-30 13:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-10-17 21:12 - 2008-05-30 13:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-10-17 21:12 - 2008-05-30 13:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-10-17 21:12 - 2008-05-30 13:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-10-17 21:12 - 2008-05-30 13:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-10-17 21:12 - 2008-05-30 13:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-10-17 21:12 - 2008-03-05 15:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-10-17 21:12 - 2008-03-05 15:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-10-17 21:12 - 2008-03-05 15:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-10-17 21:12 - 2008-03-05 15:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-10-17 21:12 - 2008-03-05 15:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-10-17 21:12 - 2008-03-05 15:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-10-17 21:12 - 2008-03-05 14:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-10-17 21:12 - 2008-02-05 22:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-10-17 21:12 - 2008-02-05 22:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-10-17 21:12 - 2007-10-22 02:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-10-17 21:12 - 2007-10-22 02:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-10-17 21:12 - 2007-10-22 02:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-10-17 21:12 - 2007-10-22 02:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-10-17 21:12 - 2007-10-12 14:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-10-17 21:12 - 2007-10-02 08:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-10-17 21:12 - 2007-10-02 08:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-10-17 21:12 - 2007-07-19 23:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-10-17 21:12 - 2007-07-19 23:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-10-17 21:12 - 2007-07-19 17:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-10-17 21:12 - 2007-06-20 19:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-10-17 21:12 - 2007-06-20 19:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-10-17 21:12 - 2007-05-16 15:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-10-17 21:12 - 2007-04-04 17:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-10-17 21:12 - 2007-04-04 17:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-10-17 21:12 - 2007-04-04 17:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-10-17 21:12 - 2007-04-04 17:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-10-17 21:12 - 2007-03-15 15:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-10-17 21:12 - 2007-03-15 15:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-10-17 21:12 - 2007-03-12 15:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-10-17 21:12 - 2007-03-05 11:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-10-17 21:12 - 2007-03-05 11:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-10-17 21:12 - 2007-01-24 14:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-10-17 21:12 - 2007-01-24 14:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-10-17 21:12 - 2006-12-08 11:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-10-17 21:12 - 2006-12-08 11:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-10-17 21:12 - 2006-11-29 12:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-10-17 21:12 - 2006-09-28 15:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-10-17 21:12 - 2006-09-28 15:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-10-17 21:12 - 2006-09-28 15:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-10-17 21:12 - 2006-09-28 15:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-10-17 21:12 - 2006-07-28 08:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-10-17 21:12 - 2006-07-28 08:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-10-17 21:12 - 2006-07-28 08:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-10-17 21:12 - 2006-07-28 08:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-10-17 21:12 - 2006-05-31 06:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-10-17 21:12 - 2006-05-31 06:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-10-17 21:12 - 2006-03-31 11:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-10-17 21:12 - 2006-03-31 11:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-10-17 21:12 - 2006-03-31 11:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-10-17 21:12 - 2006-03-31 11:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-10-17 21:12 - 2006-03-31 11:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-10-17 21:12 - 2006-03-31 11:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-10-17 21:12 - 2006-02-03 07:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-10-17 21:12 - 2006-02-03 07:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-10-17 21:12 - 2006-02-03 07:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-10-17 21:12 - 2006-02-03 07:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-10-17 21:12 - 2006-02-03 07:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-10-17 21:12 - 2006-02-03 07:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-10-17 21:12 - 2005-12-05 17:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-10-17 21:12 - 2005-12-05 17:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-10-17 21:12 - 2005-07-22 18:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-10-17 21:12 - 2005-07-22 18:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-10-17 21:12 - 2005-05-26 14:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-10-17 21:12 - 2005-05-26 14:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-10-17 21:12 - 2005-03-18 16:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-10-17 21:12 - 2005-03-18 16:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-10-17 21:12 - 2005-02-05 18:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-10-17 21:12 - 2005-02-05 18:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-10-17 08:59 - 2014-10-17 08:59 - 01054912 _____ (Adobe) C:\Users\tester\Downloads\install_flashplayer15x32au_mssa_aaa_aih.exe
2014-10-16 09:25 - 2014-10-16 09:26 - 00000000 ____D () C:\Windows\rescache
2014-10-15 08:08 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 08:08 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 08:08 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 08:08 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 08:08 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-15 08:08 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-15 08:08 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-15 08:08 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-15 08:08 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-15 08:08 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-15 08:08 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-15 08:08 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 08:08 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 08:08 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 08:08 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-15 08:08 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 08:08 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 08:08 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 08:08 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 08:08 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-15 08:08 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 08:08 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-15 08:08 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 08:08 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 08:08 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-15 08:08 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-15 08:08 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-15 08:08 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-15 08:08 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-15 08:08 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-15 08:08 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-15 08:08 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-15 08:08 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 08:08 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 08:08 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-15 08:08 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-15 08:08 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-15 08:08 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 08:08 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-15 08:08 - 2014-08-19 04:11 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-10-15 08:08 - 2014-08-19 04:10 - 00616352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-10-15 08:08 - 2014-08-19 04:08 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-10-15 08:08 - 2014-08-19 04:08 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-15 08:08 - 2014-08-19 04:08 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-10-15 08:08 - 2014-08-19 04:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-10-15 08:08 - 2014-08-19 04:07 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 08:08 - 2014-08-19 04:07 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-15 08:08 - 2014-08-19 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-15 08:08 - 2014-08-19 04:07 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 08:08 - 2014-08-19 03:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2014-10-15 08:08 - 2014-08-19 03:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-10-15 08:08 - 2014-08-19 03:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-15 08:08 - 2014-07-07 03:07 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-15 08:08 - 2014-07-07 03:07 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-15 08:08 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 05551032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-15 08:08 - 2014-07-07 03:06 - 04120576 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-15 08:08 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-15 08:08 - 2014-07-07 03:06 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-15 08:08 - 2014-07-07 03:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-15 08:08 - 2014-07-07 03:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-15 08:08 - 2014-07-07 03:05 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-15 08:08 - 2014-07-07 03:05 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-15 08:08 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-15 08:08 - 2014-07-07 02:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-15 08:08 - 2014-07-07 02:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2014-10-15 08:08 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2014-10-15 08:08 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2014-10-15 08:08 - 2014-07-07 02:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-10-15 08:08 - 2014-07-07 02:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-10-15 08:08 - 2014-07-07 02:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-10-15 08:08 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-10-15 08:08 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-10-15 08:08 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-10-15 08:08 - 2014-06-28 01:21 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-15 08:08 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-15 08:08 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-15 08:08 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 08:07 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 08:07 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 08:07 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 08:07 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 08:07 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 08:07 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 08:07 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 08:07 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 08:07 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 08:07 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 08:07 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-15 08:07 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 08:07 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 08:07 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-15 08:07 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 08:07 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 08:07 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 08:07 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-15 08:07 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-15 08:07 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 08:07 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-15 08:07 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-15 08:07 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-15 08:07 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 08:07 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-15 08:07 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 08:07 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-15 08:07 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 08:07 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 08:07 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 08:07 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-15 08:07 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-15 08:07 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-15 08:07 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 08:07 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-12 13:33 - 2014-10-12 22:15 - 00048128 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-10-12 13:33 - 2014-10-12 13:33 - 00000000 ___HD () C:\VTRoot
2014-10-12 01:06 - 2014-10-12 01:06 - 00000000 ____D () C:\Users\tester\Documents\Diablo III
2014-10-12 00:34 - 2014-10-12 00:34 - 00001156 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-10-12 00:19 - 2014-10-12 01:06 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-10-12 00:19 - 2014-10-12 00:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2014-10-10 21:03 - 2014-10-20 11:29 - 00000000 ____D () C:\Users\tester\AppData\Local\Battle.net
2014-10-10 21:03 - 2014-10-11 23:47 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Battle.net
2014-10-10 21:03 - 2014-10-10 21:03 - 00001118 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\Users\tester\AppData\Local\Blizzard Entertainment
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-10-10 21:03 - 2014-10-10 21:03 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-10-10 21:02 - 2014-10-10 21:02 - 00000000 ____D () C:\ProgramData\Battle.net
2014-10-09 21:52 - 2014-10-21 17:06 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Foxit Software
2014-10-09 21:52 - 2014-10-09 21:52 - 00001351 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk
2014-10-09 21:52 - 2014-10-09 21:52 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-10-09 21:52 - 2014-10-09 21:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-10-09 21:52 - 2014-10-09 21:52 - 00000000 ____D () C:\Program Files (x86)\Foxit Software
2014-10-09 21:24 - 2014-10-09 21:24 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-10-09 21:24 - 2014-10-09 21:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-09 21:24 - 2014-10-09 21:24 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-10-09 21:24 - 2014-02-26 14:16 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-10-09 21:19 - 2014-10-09 21:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-10-09 21:19 - 2014-10-09 21:19 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-09 21:18 - 2014-11-01 09:13 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-09 21:14 - 2014-10-09 21:15 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-10-09 21:13 - 2014-10-09 21:17 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-10-09 21:11 - 2010-06-09 18:49 - 19107944 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 14513768 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 14097000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 13151336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-10-09 21:11 - 2010-06-09 18:49 - 12396136 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 10267240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 06086760 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 04992104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 04531816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 03062888 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02806376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02500712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02336360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 02025064 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 01617512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00930272 _____ (Microsoft Corporation) C:\Windows\system32\dpinst.exe
2014-10-09 21:11 - 2010-06-09 18:49 - 00406120 _____ (NVIDIA Corporation) C:\Windows\system32\nvdecodemft.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00331368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvdecodemft.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00255592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod1921.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00255592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcod.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00065128 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00056936 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-10-09 21:11 - 2010-06-09 18:49 - 00011240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvBridge.kmd
2014-10-09 21:11 - 2010-06-09 18:49 - 00011114 _____ () C:\Windows\system32\nvinfo.pb
2014-10-09 21:10 - 2014-11-01 09:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-09 21:10 - 2014-10-09 21:10 - 00000000 ____D () C:\ProgramData\Auslogics
2014-10-09 21:08 - 2014-10-29 23:28 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-10-09 21:08 - 2014-10-29 23:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-10-09 21:07 - 2014-10-29 23:28 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-10-09 21:07 - 2014-10-09 21:07 - 00001169 _____ () C:\Users\tester\Desktop\Auslogics DiskDefrag.lnk
2014-10-09 21:07 - 2014-10-09 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2014-10-09 21:07 - 2014-10-09 21:07 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-09 21:07 - 2014-10-09 21:07 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2014-10-09 21:07 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-09 21:07 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-09 21:07 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-09 21:06 - 2014-10-09 21:06 - 06580960 _____ (Auslogics Labs Pty Ltd ) C:\Users\tester\Downloads\disk-defrag-setup.exe
2014-10-09 21:05 - 2014-10-09 21:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tester\Downloads\mbam-setup-2.0.2.1012.exe
2014-10-09 21:05 - 2014-10-09 21:06 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\tester\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-10-09 21:03 - 2014-10-26 20:32 - 00066064 _____ () C:\Users\tester\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-09 21:02 - 2014-11-01 09:43 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-10-09 21:02 - 2014-10-09 21:03 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-10-09 21:02 - 2014-10-09 21:02 - 02865688 _____ (Intel Corporation) C:\Users\tester\Downloads\INF_allOS_9.1.2.1008_PV.exe
2014-10-09 21:02 - 2014-10-09 21:02 - 00001888 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2014-10-09 21:01 - 2014-10-09 21:02 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-10-09 20:55 - 2014-10-09 20:55 - 00001175 _____ () C:\Users\tester\Desktop\AIDA64 Extreme.lnk
2014-10-09 20:55 - 2014-10-09 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2014-10-09 20:55 - 2014-10-09 20:55 - 00000000 ____D () C:\Program Files (x86)\FinalWire
2014-10-09 20:54 - 2014-10-09 20:54 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Wise Registry Cleaner
2014-10-09 20:53 - 2014-10-09 20:53 - 00000000 ____D () C:\Windows\pss
2014-10-09 20:52 - 2014-10-09 21:14 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Wise Disk Cleaner
2014-10-09 20:51 - 2014-10-09 20:51 - 00000000 ____D () C:\Users\tester\AppData\Roaming\WinRAR
2014-10-09 20:50 - 2014-10-09 20:50 - 02034504 _____ () C:\Users\tester\Downloads\winrar-x64-511d.exe
2014-10-09 20:50 - 2014-10-09 20:50 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-09 20:50 - 2014-10-09 20:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-10-09 20:50 - 2014-10-09 20:50 - 00000000 ____D () C:\Program Files\WinRAR
2014-10-09 20:48 - 2014-10-09 20:48 - 15217928 _____ (FinalWire Ltd. ) C:\Users\tester\Downloads\aida64extreme470.exe
2014-10-09 20:32 - 2014-10-09 20:32 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-10-09 20:32 - 2014-10-09 20:32 - 00001162 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-10-09 20:32 - 2014-10-09 20:32 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-10-07 23:51 - 2014-10-07 23:51 - 00000000 ____D () C:\Users\tester\AppData\Roaming\LavasoftStatistics
2014-10-07 23:50 - 2014-10-07 23:50 - 00004560 _____ () C:\Windows\SysWOW64\LavasoftTcpService.ini
2014-10-07 23:50 - 2014-10-07 23:50 - 00002416 _____ () C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2014-10-07 23:50 - 2014-10-07 23:50 - 00002416 _____ () C:\Windows\system32\LavasoftTcpServiceOff.ini
2014-10-07 23:50 - 2014-10-07 23:50 - 00002165 _____ () C:\Users\Public\Desktop\Web Companion.lnk
2014-10-07 23:50 - 2014-10-07 23:50 - 00000000 ____D () C:\Users\tester\AppData\Local\Lavasoft
2014-10-07 23:50 - 2014-10-07 23:50 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-10-07 23:50 - 2014-09-25 13:44 - 00346976 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2014-10-07 23:50 - 2014-09-25 13:44 - 00303728 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2014-10-07 23:49 - 2014-11-01 09:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2014-10-07 23:42 - 2014-11-01 09:03 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-10-07 23:42 - 2014-10-07 23:42 - 02806920 _____ () C:\Users\tester\Downloads\Adaware_Installer_11.3.exe
2014-10-07 23:28 - 2014-10-09 21:01 - 00000000 ____D () C:\Program Files\COMODO
2014-10-07 23:28 - 2014-10-07 23:28 - 00002013 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-10-07 23:27 - 2014-10-09 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-10-07 23:27 - 2014-10-07 23:27 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-10-07 23:27 - 2014-10-07 23:27 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-10-07 23:27 - 2014-10-07 23:27 - 00001116 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-10-07 23:27 - 2014-10-07 23:27 - 00000000 ____D () C:\Users\tester\AppData\Local\Comodo
2014-10-07 23:27 - 2014-10-07 23:27 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-10-07 23:27 - 2014-10-07 23:27 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-10-07 23:26 - 2014-10-09 21:02 - 00000000 ____D () C:\ProgramData\Comodo
2014-10-07 23:23 - 2010-08-30 07:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-10-07 23:21 - 2014-10-07 23:21 - 01375089 _____ () C:\Users\tester\Downloads\adwcleaner_3.311.exe
2014-10-02 13:23 - 2014-10-02 13:23 - 00094208 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTimeVR.qtx
2014-10-02 13:23 - 2014-10-02 13:23 - 00069632 _____ (Apple Inc.) C:\Windows\SysWOW64\QuickTime.qts

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-01 09:47 - 2014-02-06 15:50 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-01 09:22 - 2014-02-23 18:49 - 00014041 _____ () C:\Users\tester\Desktop\kitchen.odt
2014-11-01 09:21 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-01 09:21 - 2009-07-14 05:45 - 00031856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-01 09:13 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-01 09:12 - 2013-12-04 11:06 - 01666772 _____ () C:\Windows\WindowsUpdate.log
2014-10-31 08:44 - 2014-02-01 08:53 - 00000000 ____D () C:\Users\Gast
2014-10-31 08:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-10-30 23:46 - 2013-12-04 11:14 - 00000000 ____D () C:\Users\tester
2014-10-30 13:10 - 2011-03-20 13:35 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2014-10-30 13:10 - 2011-03-20 13:35 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2014-10-30 13:10 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-30 13:01 - 2013-12-04 11:14 - 00000997 _____ () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-29 23:54 - 2010-11-21 08:17 - 00000000 ____D () C:\Windows\ShellNew
2014-10-26 19:52 - 2009-07-14 05:45 - 00299344 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-25 22:10 - 2014-02-11 23:49 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Spotify
2014-10-25 12:49 - 2014-03-09 21:34 - 00000000 ____D () C:\Users\tester\AppData\Local\Adobe
2014-10-25 12:49 - 2014-02-06 15:50 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-25 12:49 - 2014-02-06 15:50 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-25 12:49 - 2014-02-06 15:50 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-24 12:56 - 2014-05-07 09:02 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-10-24 09:30 - 2014-02-11 23:49 - 00000000 ____D () C:\Users\tester\AppData\Local\Spotify
2014-10-24 07:57 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media
2014-10-23 21:16 - 2014-10-01 16:27 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Skype
2014-10-23 21:06 - 2014-05-17 15:23 - 00000000 ____D () C:\Program Files (x86)\Google
2014-10-20 10:19 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-19 17:09 - 2014-05-18 16:39 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-10-19 17:09 - 2014-02-06 15:50 - 00000000 ____D () C:\Users\tester\AppData\Roaming\Macromedia
2014-10-17 22:11 - 2014-05-18 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2014-10-17 22:10 - 2014-05-18 16:22 - 00000000 ____D () C:\Program Files (x86)\EA GAMES
2014-10-16 08:00 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-10-16 08:00 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-16 07:57 - 2014-05-08 09:02 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-16 07:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-10-16 07:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-10-15 23:41 - 2013-12-04 11:08 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-15 23:38 - 2013-12-04 11:08 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-12 00:34 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-10-11 23:50 - 2014-09-19 12:50 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-10-09 22:00 - 2014-03-11 10:49 - 00001062 _____ () C:\Users\Public\Desktop\PDF-Viewer.lnk
2014-10-09 22:00 - 2014-02-06 04:34 - 00001011 _____ () C:\Users\Public\Desktop\DriverEasy.lnk
2014-10-09 22:00 - 2014-02-06 04:21 - 00001050 _____ () C:\Users\tester\Desktop\Unknown Device Identifier.lnk
2014-10-09 21:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Web
2014-10-09 21:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-10-09 20:58 - 2013-12-04 20:01 - 00000000 ____D () C:\Windows\Panther
2014-10-09 20:19 - 2013-12-04 15:44 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-10-07 23:31 - 2014-02-11 23:49 - 00002032 _____ () C:\Users\tester\Desktop\Spotify.lnk

Some content of TEMP:
====================
C:\Users\tester\AppData\Local\Temp\Quarantine.exe
C:\Users\tester\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-27 12:56

==================== End Of Log ============================
--- --- ---

--- --- ---


Ich habe keine neue Addition bekommen oder sollte das Programm vor dem scan noch mal ganz runter?

Alt 01.11.2014, 22:15   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Standard

Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken.

__________________
Logfiles bitte immer in CODE-Tags posten

Antwort

Themen zu Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall
bluescreen, conduitsearch, conduitsearch entfernen, diner dash, diner dash entfernen, fehlermeldung, helper.exe, pup.optional.amonetize, pup.optional.bestmarkit.a, pup.optional.breitschopp, pup.optional.bundleinstaller.a, pup.optional.conduitsearchprotect, pup.optional.searchprotect, pup.optional.searchprotect.a, pup.optional.windowsmangerprotect.a, pup.optional.winguard.a, registry key, rogue.winguard, suchmaschine, teredo


« Windows 7 64bit: SmartSaver 15 eingefangen. Logs bereits erstellt. | Windows Vista: Probleme beim Einloggen, Bluescreen und Absturz »


Ähnliche Themen: Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall


  1. Rechte Maustaste funktioniert nach uTorrent installation nicht mehr
    Plagegeister aller Art und deren Bekämpfung - 14.02.2015 (5)
  2. Linke Maustaste agiert völlig unkontrolliert
    Plagegeister aller Art und deren Bekämpfung - 26.04.2014 (1)
  3. adobe flashplayer fragt durchgehend nach Admin rechten?
    Plagegeister aller Art und deren Bekämpfung - 26.05.2013 (14)
  4. Anzeigentreiber Fehler - Malewarebefall?
    Plagegeister aller Art und deren Bekämpfung - 08.05.2013 (14)
  5. Pc gehackt von Rechten
    Plagegeister aller Art und deren Bekämpfung - 13.02.2013 (5)
  6. bei linker gedrückten Maustaste blockiert die Tastatur
    Alles rund um Windows - 22.05.2012 (3)
  7. Nach Systemwiederherstellung (Win 7) immer noch Malewarebefall?
    Log-Analyse und Auswertung - 07.03.2012 (5)
  8. Rechte Maustaste funktioniert im Explorer nicht
    Plagegeister aller Art und deren Bekämpfung - 01.03.2012 (11)
  9. Browser Probleme nach Virus/Trojaner Atacke ?
    Plagegeister aller Art und deren Bekämpfung - 20.10.2010 (3)
  10. Rechte Maustaste
    Mülltonne - 24.08.2008 (0)
  11. Trojan-PSW.Win32.nilage.bvl Malewarebefall
    Plagegeister aller Art und deren Bekämpfung - 14.08.2008 (1)
  12. Probleme bei Rechten & Wechseldatenträgern
    Log-Analyse und Auswertung - 03.12.2007 (2)
  13. Rechte Maustaste funktioniert nicht
    Mülltonne - 07.09.2007 (0)
  14. VISTA: Benutzerkonto mit eingeschränkten Rechten
    Antiviren-, Firewall- und andere Schutzprogramme - 07.08.2007 (3)
  15. rechte maustaste menü bearbeiten
    Alles rund um Windows - 09.08.2005 (2)
  16. Rechner hängt sich im Windows Explorer nach Betätigung der rechten Maustaste auf???
    Log-Analyse und Auswertung - 13.07.2005 (3)
  17. Konto mit eingeschränkten Rechten
    Alles rund um Windows - 05.02.2005 (5)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall - Hallo, nachdem ich selbst keine Lösung finde möchte ich hier mein Glück versuchen. Hab es gestern schonmal versucht und dabei ist mein Rechner abgestürzt. Nach dem Download einer stark Viren - Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall...
Archiv
Du betrachtest: Probleme mit der Menüanzeige der rechten Maustaste im Browser nach Malewarebefall auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19