Dutzende Werbe pop-ups im Browser

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 8.1 Enterprise x86
Ran by hoa on 20.12.2014 at 19:03:23,19
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-80808232-752679185-3259079388-1001
Successfully deleted: [File] C:\Windows\prefetch\SPEEDUP_SOFT_PARTNER.TMP-C0F4D1C2.pf



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\hoa\AppData\Roaming\mozilla\firefox\profiles\i8zu0q5d.default\minidumps [6 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.12.2014 at 19:05:32,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 20-12-2014
Ran by hoa (administrator) on THINH-PC on 20-12-2014 19:19:26
Running from C:\Users\hoa\Downloads
Loaded Profiles: hoa &  (Available profiles: hoa)
Platform: Microsoft Windows 8.1 Enterprise (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

( ) C:\Windows\System32\lxdecoms.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
() C:\Program Files\Lexmark 4800 Series\lxdemon.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
() C:\Program Files\Lexmark 4800 Series\lxdeamon.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_9e0ce1b7e2d9567e\TiWorker.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(ESET) C:\Program Files\ESET\ESET Online Scanner\OnlineScannerApp.exe
() C:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [177520 2011-03-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [90448 2011-11-02] (Research In Motion Limited)
HKLM\...\Run: [lxdemon.exe] => C:\Program Files\Lexmark 4800 Series\lxdemon.exe [455336 2010-02-15] ()
HKLM\...\Run: [lxdeamon] => C:\Program Files\Lexmark 4800 Series\lxdeamon.exe [25256 2010-02-15] ()
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\hoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-80808232-752679185-3259079388-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-80808232-752679185-3259079388-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-80808232-752679185-3259079388-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-80808232-752679185-3259079388-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default
FF SelectedSearchEngine: Bing
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\searchplugins\ixquick.xml
FF Extension: HomepageNewTabneocodexus - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\HomepageNewTab@neocodex.us [2014-12-19]
FF Extension: Auto Refresh - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\autorefresh@plugin.xpi [2014-07-02]
FF Extension: Check4Change - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\check4change-owner@mozdev.org.xpi [2014-07-03]
FF Extension: MEGA - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\firefox@mega.co.nz.xpi [2014-07-23]
FF Extension: Lazarus: Form Recovery - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\lazarus@interclue.com.xpi [2014-07-02]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-08-31]
FF Extension: ProxTube - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-11-15]
FF Extension: Adblock Plus - C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-22]

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [696320 2011-08-18] (Hewlett-Packard Co.) [File not signed]
R2 lxde_device; C:\Windows\system32\lxdecoms.exe [598960 2007-05-29] ( )
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [288128 2014-09-22] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22192 2014-09-22] (Microsoft Corporation)
S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1222144 2014-07-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [25600 2014-02-22] (Microsoft Corporation)
R3 BTHprint; C:\Windows\system32\DRIVERS\bthprint.sys [48640 2013-08-22] (Microsoft Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [137632 2012-09-25] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [22432 2012-09-25] (Windows (R) Win 7 DDK provider)
S3 GPIO; C:\Windows\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-12-20] (Malwarebytes Corporation)
R3 netwlv32; C:\Windows\system32\DRIVERS\netwlv32.sys [6637056 2013-06-18] (Intel Corporation)
R3 SPI; C:\Windows\System32\drivers\SonyPI.sys [14720 2007-08-03] (Sony Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [84800 2014-09-22] (Microsoft Corporation)
R0 Wof; C:\Windows\system32\Drivers\Wof.sys [138584 2014-03-13] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)
R3 yukonw8; C:\Windows\system32\DRIVERS\yk63x86.sys [249288 2013-06-18] (Marvell)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [57344 2014-04-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-20 19:19 - 2014-12-20 19:21 - 00010978 _____ () C:\Users\hoa\Downloads\FRST.txt
2014-12-20 19:18 - 2014-12-20 19:19 - 00000000 ____D () C:\FRST
2014-12-20 19:18 - 2014-12-20 19:18 - 01114112 _____ (Farbar) C:\Users\hoa\Downloads\FRST.exe
2014-12-20 19:13 - 2014-12-20 19:13 - 02347384 _____ (ESET) C:\Users\hoa\Downloads\esetsmartinstaller_enu.exe
2014-12-20 19:13 - 2014-12-20 19:13 - 00000000 ____D () C:\Program Files\ESET
2014-12-20 19:05 - 2014-12-20 19:05 - 00000973 _____ () C:\Users\hoa\Desktop\JRT.txt
2014-12-20 19:03 - 2014-12-20 19:03 - 00000000 ____D () C:\Windows\ERUNT
2014-12-20 19:02 - 2014-12-20 19:02 - 01707646 _____ (Thisisu) C:\Users\hoa\Downloads\JRT64.exe
2014-12-20 03:27 - 2014-12-20 03:27 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-12-20 02:55 - 2014-12-20 19:08 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-20 02:55 - 2014-12-20 02:55 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-20 02:55 - 2014-12-20 02:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-20 02:54 - 2014-12-20 02:55 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-12-20 02:54 - 2014-12-20 02:54 - 00000000 __SHD () C:\Users\hoa\AppData\Local\EmieUserList
2014-12-20 02:54 - 2014-12-20 02:54 - 00000000 __SHD () C:\Users\hoa\AppData\Local\EmieSiteList
2014-12-20 02:54 - 2014-12-20 02:54 - 00000000 __SHD () C:\Users\hoa\AppData\Local\EmieBrowserModeList
2014-12-20 02:54 - 2014-12-20 02:54 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-20 02:54 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-20 02:54 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-20 02:54 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-20 02:53 - 2014-12-20 02:53 - 01174352 _____ () C:\Users\hoa\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2014-12-19 21:32 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-19 21:31 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-19 21:31 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-19 21:31 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-19 21:31 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-19 21:31 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-19 21:31 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-19 21:31 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-19 21:31 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-19 21:31 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-19 21:31 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-19 21:31 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-19 21:31 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-19 21:31 - 2014-11-22 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-19 21:31 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-19 21:31 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-19 21:31 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-19 21:31 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-19 21:31 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-19 21:31 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-19 21:30 - 2014-12-19 21:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center
2014-12-19 21:30 - 2014-12-19 21:30 - 00000000 ____D () C:\Program Files\Microsoft Mouse and Keyboard Center
2014-12-19 21:25 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-19 21:15 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-19 21:14 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-19 21:14 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-19 21:14 - 2014-10-13 03:47 - 00199488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-19 21:14 - 2014-10-13 03:47 - 00131392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-19 21:14 - 2014-10-13 03:47 - 00076096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-19 21:14 - 2014-10-13 03:47 - 00036160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-19 21:11 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-07 00:49 - 2014-12-07 00:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-12-07 00:48 - 2014-12-07 00:49 - 00000000 ____D () C:\Program Files\Common Files\DivX Shared
2014-12-07 00:47 - 2014-12-07 00:49 - 00000000 ____D () C:\Program Files\DivX
2014-12-07 00:46 - 2014-12-07 00:46 - 01012544 _____ (DivX, LLC) C:\Users\hoa\Downloads\DivXInstaller.exe
2014-12-06 23:42 - 2014-12-07 00:49 - 00000000 ____D () C:\ProgramData\DivX
2014-12-06 23:42 - 2014-12-07 00:34 - 00004528 _____ () C:\Windows\system32\abengine.ini
2014-12-06 23:42 - 2014-12-07 00:34 - 00002408 _____ () C:\Windows\system32\abengineOff.ini
2014-11-22 12:31 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-22 12:31 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-20 19:06 - 2014-05-22 18:49 - 01850548 _____ () C:\Windows\WindowsUpdate.log
2014-12-20 19:04 - 2013-08-22 09:05 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-20 19:02 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\sru
2014-12-20 19:00 - 2014-05-22 18:54 - 00000000 ___DO () C:\Users\hoa\SkyDrive
2014-12-20 18:40 - 2014-06-18 10:46 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-20 03:37 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-12-20 03:14 - 2013-09-29 19:54 - 00068946 _____ () C:\Windows\PFRO.log
2014-12-20 03:14 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\AppReadiness
2014-12-20 03:14 - 2013-08-22 08:23 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-20 03:13 - 2013-08-22 07:13 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-12-20 02:33 - 2013-08-22 08:22 - 02420832 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-20 02:31 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\de-DE
2014-12-20 02:30 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-20 02:30 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-19 21:50 - 2014-05-22 20:42 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-19 21:24 - 2014-05-22 19:05 - 00000000 ____D () C:\Windows\AutoKMS
2014-12-07 00:41 - 2014-05-22 18:53 - 00001446 _____ () C:\Users\hoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-26 22:10 - 2014-08-13 19:30 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-26 22:10 - 2014-08-13 19:30 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\hoa\AppData\Local\Temp\MouseKeyboardCenterx86_1031.exe
C:\Users\hoa\AppData\Local\Temp\ose00000.exe
C:\Users\hoa\AppData\Local\Temp\ReimagePackage.exe
C:\Users\hoa\AppData\Local\Temp\SpOrder.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-19 23:00

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 20-12-2014
Ran by hoa at 2014-12-20 19:22:35
Running from C:\Users\hoa\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
Any Video Converter 5.6.6 (HKLM\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
BlackBerry Device Manager 7.0 (HKLM\...\BlackBerry_HandheldManager) (Version: 7.0.0.40 - Research in Motion Ltd.)
BlackBerry Device Manager 7.0 (Version: 7.0.0.40 - Research in Motion Ltd.) Hidden
BufferChm (Version: 140.0.298.000 - Hewlett-Packard) Hidden
C309g-m (Version: 140.0.851.000 - Hewlett-Packard) Hidden
Canon My Printer (HKLM\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.)
Destinations (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.298.000 - Hewlett-Packard) Hidden
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Premium C309g-m All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{5A1FBC15-2DE2-4B71-809F-33E746908CE4}) (Version: 14.0 - HP)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Lexmark 4800 Series (HKLM\...\Lexmark 4800 Series) (Version:  - Lexmark International, Inc.)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.1.3 (HKLM\...\{DE46417A-9E9E-4BCD-BBDD-DA21943193BB}_is1) (Version: 1.1.3 - )
Mozilla Firefox 34.0.5 (x86 de) (HKLM\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
Nero 12 (HKLM\...\{560FC78C-A4B2-461D-9B47-820C1EEF87B8}) (Version: 12.0.02000 - Nero AG)
Network (Version: 140.0.306.000 - Hewlett-Packard) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Prerequisite installer (Version: 12.0.0002 - Nero AG) Hidden
PS_AIO_06_C309g-m_SW_Min (Version: 140.0.863.000 - Hewlett-Packard) Hidden
QuickTransfer (Version: 140.0.98.000 - Hewlett-Packard) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.14.0 - SAMSUNG Electronics Co., Ltd.)
Scan (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Status (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Universal Adb Driver (HKLM\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
WebReg (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Welcome App (Start-up experience) (Version: 12.0.14000 - Nero AG) Hidden
WinRAR 5.10 beta 4 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{0C1EB979-8EC7-46E8-8097-246957D6B94C}\localserver32 -> C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{1434DD3D-0AF6-41E0-BB71-8C86010D9AF5}\localserver32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{326787D9-37B9-47A6-B539-EE13E7B04B8B}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\devicemanagerproperties.dll (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{47F64EC4-1AD6-4168-9D4C-00F3842F7CFB}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\DeviceManagerProperties.dll (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{4B66DD3F-2E6E-4F7C-B38C-E32608820825}\localserver32 -> C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{73D320C0-FACA-4553-9D5F-070F9E4DC5C8}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\DeviceManagerProperties.dll (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{82D1C283-A637-4A07-B1EC-8C7AE661EAF1}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\devicemanagerproperties.dll (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{AD046C04-9CC6-4424-A8E2-1F8BB9D0B29D}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManagerps.dll (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{BA3D0120-E617-4F66-ADCA-585CC2FB86DB}\localserver32 -> C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{C8992C14-DF59-4518-808F-CCFBB5850282}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\devicemanagerproperties.dll (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{D41C1E5B-0566-4BB1-BE72-1A5407349CA6}\localserver32 -> C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{EB59852D-B38E-4A4C-94BA-6731836E5538}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\DeviceManagerProperties.dll (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{EE7F6B66-AC97-41CF-BD88-372DDB786DB6}\localserver32 -> C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Research In Motion Limited)
CustomCLSID: HKU\S-1-5-21-80808232-752679185-3259079388-1001_Classes\CLSID\{F6CF0104-4F4A-4EBE-999D-A12D838E65B5}\InprocServer32 -> C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgrPs.dll (Research In Motion Limited)

==================== Restore Points  =========================

04-12-2014 17:26:51 Geplanter Prüfpunkt
07-12-2014 00:29:55 Removed Microsoft Silverlight
19-12-2014 21:28:51 DCInstallRestorePoint

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 07:13 - 2014-10-05 22:53 - 00000992 ___RA C:\Windows\system32\Drivers\etc\hosts
127.0.0.1                   thislineskipsanyemptylines
127.0.0.1                   thislineskipsanyemptylines
127.0.0.1                   thislineskipsanyemptylines


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05450131-821A-4F93-B495-EE7B1E84A6C5} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {0DB092A7-65E5-49CF-848B-997779138D2C} - \Optimize Start Menu Cache Files-S-1-5-21-80808232-752679185-3259079388-1001 No Task File <==== ATTENTION
Task: {3964737D-DEFE-465D-963E-F3A095C668E7} - System32\Tasks\upfs7235 => C:\PROGRA~1\Flwsrf\upfs7235.exe
Task: {4DF338DE-5790-4738-A29E-27DC7C834C54} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {775399F0-EBB1-45E1-8109-C5887E9F8887} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7894A9B9-3103-4AB5-8354-DB3715266D8D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {90AF8F6B-1077-4569-9AF8-936A73640282} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {B6B8F5B5-2836-43D7-B962-D9F217714DE7} - System32\Tasks\{298DC470-7D9A-4276-A43E-4FF9CE9E973D} => pcalua.exe -a "C:\Program Files\Flwsrf\uninstall.exe"
Task: {C43A4234-C54D-4FFE-9B7A-2737C1849F4E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-11-16] (Microsoft Corporation)
Task: {CC5D3FCC-68DB-4D66-9ACE-A86C3D4C19B7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {D67D476E-4272-4F9A-A6DC-F1A96B11674A} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {E2F42C47-D993-4781-93C8-69DA8516D4F2} - \AutoKMSCustom No Task File <==== ATTENTION
Task: {F7A7B440-16D7-4FCE-983E-1B731A4C5451} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Loaded Modules (whitelisted) =============

2014-09-30 13:33 - 2010-02-15 12:58 - 00455336 _____ () C:\Program Files\Lexmark 4800 Series\lxdemon.exe
2014-09-30 13:33 - 2007-05-24 14:21 - 00278528 _____ () C:\Program Files\Lexmark 4800 Series\lxdescw.dll
2014-09-30 13:33 - 2010-02-15 12:58 - 00025256 _____ () C:\Program Files\Lexmark 4800 Series\lxdeamon.exe
2014-09-30 13:33 - 2010-02-09 06:41 - 00028672 _____ () C:\Program Files\Lexmark 4800 Series\App4R.Monitor.Common.dll
2014-09-30 13:33 - 2010-02-09 06:41 - 00036864 _____ () C:\Program Files\Lexmark 4800 Series\App4R.Monitor.Core.dll
2014-09-30 13:33 - 2010-02-09 06:40 - 00057344 _____ () C:\Program Files\Lexmark 4800 Series\app4r.devmons.mcmdevmon.dll
2014-09-30 13:33 - 2008-06-06 05:45 - 00011776 _____ () C:\Program Files\Lexmark 4800 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll
2014-01-10 06:26 - 2014-01-10 06:26 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2014-01-10 06:28 - 2014-01-10 06:28 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2014-12-20 03:27 - 2014-12-20 03:27 - 03758192 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-12-20 19:13 - 2014-06-26 07:44 - 00358144 _____ () C:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\hoa\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKLM\...\StartupApproved\Run: => "RIMBBLaunchAgent.exe"
HKU\S-1-5-21-80808232-752679185-3259079388-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
HKU\S-1-5-21-80808232-752679185-3259079388-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"

========================= Accounts: ==========================

Administrator (S-1-5-21-80808232-752679185-3259079388-500 - Administrator - Disabled)
Gast (S-1-5-21-80808232-752679185-3259079388-501 - Limited - Disabled)
hoa (S-1-5-21-80808232-752679185-3259079388-1001 - Administrator - Enabled) => C:\Users\hoa
HomeGroupUser$ (S-1-5-21-80808232-752679185-3259079388-1003 - Limited - Enabled)
shin-_000 (S-1-5-21-80808232-752679185-3259079388-1005 - Limited - Enabled)
vieth_000 (S-1-5-21-80808232-752679185-3259079388-1004 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Massenspeichercontroller
Description: Massenspeichercontroller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-12-20 03:39:13.484
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-12-19 23:04:48.078
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-12-08 01:43:13.237
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-11-24 04:15:45.784
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-11-16 05:58:58.914
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-10-29 17:40:17.010
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-10-25 14:44:48.843
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-10-06 04:34:39.464
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-09-23 23:19:45.629
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2014-09-12 16:51:59.091
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz
Percentage of memory in use: 72%
Total physical RAM: 2038.11 MB
Available physical RAM: 569.33 MB
Total Pagefile: 4342.11 MB
Available Pagefile: 2772.7 MB
Total Virtual: 2047.88 MB
Available Virtual: 1865.4 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:73.24 GB) (Free:37.09 GB) NTFS
Drive e: () (Fixed) (Total:19.57 GB) (Free:19.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 93.2 GB) (Disk ID: 9E3B70B9)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=73.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=19.6 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

# AdwCleaner v4.105 - Bericht erstellt am 20/12/2014 um 20:25:39
# Aktualisiert 08/12/2014 von Xplode
# Database : 2014-12-16.1 [Live]
# Betriebssystem : Windows 8.1 Enterprise  (32 bits)
# Benutzername : hoa - THINH-PC
# Gestartet von : C:\Users\hoa\Downloads\adwcleaner_4.105.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\hoa\AppData\Roaming\Mozilla\Firefox\Profiles\i8zu0q5d.default\foxydeal.sqlite

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 de)


*************************

AdwCleaner[R0].txt - [770 octets] - [20/12/2014 20:25:39]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [829 octets] ##########