FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-01-2015
Ran by Stern (administrator) on STERN-PC on 29-01-2015 09:13:51
Running from C:\Users\Stern\Desktop
Loaded Profiles: Stern (Available profiles: Stern)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Ruiware LLC) C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wermgr.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-03] (CyberLink)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2965276129-1267343277-2345575809-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1154112 2014-07-21] (Ruiware LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2965276129-1267343277-2345575809-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2965276129-1267343277-2345575809-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.moehnesee.de/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2965276129-1267343277-2345575809-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-4300-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Avira SearchFree Toolbar -> {41564952-412D-5637-4300-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" No File
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" No File
Toolbar: HKU\S-1-5-21-2965276129-1267343277-2345575809-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Stern\AppData\Roaming\Mozilla\Firefox\Profiles\d1qdlnxe.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Adblock Edge - C:\Users\Stern\AppData\Roaming\Mozilla\Firefox\Profiles\d1qdlnxe.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2015-01-29]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-18] ()
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-12-14] () [File not signed]
S2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-10-14] (Avira Operations GmbH & Co. KG)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-28 21:40 - 2015-01-28 21:40 - 17874432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 12369920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 10921984 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 09740800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2015-01-28 21:40 - 2015-01-28 21:40 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2015-01-28 21:40 - 2015-01-28 21:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-28 21:40 - 2015-01-28 21:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-28 21:40 - 2015-01-28 21:40 - 02339840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 02157056 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 01802752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-28 21:40 - 2015-01-28 21:40 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-28 21:40 - 2015-01-28 21:40 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-01-28 21:40 - 2015-01-28 21:40 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-01-28 21:40 - 2015-01-28 21:40 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-01-28 21:40 - 2015-01-28 21:40 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-01-28 21:40 - 2015-01-28 21:40 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2015-01-28 21:40 - 2015-01-28 21:40 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-01-28 21:40 - 2015-01-28 21:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-01-28 21:36 - 2015-01-28 21:41 - 00004135 _____ () C:\Windows\IE9_main.log
2015-01-28 19:28 - 2015-01-29 09:13 - 00016117 _____ () C:\Users\Stern\Desktop\FRST.txt
2015-01-28 19:26 - 2015-01-28 19:28 - 00033725 _____ () C:\Users\Stern\Desktop\Addition.txt
2015-01-28 19:25 - 2015-01-28 19:25 - 02130432 _____ (Farbar) C:\Users\Stern\Desktop\FRST64.exe
2015-01-28 19:25 - 2015-01-28 19:25 - 00000000 ____D () C:\Users\Stern\Desktop\FRST-OlderVersion
2015-01-27 21:45 - 2015-01-29 09:06 - 00001459 _____ () C:\Users\Stern\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-27 21:45 - 2015-01-29 09:06 - 00001425 _____ () C:\Users\Stern\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-01-27 21:02 - 2015-01-27 21:02 - 00000000 ____D () C:\Users\Stern\AppData\Local\Macromedia
2015-01-27 20:50 - 2015-01-27 20:50 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-27 20:50 - 2015-01-27 20:50 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-27 20:50 - 2015-01-27 20:50 - 00000000 ____D () C:\Users\Stern\AppData\Local\Mozilla
2015-01-27 20:50 - 2015-01-27 20:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-27 20:46 - 2015-01-27 20:47 - 00243664 _____ () C:\Users\Stern\Downloads\Firefox Setup Stub 35.0.1.exe
2015-01-23 21:58 - 2015-01-23 21:58 - 00043682 _____ () C:\Users\Stern\Desktop\HitmanPro_20150123_2158.log
2015-01-23 21:50 - 2015-01-23 21:58 - 00000000 ____D () C:\ProgramData\HitmanPro
2015-01-23 21:48 - 2015-01-23 21:49 - 11225840 _____ (SurfRight B.V.) C:\Users\Stern\Downloads\HitmanPro_x64.exe
2015-01-23 21:31 - 2015-01-23 21:32 - 02126848 _____ (Farbar) C:\Users\Stern\Downloads\FRST64 (3).exe
2015-01-23 18:32 - 2015-01-23 18:32 - 00880784 _____ (Google Inc.) C:\Users\Stern\Downloads\ChromeSetup.exe
2015-01-23 17:16 - 2015-01-23 17:17 - 00033850 _____ () C:\Users\Stern\Downloads\Addition.txt
2015-01-23 17:15 - 2015-01-29 09:13 - 00000000 ____D () C:\FRST
2015-01-23 17:15 - 2015-01-23 21:33 - 00030171 _____ () C:\Users\Stern\Downloads\FRST.txt
2015-01-23 17:14 - 2015-01-23 17:15 - 02126848 _____ (Farbar) C:\Users\Stern\Downloads\FRST64 (2).exe
2015-01-23 17:14 - 2015-01-23 17:14 - 02126848 _____ (Farbar) C:\Users\Stern\Downloads\FRST64.exe
2015-01-23 17:14 - 2015-01-23 17:14 - 02126848 _____ (Farbar) C:\Users\Stern\Downloads\FRST64 (1).exe
2015-01-22 08:42 - 2015-01-22 08:42 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Stern\Desktop\revosetup95.exe
2015-01-22 08:42 - 2015-01-22 08:42 - 00001272 _____ () C:\Users\Stern\Desktop\Revo Uninstaller.lnk
2015-01-22 08:42 - 2015-01-22 08:42 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-01-20 21:58 - 2015-01-20 21:58 - 00000000 ____D () C:\Users\Stern\AppData\Roaming\WinPatrol
2015-01-20 21:54 - 2015-01-21 19:03 - 00000000 ____D () C:\ProgramData\InstallMate
2015-01-20 21:54 - 2015-01-20 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2015-01-20 21:54 - 2015-01-20 21:54 - 00000000 ____D () C:\Program Files (x86)\Ruiware
2015-01-20 21:53 - 2015-01-20 21:53 - 01156136 _____ (Ruiware) C:\Users\Stern\Desktop\wpsetup.exe
2015-01-20 21:31 - 2015-01-20 21:31 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-20 21:27 - 2015-01-20 21:28 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Stern\Desktop\mbam-setup-2.0.4.1028.exe
2015-01-20 20:55 - 2015-01-29 09:10 - 00012660 _____ () C:\Windows\SecuniaPackage.log
2015-01-20 20:38 - 2015-01-20 20:38 - 00001077 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2015-01-20 20:38 - 2015-01-20 20:38 - 00000000 ____D () C:\Users\Stern\AppData\Local\Secunia PSI
2015-01-20 20:38 - 2015-01-20 20:38 - 00000000 ____D () C:\Program Files (x86)\Secunia
2015-01-20 20:36 - 2015-01-20 20:36 - 05490752 _____ (Secunia) C:\Users\Stern\Desktop\PSISetup10004.exe
2015-01-20 20:27 - 2015-01-20 20:27 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-01-20 20:27 - 2015-01-20 20:27 - 00000000 ____D () C:\Program Files\Java
2015-01-20 20:23 - 2015-01-20 20:26 - 92658088 _____ (Oracle Corporation) C:\Users\Stern\Desktop\jre-8u25-windows-x64.exe
2015-01-20 20:23 - 2015-01-20 20:23 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-20 20:23 - 2015-01-20 20:23 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-20 20:23 - 2015-01-20 20:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-20 20:23 - 2015-01-20 20:23 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-20 20:21 - 2015-01-20 20:21 - 00638376 _____ (Oracle Corporation) C:\Users\Stern\Desktop\jre-8u25-windows-i586-iftw.exe
2015-01-20 19:44 - 2015-01-20 19:44 - 00001596 _____ () C:\DelFix.txt
2015-01-19 17:59 - 2015-01-19 21:45 - 00000000 __SHD () C:\Users\Stern\AppData\Roaming\.#
2015-01-19 16:43 - 2015-01-20 19:44 - 00000000 ____D () C:\Windows\ERUNT
2015-01-19 13:10 - 2015-01-28 21:35 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-19 13:09 - 2015-01-20 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-19 13:09 - 2015-01-20 21:31 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-19 13:09 - 2015-01-19 13:09 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-19 13:09 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-19 13:09 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-19 13:09 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-18 23:24 - 2015-01-29 09:05 - 00001288 _____ () C:\Windows\setupact.log
2015-01-18 23:24 - 2015-01-18 23:24 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-18 22:06 - 2015-01-27 21:00 - 00002996 _____ () C:\Windows\PFRO.log
2015-01-18 21:55 - 2015-01-20 19:42 - 00000000 ____D () C:\Windows\erdnt
2015-01-14 19:25 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 19:25 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 19:25 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 19:25 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 19:25 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 19:25 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 19:25 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 19:24 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 19:24 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 19:24 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 19:24 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 19:24 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 19:24 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-29 09:13 - 2011-12-17 10:13 - 01171686 _____ () C:\Windows\WindowsUpdate.log
2015-01-29 09:09 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-29 09:09 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-29 09:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-29 09:05 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-29 09:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-28 20:43 - 2013-02-27 09:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-27 22:45 - 2012-01-08 16:36 - 00000000 ____D () C:\Users\Stern\AppData\Roaming\Skype
2015-01-27 21:44 - 2011-08-27 01:53 - 00000000 ____D () C:\Windows\Panther
2015-01-27 21:00 - 2012-11-30 15:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-27 20:50 - 2012-11-30 15:40 - 00000000 ____D () C:\Users\Stern\AppData\Roaming\Mozilla
2015-01-27 20:43 - 2013-02-27 09:10 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-27 20:43 - 2013-02-09 09:30 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-27 20:43 - 2011-08-29 20:22 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-27 20:42 - 2011-12-17 11:41 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-27 20:41 - 2011-12-17 11:58 - 00000000 ____D () C:\Users\Stern\AppData\Local\Google
2015-01-27 20:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-27 20:30 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-01-23 19:26 - 2012-11-30 15:40 - 00000000 ____D () C:\Users\Stern\AppData\Local\Thunderbird
2015-01-20 21:16 - 2014-06-19 18:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-20 21:16 - 2012-11-30 15:40 - 00002030 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-01-20 21:16 - 2012-11-30 15:40 - 00002018 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2015-01-20 20:46 - 2014-04-26 08:16 - 00002023 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-01-20 20:46 - 2011-08-29 20:16 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-01-19 21:42 - 2012-01-06 14:11 - 00000000 ____D () C:\Users\Stern\AppData\Roaming\ALDI_SUED_Mah_Jong
2015-01-18 23:14 - 2014-06-17 08:45 - 00000000 ____D () C:\Windows\Minidump
2015-01-18 22:13 - 2012-12-23 14:27 - 00000000 ____D () C:\Users\.wh..wh.plnk
2015-01-18 22:13 - 2012-12-23 14:27 - 00000000 ____D () C:\Users\.wh..wh.orph
2015-01-18 22:13 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-01-18 22:07 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-01-14 23:23 - 2013-07-20 10:42 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 23:18 - 2011-08-29 18:49 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 19:13 - 2012-01-08 16:36 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-10 13:20 - 2011-08-29 16:58 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2015-01-10 13:20 - 2011-08-29 16:58 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2015-01-10 13:20 - 2009-07-14 06:13 - 01622300 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-08 09:55 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-01 15:32 - 2012-03-04 09:54 - 00000000 ____D () C:\Users\Stern\Documents\Bettina
2014-12-31 15:27 - 2012-11-30 14:32 - 00006144 _____ () C:\Users\Stern\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Files in the root of some directories =======

2012-11-30 14:32 - 2014-12-31 15:27 - 0006144 _____ () C:\Users\Stern\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-27 19:35 - 2014-02-27 19:35 - 0000056 ____H () C:\ProgramData\ezsidmv.dat

Some content of TEMP:
====================
C:\Users\Stern\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-15 19:46

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Guten Morgen, Schrauber, Gruß Rothfuchs

Sieh gut aus. Bestehen mit Adblocker noch Probleme?

Bis jetzt keine Probleme. Kann ich jetzt wieder was von den Sachen löschen, die ich nach Deiner Anweisung installiert habe? Gruß Rothfuchs

Machen wir jetzt:

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 29.01.2015
Suchlauf-Zeit: 19:49:18
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.01.29.08
Rootkit Datenbank: v2015.01.14.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Stern

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 391773
Verstrichene Zeit: 21 Min, 36 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 1
PUP.Optional.ASK.A, C:\Users\Stern\AppData\Roaming\Mozilla\Firefox\Profiles\d1qdlnxe.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://www.search.ask.com/?tpid=ORJ-SPE&o=APN11409&pf=V7&trgb=FF&p2=Ersetzt,[f438dc2192f70432db119c490ef715eb]EBBHErsetzt,[f438dc2192f70432db119c490ef715eb]EOSJ000Ersetzt,[f438dc2192f70432db119c490ef715eb]EYYErsetzt,[f438dc2192f70432db119c490ef715eb]EDE&gct=hp&apn_ptnrs=BBH&apn_dtid=Ersetzt,[f438dc2192f70432db119c490ef715eb]EOSJ000Ersetzt,[f438dc2192f70432db119c490ef715eb]EYYErsetzt,[f438dc2192f70432db119c490ef715eb]EDE&apn_dbr=ff_35.0.1.5500&apn_uid=437E7A6F-4E06-40BD-B78B-61B1D1991587&itbv=12.23.0.15&doi=2015-01-29&psv=&pt=tb");), Ersetzt,[f438dc2192f70432db119c490ef715eb]

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

Ist das harmlos? Gruß Rothfuchs

Jo, kannste entfernen. Is nur die AsK Toolbar. Kommt wahrscheinlich weil Avira drauf is.

So jetzt scheint alles klar zu sein, also tausend Dank!!!!!!!!!!!!!!!!!!!!! Gruß
Rothfuchs

Gern Geschehen