Windows 7: Webseiten werden auf Werbung umgeleitet

mackbeans

Hallo,

zunächst: ich habe absolut keine Ahnung und habe mich nach Möglichkeit an alles gehalten, was andernorts beschrieben wurde. Ich habe nie zuvor "Logfiles" oder ähnliches gehört und mir dennoch viel Mühe gegeben und hoffe, hier auf verständnisvolle Hilfe zu treffen. Problem: Es öffnen sich alle paar Minuten Webseiten, woraufhin mein Avast immer Alarm schlägt und es wird regelmäßig ein Fenster "Freetec Updater" geöffnet.

Habe gegoogled und diesen Eintrag gefunden:

"Freetec Updater? Was is das für ein ....."

Antwort:
Dein PC und Deine Daten sind gefährdet!

System Analyse und Bereinigung
Lade Malwarebytes Anti-Malware herunter.
Starte einen vollständigen Scan mit Anleitung: Malwarebytes Anti-Malware und Anleitung: Emsisoft Anti-Malware danach befolge für eine Analyse und Bereinigung die notwendigen Schritte Logfiles von Analysetools...
Mache alle Windows Dateien sichtbar (Anleitungen, FAQs & Links)

Befolge folgende Anweisungen: an alle Hilfesuchenden

Link:hxxp://forum.sysprofile.de/computerfragen/234752-freetec-updater-das-fuer-ein.html#post1236022

Das habe ich dann alles befolgt.

Malwarebytes:

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 09.07.2015
Suchlauf-Zeit: 21:04:01
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.07.09.05
Rootkit Datenbank: v2015.07.09.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Ina

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 388687
Verstrichene Zeit: 34 Min, 46 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe, 1804, Löschen bei Neustart, [dddc9a450189e94d17b4b44a3ac88e72]

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 15
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [e6d3c51a1179a0966536a8dcdd25916f],
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [e6d3c51a1179a0966536a8dcdd25916f],
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [e6d3c51a1179a0966536a8dcdd25916f],
PUP.Optional.Snapdo.T, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, In Quarantäne, [269398473456013539d605b7956d60a0],
PUP.Optional.Snapdo.T, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, In Quarantäne, [269398473456013539d605b7956d60a0],
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, In Quarantäne, [269398473456013539d605b7956d60a0],
PUP.Optional.SoftwareUpdater.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SystemStoreService, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SweetIM, In Quarantäne, [a11832ad0b7fd1653ebd72a1bd468b75],
PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [a514a23dcac0ed493dcb127d93715da3],
PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, In Quarantäne, [06b3bf2099f1e84efd0cf6994db78a76],
PUP.Optional.Webfuii.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Webfuii, In Quarantäne, [e0d9a738d2b85fd798ba214915ef35cb],
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [e5d42bb48a001f1725e2ddb2a95bfe02],
PUP.Optional.MultiIE.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, In Quarantäne, [9524e9f6fa90e84ece01bdb79e66fb05],
PUP.Optional.Linkury.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\SMARTBAR, In Quarantäne, [b108e2fd890183b311b35cc907fc15eb],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\SYSTWEAK\RegClean Pro, In Quarantäne, [7148db046e1ceb4bb859bca5eb1941bf],

Registrierungswerte: 4
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [4574f8e7b0dac86e1348cd56da29ff01]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [5f5aecf38109bb7baab1988b9073b64a]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, In Quarantäne, [8930bd224446c373b529b278f50e5aa6]
PUP.Optional.Linkury.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\SMARTBAR|publisher, YahooOC, In Quarantäne, [b108e2fd890183b311b35cc907fc15eb]

Registrierungsdaten: 8
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[a613756a4842bb7b0a6aa180a65f8779]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=hp&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=hp&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[c0f9934cbad0f6404c28140d7095a957]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[7e3ba8378ffbd264cea619080ff617e9]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[4475eef1b3d70630c5b127fa15f025db]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[88316f708cfee94d443234edb352e020]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[ae0bfbe45832bb7b482bcf52788d38c8]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[6d4c6a750c7efe38d5a13ee3c73e56aa]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=7e806d09-faa9-d80f-dbbf-c999b73336b0&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=20/01/2014&type=hp1000),Ersetzt,[6851e0ff45457abc0e688e930df823dd]

Ordner: 8
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.InetStat.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InetStat, In Quarantäne, [8336419e1a7075c11398a9d4bf455da3],
PUP.Optional.OpenCandy, C:\Users\Ina\AppData\Roaming\OpenCandy, In Quarantäne, [06b3e8f71a70a29498eff5d862a00cf4],
PUP.Optional.OpenCandy, C:\Users\Ina\AppData\Roaming\OpenCandy\9D2F55113D294FE9AF1A16A1F3540C59, In Quarantäne, [06b3e8f71a70a29498eff5d862a00cf4],
PUP.Optional.OpenCandy, C:\Users\Ina\AppData\Roaming\OpenCandy\B4226773DEA8457082469BA6DCDDCBBB, In Quarantäne, [06b3e8f71a70a29498eff5d862a00cf4],
PUP.Optional.NextLive.A, C:\Users\Ina\AppData\Roaming\newnext.me, In Quarantäne, [8138637c90fa2214b84b00cfc141f010],
PUP.Optional.NextLive.A, C:\Users\Ina\AppData\Roaming\newnext.me\cache, In Quarantäne, [8138637c90fa2214b84b00cfc141f010],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],

Dateien: 24
PUP.Optional.RegCleanPro.C, C:\Windows\System32\roboot64.exe, In Quarantäne, [bcfdf7e848426dc9642fea731ee758a8],
PUP.Optional.DownloadGuide.A, C:\Users\Ina\Downloads\mp3DC220_CB-DL-Manager.exe, In Quarantäne, [f5c418c78a004cea8d04dacf1de4eb15],
PUP.Optional.InstallCore, C:\Users\Ina\Downloads\FreeYouTubeToMP3Converter.exe, In Quarantäne, [7544617e0387c670a49ecc29c242cc34],
PUP.Optional.OpenCandy, C:\Users\Ina\Downloads\DTLite4481-0347.exe, In Quarantäne, [d3e6d20d008ad66029e84a07a95ccd33],
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater\config, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater\Maintenance.exe, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.dll, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.SoftwareUpdater.A, C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe, In Quarantäne, [dddc9a450189e94d17b4b44a3ac88e72],
PUP.Optional.DealPly.A, C:\Windows\Tasks\Dealply.job, In Quarantäne, [2693558a0585171fff33d840c043a15f],
PUP.Optional.InetStat.A, C:\Users\Ina\AppData\Roaming\InetStat\inetstat.exe, In Quarantäne, [3f7a1bc42e5cba7caebcd743f40f847c],
PUP.Optional.DealPly.A, C:\Windows\System32\Tasks\Dealply, In Quarantäne, [6d4cfce3f496f93d9030ac827b88827e],
PUP.Optional.InetStat.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InetStat\InetStat.lnk, In Quarantäne, [8336419e1a7075c11398a9d4bf455da3],
PUP.Optional.OpenCandy, C:\Users\Ina\AppData\Roaming\OpenCandy\9D2F55113D294FE9AF1A16A1F3540C59\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe, In Quarantäne, [06b3e8f71a70a29498eff5d862a00cf4],
PUP.Optional.NextLive.A, C:\Users\Ina\AppData\Roaming\newnext.me\nengine.cookie, In Quarantäne, [8138637c90fa2214b84b00cfc141f010],
PUP.Optional.NextLive.A, C:\Users\Ina\AppData\Roaming\newnext.me\cache\spark.bin, In Quarantäne, [8138637c90fa2214b84b00cfc141f010],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check\libcurl.dll, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check\libeay32.dll, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check\libgcc_s_dw2-1.dll, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check\libidn-11.dll, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check\libstdc++-6.dll, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check\ssleay32.dll, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],
PUP.Optional.EasySpeedCheck.C, C:\Program Files (x86)\Easy Speed Check\zlib1.dll, In Quarantäne, [fabf8857b5d568ce986c3bc128dae61a],

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)


Emisoft:


Emsisoft Anti-Malware - Version 10.0.0.5532
Letztes Update: 7/9/2015 9:18:21 PM
Benutzerkonto: InasPC\Ina

Scaneinstellungen:

Scantyp: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien

Erkenne PUPs: An
Archive scannen: Aus
ADS-Scan: An
Dateierweiterungen: Aus
Advanced Caching: An
Direct Disk Access: Aus

Scan Beginn: 7/9/2015 9:45:23 PM
C:\Users\Ina\AppData\Local\genienext Application.AdGenie (A)
C:\Users\Ina\AppData\Local\Mobogenie Application.AdGenie (A)
C:\Users\Ina\AppData\Roaming\systweak Application.AppInstall (A)
C:\ProgramData\partner Application.AppInstall (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Setting.DisableTaskMgr (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER -> NORUN Setting.NoRun (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Application.AdGenie (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Application.AdReg (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Application.Win32.WebApp (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Application.AdReg (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\KT_BHO.KETTLEBHO Application.AdReg (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\KT_BHO.KETTLEBHO.1 Application.AdReg (A)
Key: HKEY_USERS\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\SYSTWEAK Application.InstallAd (A)
C:\windows\TEMP\_avast_\ws36618.dat Gen:Variant.Adware.Kazy.563516 (B)

Gescannt 74046
Gefunden 15

Scan Ende: 7/9/2015 9:52:02 PM
Scanzeit: 0:06:39

C:\windows\TEMP\_avast_\ws36618.dat Quarantäne Gen:Variant.Adware.Kazy.563516 (B)
Key: HKEY_USERS\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\SYSTWEAK Quarantäne Application.InstallAd (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\KT_BHO.KETTLEBHO.1 Quarantäne Application.AdReg (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\KT_BHO.KETTLEBHO Quarantäne Application.AdReg (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Quarantäne Application.AdReg (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Quarantäne Application.AdReg (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Quarantäne Application.AdGenie (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER -> NORUN Quarantäne Setting.NoRun (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Quarantäne Setting.DisableTaskMgr (A)
C:\ProgramData\partner Quarantäne Application.AppInstall (A)
C:\Users\Ina\AppData\Roaming\systweak Quarantäne Application.AppInstall (A)
C:\Users\Ina\AppData\Local\Mobogenie Quarantäne Application.AdGenie (A)
C:\Users\Ina\AppData\Local\genienext Quarantäne Application.AdGenie (A)

Quarantäne 14


OTL:

OTL Extras logfile created on: 7/9/2015 10:04:30 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Ina\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17843)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

7.95 Gb Total Physical Memory | 4.29 Gb Available Physical Memory | 53.96% Memory free
15.89 Gb Paging File | 11.32 Gb Available in Paging File | 71.27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 654.69 Gb Total Space | 110.76 Gb Free Space | 16.92% Space Free | Partition Type: NTFS
Drive D: | 29.00 Gb Total Space | 23.88 Gb Free Space | 82.35% Space Free | Partition Type: NTFS
Drive F: | 5.46 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: INASPC | User Name: Ina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03184A51-7455-41BD-A7BA-4702D49B05A4}" = rport=10243 | protocol=6 | dir=out | app=system |
"{11C659E8-3AEF-48BA-8281-6044E4BBA6F4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1A45DD77-9247-44CA-9AA9-BA8E34BDF08A}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{1BFD6565-B9B7-4EE2-BB12-626067FB5759}" = rport=137 | protocol=17 | dir=out | app=system |
"{1D0849B1-7406-4599-90A5-5ED1073432F2}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{26A929A7-1E18-4E9D-9A1A-F3FF7B871D44}" = lport=139 | protocol=6 | dir=in | app=system |
"{3FBC3898-2ACC-4630-A8C5-D3452B98C0ED}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{48F8DD45-B3F9-4B79-904B-5B58AAD0F506}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5264433E-5890-4211-946F-40071CBEC260}" = lport=2869 | protocol=6 | dir=in | app=system |
"{5437CB05-44B3-46CC-B9E2-041484133808}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{5CBA8CEB-CD66-489A-9836-43072FC08658}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{65F777DF-99BD-4D40-89BA-DB2D6BA8D201}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{66EA152C-DB52-48A2-ACF6-BE194FFC1CFA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{69038F4B-E205-4990-B8CB-ADBBB8841449}" = lport=10243 | protocol=6 | dir=in | app=system |
"{7D8E1A47-8FB5-4CE1-8028-1AC0AD4E00E7}" = rport=445 | protocol=6 | dir=out | app=system |
"{89C76335-FFE1-4BFF-A801-786638E525D2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8FAFE87E-19A8-4835-BC11-95678BEEA95F}" = lport=445 | protocol=6 | dir=in | app=system |
"{967B6591-B4BF-4DD7-964C-51B821CCFAF9}" = rport=139 | protocol=6 | dir=out | app=system |
"{9AEEBF21-18C2-4AC6-92CA-DC99FEDFD3AF}" = lport=138 | protocol=17 | dir=in | app=system |
"{9DC07DF4-07CA-4795-838C-5CF4D075A41E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A66DC9E1-484F-4F7A-80D2-24F371B97E6B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A83DCC1E-D93F-4EEE-8331-063A3BC76707}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{B6589999-D10C-452D-9C0C-6FBFF6963458}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C3148B35-E9F8-451F-8DA6-64487A84485B}" = lport=137 | protocol=17 | dir=in | app=system |
"{DBF8057E-44B9-4700-95FD-58399D0D8D3D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FC8A2B8B-DD40-425F-BA8A-163455CD6256}" = rport=138 | protocol=17 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{09C81F32-C16A-452A-B8F4-B5A31FE518FE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{09D982F6-5F62-42B1-9F31-7F9FDA85EF2E}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{129048EF-0AC0-4DD6-968F-FFEAEAC6E8F3}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{143EE1FD-0929-4DD4-AE62-76CDFD024F9C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{2502F12F-9BC2-44CE-B311-4510F393DDEA}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{2A2A542B-5D6C-4DE7-92D0-0BBF91222670}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{2A3709F8-17B3-48AA-A1B5-D5788583F6C6}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{2E326485-DA4E-48C2-8A9E-5B965E999825}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{314A224E-C117-4B92-BB68-FB253EABB3A4}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\seabattle.exe |
"{3CFF51F2-D8F9-45E4-8B07-E455D5AF2C14}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{3DE76953-F3D5-4910-870A-4B1863134AD1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{465F7BE1-9AD2-4015-A1EE-BE33164164BC}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\backgammon.exe |
"{46730462-14B8-40C8-BF49-DE696F05A15C}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\checkers.exe |
"{4AF46C50-BDAC-4DE1-B936-22BA2767F80E}" = protocol=6 | dir=out | app=system |
"{4D981E6C-B605-4C7D-840E-C1D5F1E86840}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4EE4C514-FCDC-4E08-8C98-4A8796D86D28}" = protocol=17 | dir=in | app=c:\program files\avast software\avast\ng\vbox\aswfe.exe |
"{51DB077F-A864-452F-9D30-9C186D81FA1E}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{53936316-043E-44AD-811D-984C16CDFEEA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{56E66486-0183-469B-A3BD-89A5A0BAF289}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{59DD7368-B606-4732-9F5B-FB8F72CDD476}" = dir=in | app=c:\program files (x86)\intel corporation\intel wireless display\widiapp.exe |
"{5EEC201D-8734-4763-A667-905BA159E219}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{63FD2901-33F3-4BB7-8D07-110BBB92C458}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
"{6C5A7B3E-F042-40C2-B372-9DCBA50B57A8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7477997B-AB57-40F2-8066-774DA2C53EAD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{74D54336-0991-459F-A529-99CFE4C073A6}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7AF571E6-7DCE-403E-8B25-E8A8703D5C93}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{8C9881BE-00D5-42DC-8F82-CA1FC8111A30}" = protocol=6 | dir=in | app=c:\program files\avast software\avast\ng\vbox\aswfe.exe |
"{96CB029B-9FB8-4ECA-A654-9C287207AF6C}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\chess.exe |
"{9BD0AFE1-E4D9-422B-B250-5DDD766234E0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A0D06F72-0343-4D3C-9DDE-455BD0589042}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A22B5A96-AA2E-4C0C-9255-D7BDC4B15A3F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AF9E7569-FACF-443A-A4FB-A887D5DE61ED}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{C010627C-A4A8-44E8-814D-26A8475C2FD9}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C470AC1C-48CE-4534-AE75-371B8CAB8672}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{C86769DE-85A9-4419-B6D2-080407590112}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\easychat.exe |
"{D356B364-79BA-4B75-9BF6-CC0F3C245CCF}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{D5D3002C-5B37-4417-960A-D0EFF67BEA25}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{D8C5DCB1-7358-4B1C-9702-95925596576A}" = dir=in | app=c:\program files\lenovo\bluetooth software\easybits games\tictactoe.exe |
"{DD831EB9-2AC5-4C53-BEA7-A2CBD41ADF5C}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
"{DDDAE87D-4E41-4583-B82E-EA2708391738}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{DF981A2C-1440-418C-92DD-460E90BD4E97}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{E09F45A5-496C-4796-BD5A-155C0D17C36C}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{E9ABCF10-2068-4EA0-8DA6-A4ED9B489E9A}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{F26C0C17-984A-4E02-98B5-43EFD5C26DB7}" = protocol=58 | dir=in | app=system |
"{F38E9B0A-324B-4162-9DA8-C60EEBF80BB0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{F9623F38-3088-420B-8105-DC40DE7B1CD6}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{4046F74A-28F8-48C6-A5D3-2AFC472574C1}" = iTunes
"{5141AA6E-5FAC-4473-BFFB-BEE69DDC7F2B}" = Windows Live Remote Service Resources
"{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}" = Apple Mobile Device Support
"{5F44A3A1-5D24-4708-8776-66B42B174C64}" = Windows Live Remote Client Resources
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{709A2D23-C25E-47B5-9268-CB6FEE648504}" = iCloud
"{8045449D-211E-4016-BA26-98D04F10613A}" = LINEA office
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A1F9964C-62CE-419F-B7FD-6A22059F30D0}" = Olivetti Toolbox
"{B255D495-4734-4E9B-B4F5-96702FD4A7B9}" = Apple Application Support (64-Bit)
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"EA12B1FB53CE4E387C31A85236C41EF559B5E392" = Windows Driver Package - Lenovo (ACPIVPC) System (12/02/2010 6.1.0.1)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.5
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34C4F5AF-D757-4E6A-ABCA-65AB5A50A1A8}" = Windows Live Messenger
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1" = Emsisoft Anti-Malware
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{627FFC10-CE0A-497F-BA2B-208CAC638010}" = QuickTime 7
"{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
"{7FE25256-B7C1-480D-B736-10A67A833AEA}" = Apple Application Support (32-Bit)
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-0804-1033-1959-001824144531}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.11) - Deutsch
"{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}" = Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
"{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"Avast" = Avast Free Antivirus
"Diablo II" = Diablo II
"Free Audio Converter_is1" = Free Audio Converter version 5.0.58.415
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.12.57.324
"Google Chrome" = Google Chrome
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware Version 2.1.6.1022
"WinLiveSuite" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Flux" = f.lux
"Spotify" = Spotify

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 28.05.2015 14:50:50 | Computer Name = InasPC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 28.05.2015 14:50:50 | Computer Name = InasPC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 3994

Error - 28.05.2015 14:50:50 | Computer Name = InasPC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3994

Error - 28.05.2015 17:04:46 | Computer Name = InasPC | Source = Bonjour Service | ID = 100
Description = Client application bug: DNSServiceResolve(BZDN2024213485-QkxaMDAwMmRDNXYxRkNFOTY4OUI1VDkxRTNDNUI2L0ZD._bzdn._tcp.local.)
active for over two minutes. This places considerable burden on the network.

Error - 29.05.2015 01:52:19 | Computer Name = InasPC | Source = WinMgmt | ID = 10
Description =

Error - 29.05.2015 01:55:40 | Computer Name = InasPC | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed. Engine returned error : 1

Error - 29.05.2015 09:13:41 | Computer Name = InasPC | Source = WinMgmt | ID = 10
Description =

Error - 29.05.2015 09:16:27 | Computer Name = InasPC | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed. Engine returned error : 1

Error - 31.05.2015 03:09:07 | Computer Name = InasPC | Source = WinMgmt | ID = 10
Description =

Error - 31.05.2015 03:13:30 | Computer Name = InasPC | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed. Engine returned error : 1

Error - 04.06.2015 04:11:43 | Computer Name = InasPC | Source = WinMgmt | ID = 10
Description =

Error - 04.06.2015 04:14:35 | Computer Name = InasPC | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed. Engine returned error : 1

[ System Events ]
Error - 08.07.2015 03:56:02 | Computer Name = InasPC | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
von Dienst EvtEng erreicht.

Error - 08.07.2015 03:56:06 | Computer Name = InasPC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
System Store erreicht.

Error - 08.07.2015 03:56:06 | Computer Name = InasPC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "System Store" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error - 08.07.2015 03:56:06 | Computer Name = InasPC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Update Webfuii" wurde aufgrund folgenden Fehlers nicht
gestartet: %%2

Error - 08.07.2015 14:56:03 | Computer Name = InasPC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1243

Error - 08.07.2015 14:56:35 | Computer Name = InasPC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Update Webfuii" wurde aufgrund folgenden Fehlers nicht
gestartet: %%2

Error - 08.07.2015 14:57:57 | Computer Name = InasPC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 09.07.2015 12:30:51 | Computer Name = InasPC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1243

Error - 09.07.2015 12:31:02 | Computer Name = InasPC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Update Webfuii" wurde aufgrund folgenden Fehlers nicht
gestartet: %%2

Error - 09.07.2015 12:35:21 | Computer Name = InasPC | Source = DCOM | ID = 10010
Description =


< End of report >


OTL2:

OTL logfile created on: 7/9/2015 10:04:30 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Ina\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17843)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

7.95 Gb Total Physical Memory | 4.29 Gb Available Physical Memory | 53.96% Memory free
15.89 Gb Paging File | 11.32 Gb Available in Paging File | 71.27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 654.69 Gb Total Space | 110.76 Gb Free Space | 16.92% Space Free | Partition Type: NTFS
Drive D: | 29.00 Gb Total Space | 23.88 Gb Free Space | 82.35% Space Free | Partition Type: NTFS
Drive F: | 5.46 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: INASPC | User Name: Ina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Ina\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Emsisoft Ltd)
PRC - C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2guard.exe (Emsisoft Ltd)
PRC - C:\Users\Ina\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
PRC - C:\Users\Ina\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd)
PRC - C:\Users\Ina\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd)
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
PRC - C:\Users\Ina\AppData\Local\FluxSoftware\Flux\flux.exe (Flux Software LLC)
PRC - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (Lenovo)
PRC - C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe ()
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink)
PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)


========== Modules (No Company Name) ==========

MOD - C:\Users\Ina\AppData\Roaming\Spotify\libcef.dll ()
MOD - C:\Users\Ina\AppData\Roaming\Spotify\libglesv2.dll ()
MOD - C:\Users\Ina\AppData\Roaming\Spotify\libegl.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll ()
MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\Program Files\AVAST Software\Avast\log.dll ()
MOD - C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\6bed2a9834d35bcfa924f04d32b82256\IAStorUtil.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1c3513960037508558358652f2d202a1\WindowsBase.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\e8d9058b7f59f6d3d134b086916d8674\IAStorCommon.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll ()
MOD - C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Program Files (x86)\Lenovo\VeriFace\ChooseLang.dll ()
MOD - C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe ()
MOD - C:\Program Files (x86)\Lenovo\Onekey Theater\WindowsApiHookDll32.dll ()
MOD - C:\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect32.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (AvastVBoxSvc) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe File not found
SRV:64bit: - (DiagTrack) -- C:\Windows\SysNative\diagtrack.dll (Microsoft Corporation)
SRV:64bit: - (IEEtwCollectorService) -- C:\windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
SRV:64bit: - (!SASCORE) -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com)
SRV:64bit: - (McAPExe) -- C:\Program Files\mcafee\msc\McAPExe.exe (McAfee, Inc.)
SRV:64bit: - (mfevtp) -- C:\Windows\SysNative\mfevtps.exe (McAfee, Inc.)
SRV:64bit: - (mfefire) -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe ()
SRV:64bit: - (mfecore) -- C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (McAfee, Inc.)
SRV:64bit: - (McODS) -- C:\Program Files\mcafee\virusscan\mcods.exe (McAfee, Inc.)
SRV:64bit: - (McProxy) -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (mcpltsvc) -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McNaiAnn) -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McMPFSvc) -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (HomeNetSvc) -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (McShield) -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV:64bit: - (btwdins) -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV:64bit: - (EvtEng) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV:64bit: - (MyWiFiDHCPDNS) -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV:64bit: - (RegSrvc) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV:64bit: - (McAWFwk) -- c:\Program Files\mcafee\msc\McAWFwk.exe (McAfee, Inc.)
SRV:64bit: - (McOobeSv) -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (McAfee SiteAdvisor Service) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (olMntrService) -- C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe (Olivetti)
SRV - (a2AntiMalware) -- C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Emsisoft Ltd)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (IAStorDataMgrSvc) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (VBoxAswDrv) -- C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys File not found
DRV:64bit: - (ggpsks) -- C:\Windows\SysNative\drivers\qggrsnc.sys (Malwarebytes Corporation)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswsp.sys (Avast Software s.r.o.)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (aswVmm) -- C:\windows\SysNative\drivers\aswVmm.sys ()
DRV:64bit: - (aswStm) -- C:\Windows\SysNative\drivers\aswStm.sys (Avast Software s.r.o.)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (Avast Software s.r.o.)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (Avast Software s.r.o.)
DRV:64bit: - (aswRvrt) -- C:\windows\SysNative\drivers\aswRvrt.sys ()
DRV:64bit: - (aswHwid) -- C:\Windows\SysNative\drivers\aswHwid.sys ()
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (Avast Software s.r.o.)
DRV:64bit: - (MBAMWebAccessControl) -- C:\Windows\SysNative\drivers\mwac.sys (Malwarebytes Corporation)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (cfwids) -- C:\Windows\SysNative\drivers\cfwids.sys (McAfee, Inc.)
DRV:64bit: - (mfewfpk) -- C:\Windows\SysNative\drivers\mfewfpk.sys (McAfee, Inc.)
DRV:64bit: - (mfehidk) -- C:\Windows\SysNative\drivers\mfehidk.sys (McAfee, Inc.)
DRV:64bit: - (mfefirek) -- C:\Windows\SysNative\drivers\mfefirek.sys (McAfee, Inc.)
DRV:64bit: - (mfeavfk) -- C:\Windows\SysNative\drivers\mfeavfk.sys (McAfee, Inc.)
DRV:64bit: - (mfeapfk) -- C:\Windows\SysNative\drivers\mfeapfk.sys (McAfee, Inc.)
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (Disc Soft Ltd)
DRV:64bit: - (mfencrk) -- C:\Windows\SysNative\drivers\mfencrk.sys (McAfee, Inc.)
DRV:64bit: - (mfencbdc) -- C:\Windows\SysNative\drivers\mfencbdc.sys (McAfee, Inc.)
DRV:64bit: - (HipShieldK) -- C:\Windows\SysNative\drivers\HipShieldK.sys (McAfee, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (Fs_Rec) -- C:\windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (mferkdet) -- C:\Windows\SysNative\drivers\mferkdet.sys (McAfee, Inc.)
DRV:64bit: - (LHDmgr) -- C:\Windows\SysNative\drivers\LhdX64.sys (Lenovo.)
DRV:64bit: - (ACPIVPC) -- C:\Windows\SysNative\drivers\AcpiVpc.sys (Lenovo Corporation)
DRV:64bit: - (fbfmon) -- C:\Windows\SysNative\drivers\fbfmon.sys (Lenovo)
DRV:64bit: - (BPntDrv) -- C:\Windows\SysNative\drivers\BPntDrv.sys (Lenovo)
DRV:64bit: - (DelayMan) -- C:\Windows\SysNative\drivers\delayman.sys (Ensurebit Inc.)
DRV:64bit: - (winioex) -- C:\Windows\SysNative\drivers\winioex.sys (Ensurebit Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (BTWDPAN) -- C:\Windows\SysNative\drivers\btwdpan.sys (Broadcom Corporation.)
DRV:64bit: - (BTWAMPFL) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) -- C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwaudio) -- C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (btwl2cap) -- C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) -- C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (nvpciflt) -- C:\Windows\SysNative\drivers\nvpciflt.sys (NVIDIA Corporation)
DRV:64bit: - (k57nd60a) -- C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (NETwNs64) -- C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (rtsuvc) -- C:\Windows\SysNative\drivers\rtsuvc.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (clwvd) -- C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (JMCR) -- C:\Windows\SysNative\drivers\jmcr.sys (JMicron Technology Corporation)
DRV:64bit: - (wdkmd) -- C:\Windows\SysNative\drivers\WDKMD.sys (Intel Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:64bit: - (wsvd) -- C:\Windows\SysNative\drivers\wsvd.sys (CyberLink)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (OLSVUSB) -- C:\Windows\SysNative\drivers\olsrvusb.sys (Olivetti-Engineering SA)
DRV - (epp64) -- C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp64.sys (Emsisoft GmbH)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/ [binary data]
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
IE - HKLM\..\SearchScopes,DefaultScope = {9CB96984-43C3-4D44-90EF-01466EFCF7BB}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}: "URL" = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.lenovo.com
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.com

IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.com
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\..\SearchScopes,DefaultScope = {9CB96984-43C3-4D44-90EF-01466EFCF7BB}
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\..\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}: "URL" = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-899214968-3169570605-3866212112-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2014/06/19 20:44:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2014/02/23 14:12:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015/05/16 19:03:42 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{B64D9B05-48E1-4CEB-BF58-E0643994E900}: C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\

[2014/01/21 21:46:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ina\AppData\Roaming\mozilla\Firefox\extensions

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.9_0\
CHR - Extension: No name found = C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\
CHR - Extension: No name found = C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd\2.7.6_0\
CHR - Extension: No name found = C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\
CHR - Extension: No name found = C:\Users\Ina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\

O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (Avast Software s.r.o.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O2:64bit: - BHO: (no name) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No CLSID value found.
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (Avast Software s.r.o.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O2 - BHO: (no name) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4:64bit: - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [Lenovo EE Boot Optimizer] C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe (Lenovo)
O4:64bit: - HKLM..\Run: [OlStatusMon] C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe (Olivetti)
O4:64bit: - HKLM..\Run: [OnekeyStudio] C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
O4 - HKLM..\Run: [emsisoft anti-malware] c:\program files (x86)\emsisoft anti-malware\a2guard.exe (Emsisoft Ltd)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [mcpltui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe File not found
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (Lenovo)
O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink)
O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe (CyberLink Corp.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1000..\Run: [FactoryTest] C:\Windows\Test.bat File not found
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1000..\Run: [Power2GoExpress] NA File not found
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1000..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1001..\Run: [f.lux] C:\Users\Ina\AppData\Local\FluxSoftware\Flux\flux.exe (Flux Software LLC)
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1001..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1001..\Run: [Spotify] C:\Users\Ina\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1001..\Run: [Spotify Web Helper] C:\Users\Ina\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1001..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware)
O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-899214968-3169570605-3866212112-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\S-1-5-21-899214968-3169570605-3866212112-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found
O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{04FE0B0E-BB9E-4121-96E0-392FE311B0ED}: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8232818E-84C8-46A8-91FE-184057A022ED}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)
O20:64bit: - AppInit_DLLs: (C:\windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (c:\windows\syswow64\nvinit.dll) - c:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2015/07/09 21:59:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2015/07/09 21:52:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Emsisoft
[2015/07/09 21:40:24 | 000,079,064 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\qggrsnc.sys
[2015/07/09 21:21:12 | 000,000,000 | ---D | C] -- C:\Users\Ina\Desktop\Bücher
[2015/07/09 21:17:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
[2015/07/09 21:15:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Emsisoft Anti-Malware
[2015/07/09 21:03:36 | 000,136,408 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/07/09 21:03:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
[2015/07/09 21:03:10 | 000,107,736 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbamchameleon.sys
[2015/07/09 21:03:10 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mwac.sys
[2015/07/09 21:03:10 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys
[2015/07/09 21:03:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ Malwarebytes Anti-Malware
[2015/07/09 21:03:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2015/07/09 18:34:33 | 000,000,000 | ---D | C] -- C:\Users\Ina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
[2015/07/07 16:53:36 | 000,000,000 | ---D | C] -- C:\Users\Ina\AppData\Local\Spotify
[2015/07/07 16:52:57 | 000,000,000 | ---D | C] -- C:\Users\Ina\AppData\Roaming\Spotify
[2015/07/07 14:25:33 | 000,000,000 | ---D | C] -- C:\Users\Ina\Desktop\Bildungsseminar
[2015/07/01 15:05:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2015/07/01 15:05:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2015/07/01 15:00:44 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2015/07/01 14:52:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2015/07/01 14:52:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2015/06/27 19:55:11 | 000,000,000 | ---D | C] -- C:\SUPERDelete
[2015/06/27 19:53:45 | 000,000,000 | ---D | C] -- C:\Users\Ina\AppData\Roaming\SUPERAntiSpyware.com
[2015/06/27 19:53:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2015/06/27 19:53:18 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2015/06/17 00:23:50 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\windows\SysWow64\QuickTimeVR.qtx
[2015/06/17 00:23:50 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\windows\SysWow64\QuickTime.qts
[2015/06/13 21:00:11 | 000,000,000 | ---D | C] -- C:\b02536395652b20bb1
[2015/06/13 20:03:09 | 011,411,456 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\wmp.dll
[2015/06/13 20:03:05 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\spwmp.dll
[2015/06/13 20:03:05 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msdxm.ocx
[2015/06/13 20:03:05 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\dxmasf.dll
[2015/06/13 20:03:04 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\wmploc.DLL
[2015/06/13 20:02:10 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\advapi32.dll
[2015/06/13 20:02:09 | 003,989,440 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntkrnlpa.exe
[2015/06/13 20:02:07 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\conhost.exe
[2015/06/13 20:02:06 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\tracerpt.exe
[2015/06/13 20:02:04 | 003,934,144 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntoskrnl.exe
[2015/06/13 20:02:02 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\logman.exe
[2015/06/13 20:02:01 | 000,635,392 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\tdh.dll
[2015/06/13 20:02:00 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\setup16.exe
[2015/06/13 20:01:59 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\auditpol.exe
[2015/06/13 20:01:59 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\auditpol.exe
[2015/06/13 20:01:59 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\typeperf.exe
[2015/06/13 20:01:58 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\relog.exe
[2015/06/13 20:01:55 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\diskperf.exe
[2015/06/13 20:01:54 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntvdm64.dll
[2015/06/13 20:01:52 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\wow32.dll
[2015/06/13 20:01:49 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2015/06/13 20:01:46 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2015/06/13 20:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/06/13 20:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/06/13 20:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2015/06/13 20:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2015/06/13 20:01:45 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2015/06/13 20:01:45 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2015/06/13 20:01:45 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2015/06/13 20:01:45 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2015/06/13 20:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2015/06/13 20:01:44 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2015/06/13 20:01:44 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2015/06/13 20:01:44 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2015/06/13 20:01:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2015/06/13 20:01:43 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2015/06/13 20:01:43 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2015/06/13 20:01:43 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2015/06/13 20:01:43 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2015/06/13 20:01:42 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\apisetschema.dll
[2015/06/13 20:01:42 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\apisetschema.dll
[2015/06/13 20:01:42 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2015/06/13 20:01:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\instnm.exe
[2015/06/13 20:01:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2015/06/13 20:01:41 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2015/06/13 20:01:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2015/06/13 20:01:41 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2015/06/13 20:01:40 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\user.exe
[2015/06/13 20:01:37 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\adtschema.dll
[2015/06/13 20:01:37 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\adtschema.dll
[2015/06/13 20:01:35 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msaudite.dll
[2015/06/13 20:01:34 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msobjs.dll
[2015/06/13 20:00:45 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\comctl32.dll
[2015/06/13 20:00:10 | 000,069,888 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\stream.sys
[2015/06/13 19:59:29 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll
[2015/06/13 19:59:29 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll
[2015/06/13 19:59:28 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
[2015/06/13 19:59:28 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\MshtmlDac.dll
[2015/06/13 19:59:27 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll
[2015/06/13 19:59:23 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
[2015/06/13 19:59:23 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll
[2015/06/13 19:59:23 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll
[2015/06/13 19:59:22 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll
[2015/06/13 19:59:22 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll
[2015/06/13 19:59:22 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe
[2015/06/13 19:59:21 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2015/06/13 19:59:16 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll
[2015/06/13 19:59:15 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\html.iec
[2015/06/13 19:59:15 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll
[2015/06/10 23:08:36 | 000,054,784 | ---- | C] (Apple, Inc.) -- C:\windows\SysNative\drivers\usbaapl64.sys
[2015.07.01 15:05:24 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2015.07.01 15:05:24 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2015.06.27 19:53:18 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2015.06.13 20:03:10 | 014,635,008 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wmp.dll
[2015.06.13 20:03:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\spwmp.dll
[2015.06.13 20:03:05 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msdxm.ocx
[2015.06.13 20:03:05 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxmasf.dll
[2015.06.13 20:03:04 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wmploc.DLL
[2015.06.13 20:02:13 | 001,255,424 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\diagtrack.dll
[2015.06.13 20:02:12 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\KernelBase.dll
[2015.06.13 20:02:11 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\lsasrv.dll
[2015.06.13 20:02:11 | 001,162,752 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\kernel32.dll
[2015.06.13 20:02:09 | 005,569,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntoskrnl.exe
[2015.06.13 20:02:09 | 001,728,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntdll.dll
[2015.06.13 20:02:07 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wow64.dll
[2015.06.13 20:02:06 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\srcore.dll
[2015.06.13 20:02:05 | 000,404,992 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\tracerpt.exe
[2015.06.13 20:02:04 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rstrui.exe
[2015.06.13 20:02:04 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\winsrv.dll
[2015.06.13 20:02:03 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\tdh.dll
[2015.06.13 20:02:03 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sechost.dll
[2015.06.13 20:02:03 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\logman.exe
[2015.06.13 20:02:02 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ncrypt.dll
[2015.06.13 20:02:00 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspicli.dll
[2015.06.13 20:02:00 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\smss.exe
[2015.06.13 20:01:59 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\typeperf.exe
[2015.06.13 20:01:59 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\relog.exe
[2015.06.13 20:01:57 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\srclient.dll
[2015.06.13 20:01:56 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\csrsrv.dll
[2015.06.13 20:01:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\diskperf.exe
[2015.06.13 20:01:55 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntvdm64.dll
[2015.06.13 20:01:54 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspisrv.dll
[2015.06.13 20:01:54 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\secur32.dll
[2015.06.13 20:01:53 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wow64win.dll
[2015.06.13 20:01:53 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wow64cpu.dll
[2015.06.13 20:01:36 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msaudite.dll
[2015.06.13 20:01:34 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msobjs.dll
[2015.06.13 20:01:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\UtcResources.dll
[2015.06.13 19:59:29 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe
[2015.06.13 19:59:28 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe
[2015.06.13 19:59:28 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll
[2015.06.13 19:59:28 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll
[2015.06.13 19:59:27 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll
[2015.06.13 19:59:22 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll
[2015.06.13 19:59:21 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe
[2015.06.13 19:59:21 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll
[2015.06.13 19:59:21 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll
[2015.06.13 19:59:18 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll
[2015.06.13 19:59:18 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll
[2015.06.13 19:59:17 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
[2015.06.13 19:59:16 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll
[2015.06.13 19:59:16 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe
[2015.06.13 19:59:15 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll
[2015.06.13 19:59:14 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2015.06.13 19:59:11 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll
[2015.06.13 19:59:11 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
[2015.06.13 19:59:10 | 006,026,240 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2015.06.13 19:59:10 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll
[2015.06.13 19:59:10 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll
[2015.06.13 19:59:09 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\html.iec
[2015.06.13 19:59:09 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MshtmlDac.dll
[2015.06.13 19:59:08 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll
[2015.06.10 23:08:36 | 006,112,072 | ---- | C] (Apple, Inc.) -- C:\windows\SysNative\usbaaplrc.dll
[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2015.07.09 21:40:24 | 000,079,064 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\qggrsnc.sys
[2015.07.09 21:36:03 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA1cf2c28d5508df.job
[2015.07.09 21:17:03 | 000,001,091 | ---- | M] () -- C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2015.07.09 21:11:51 | 000,028,704 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.07.09 21:11:51 | 000,028,704 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.07.09 21:03:57 | 000,136,408 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
[2015.07.09 21:03:21 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2015.07.09 20:56:53 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2015.07.09 18:34:17 | 000,215,298 | ---- | M] () -- C:\windows\SysNative\fastboot.set
[2015.07.09 18:33:42 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2015.07.09 18:30:00 | 2103,332,863 | -HS- | M] () -- C:\hiberfil.sys
[2015.07.07 16:53:35 | 000,001,793 | ---- | M] () -- C:\Users\Ina\Desktop\Spotify.lnk
[2015.07.01 16:09:54 | 000,002,058 | -H-- | M] () -- C:\Users\Ina\Documents\Default.rdp
[2015.07.01 15:05:58 | 000,001,713 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2015.07.01 14:52:53 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2015.06.28 09:53:48 | 002,422,696 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2015.06.28 09:53:48 | 000,699,666 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
[2015.06.28 09:53:48 | 000,660,968 | ---- | M] () -- C:\windows\SysNative\perfh005.dat
[2015.06.28 09:53:48 | 000,654,464 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2015.06.28 09:53:48 | 000,149,774 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
[2015.06.28 09:53:48 | 000,141,618 | ---- | M] () -- C:\windows\SysNative\perfc005.dat
[2015.06.28 09:53:48 | 000,122,336 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2015.06.27 19:53:21 | 000,001,768 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2015.06.27 17:51:51 | 000,442,264 | ---- | M] (Avast Software s.r.o.) -- C:\windows\SysNative\drivers\aswsp.sys
[2015.06.17 00:23:50 | 000,094,208 | ---- | M] (Apple Inc.) -- C:\windows\SysWow64\QuickTimeVR.qtx
[2015.06.17 00:23:50 | 000,069,632 | ---- | M] (Apple Inc.) -- C:\windows\SysWow64\QuickTime.qts
[2015.06.14 10:26:17 | 000,289,736 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2015.06.10 23:08:36 | 006,112,072 | ---- | M] (Apple, Inc.) -- C:\windows\SysNative\usbaaplrc.dll
[2015.06.10 23:08:36 | 000,054,784 | ---- | M] (Apple, Inc.) -- C:\windows\SysNative\drivers\usbaapl64.sys
[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2015/07/09 21:17:03 | 000,001,091 | ---- | C] () -- C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2015/07/09 21:03:21 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2015/07/07 16:53:35 | 000,001,793 | ---- | C] () -- C:\Users\Ina\Desktop\Spotify.lnk
[2015/07/07 16:53:35 | 000,001,779 | ---- | C] () -- C:\Users\Ina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
[2015/07/01 15:05:58 | 000,001,713 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2015/07/01 14:52:53 | 000,001,845 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2015/06/27 19:53:21 | 000,001,768 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2014/12/10 12:51:23 | 000,007,598 | ---- | C] () -- C:\Users\Ina\AppData\Local\Resmon.ResmonCfg
[2014/02/16 14:58:17 | 000,074,658 | ---- | C] () -- C:\Users\Ina\tattoo1.jpg
[2014/01/24 22:41:11 | 000,001,053 | ---- | C] () -- C:\Users\Ina\Airline Tycoon - Deluxe.lnk
[2014/01/20 23:43:59 | 000,001,950 | ---- | C] () -- C:\Users\Ina\DAEMON Tools Lite.lnk
[2014/01/18 12:19:44 | 186,379,464 | ---- | C] () -- C:\Users\Ina\Neue braune Welle_ Die Jugend im Visier der Rechtsextremen.mp4
[2014/01/16 23:19:29 | 054,805,031 | ---- | C] () -- C:\Users\Ina\Akzeptierende Jugendarbeit mit rechten Cliquen.mp4
[2014/01/13 21:48:09 | 000,002,166 | ---- | C] () -- C:\Users\Ina\McAfee Security Scan Plus.lnk
[2014/01/13 21:47:49 | 000,002,019 | ---- | C] () -- C:\Users\Ina\Adobe Reader XI.lnk
[2014/01/10 15:42:08 | 000,001,239 | ---- | C] () -- C:\Users\Ina\DVDVideoSoft Free Studio.lnk
[2014/01/09 23:10:21 | 000,000,871 | ---- | C] () -- C:\Users\Ina\VLC media player.lnk
[2014/01/07 22:29:28 | 000,001,966 | ---- | C] () -- C:\Users\Ina\avast! Free Antivirus.lnk
[2014/01/06 16:27:16 | 000,002,086 | ---- | C] () -- C:\Users\Ina\OneKey Recovery.lnk
[2014/01/06 16:27:16 | 000,001,122 | ---- | C] () -- C:\Users\Ina\Cyberlink Power2Go.lnk
[2014/01/06 16:27:16 | 000,000,189 | ---- | C] () -- C:\Users\Ina\Lenovo Telephony Start Now.url
[2013/10/30 13:06:54 | 000,974,848 | ---- | C] () -- C:\windows\SysWow64\cis-2.4.dll
[2013/10/30 13:06:54 | 000,081,920 | ---- | C] () -- C:\windows\SysWow64\issacapi_bs-2.3.dll
[2013/10/30 13:06:54 | 000,065,536 | ---- | C] () -- C:\windows\SysWow64\issacapi_pe-2.3.dll
[2013/10/30 13:06:54 | 000,057,344 | ---- | C] () -- C:\windows\SysWow64\issacapi_se-2.3.dll
[2011/08/17 06:17:50 | 000,002,083 | ---- | C] () -- C:\Users\Ina\Lenovo EE Boot Optimizer.lnk
[2011/08/17 06:10:12 | 000,001,792 | ---- | C] () -- C:\Users\Ina\Lenovo VeriFace 4.0.lnk
[2011/08/17 06:07:44 | 000,001,974 | ---- | C] () -- C:\Users\Ina\Lenovo R.I.C..lnk
[2011/08/17 06:05:37 | 000,001,828 | ---- | C] () -- C:\Users\Ina\McAfee AntiVirus Plus.lnk
[2011/08/17 06:03:25 | 000,002,072 | ---- | C] () -- C:\Users\Ina\UserGuide.lnk
[2011/08/17 05:59:40 | 000,002,100 | ---- | C] () -- C:\Users\Ina\Intel(R) Wireless Display.lnk

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015.02.13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015.02.13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014.01.07 22:29:37 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\AVAST Software
[2014.01.16 17:24:11 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\BCGameTime
[2014.01.24 22:37:04 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\DAEMON Tools Lite
[2015.05.10 13:48:57 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\DVDVideoSoft
[2014.07.25 21:14:09 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\F4
[2015.07.09 21:40:19 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\InetStat
[2014.06.04 17:28:33 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\mp3DirectCut
[2014.01.15 15:07:14 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\OpenOffice
[2014.01.16 22:59:05 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\QuickScan
[2014.01.24 21:00:30 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\Samsung
[2015.07.09 21:01:49 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\Spotify
[2014.01.20 23:43:11 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\TuneUp Software
[2014.01.16 22:53:09 | 000,000,000 | ---D | M] -- C:\Users\Ina\AppData\Roaming\xVideoServiceThief

========== Purity Check ==========



< End of report >


Bin ich damit hier richtig? Bedanke mich im Voraus! Viele liebe Grüße. Ina