Trojaner-Board - Verdacht auf Malware

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Verdacht auf Malware (https://www.trojaner-board.de/146172-verdacht-malware.html)

lakil

15.12.2013 22:49

Verdacht auf Malware

Habe in meinem Firefox IE11 und Chrome Browser eingebetete start Seiten (URL) Spigot Yahoo die ich nicht loswerde.

Habe mit meinem Tool free registry cleaner ein logfile erstellt werd aber daraus nicht schlau.

Bitte um Hilfe.

Danke

cosinus

15.12.2013 22:54

Hallo und :hallo:

Zitat:

Habe mit meinem Tool free registry cleaner ein logfile erstellt werd aber daraus nicht schlau.

Finger weg davon! Allgemein kann man nur von Registry-Cleanern aller Art abraten mal davon abgesehen, dass ein Regcleaner verwaiste Einträge finden und löschen soll kann das nicht zielführend sein wenn man lästige Junk-/Ad-/Malware entfernen will.

Hinweis: Registry Cleaner

Ich sehe, dass du sogenannte Registry Cleaner installiert hast.
In deinem Fall Free Registry Cleaner.

Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab.

Der Grund ist ganz einfach:
Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler.
Zerstörst du die Registry, zerstörst du Windows.

Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich.

Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über

Start --> Systemsteuerung --> Software (bei Windows XP)
Start --> Systemsteuerung --> Programme und Funktionen (bei Vista / Win 7)

zu deinstallieren.

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

lakil

15.12.2013 23:33

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-12-2013

Ran by Wolke (administrator) on MY-PC on 15-12-2013 23:21:38

Running from C:\Users\Wolke\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe

(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit_manager.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe

(Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(mobile concepts GmbH) C:\Program Files\CyberGhost VPN\CGVPNCliService.exe

(CyberGhost SRL) C:\Program Files\CyberGhost VPN\CyberGhost.exe

() C:\Program Files\CyberGhost VPN\OpenVPN\openvpn.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [566184 2010-09-28] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)

HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)

HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)

HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)

HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe [1612504 2013-11-11] (COMODO)

HKLM-x32\...\Winlogon: [Userinit] %windows%\system32\userinit.exe, [x]

HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKCU\...\Policies\Explorer: [CDRAutoRun] 0

HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1

HKCU\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1

HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 0

HKCU\...\Policies\Explorer: [NoInstrumentation] 1

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

MountPoints2: E - E:\AutoRun.exe

MountPoints2: G - G:\Razor1911_Installer.exe

MountPoints2: H - H:\LaunchU3.exe -a

MountPoints2: {4a603744-ec8e-11e1-9032-4cedde54a1e5} - E:\Setup.exe

MountPoints2: {cd67f712-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f718-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f758-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {d4c29d90-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {d4c29da0-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {dfb72204-d952-11e1-bb50-88ae1dfbb2f1} - G:\LaunchU3.exe -a

HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION)

HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-07-23] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-12] (AVAST Software)

HKLM-x32\...\Run: [KeyScrambler] - C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe [508144 2013-11-14] (QFX Software Corporation)

HKU\Administrator\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: http=;ftp=;https=;

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2413} URL = 

SearchScopes: HKCU - DefaultScope {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

SearchScopes: HKCU - {0A786B8B-42ED-4861-B82E-23FD4F415524} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=7e99ace7000000000000000000000000&r=80

SearchScopes: HKCU - {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 79.141.167.14 79.141.160.23 67.221.255.31

Tcpip\..\Interfaces\{228D7DD5-4B7F-4A02-831B-89396E3BBEE5}: [NameServer]79.141.160.23,79.141.167.14

Tcpip\..\Interfaces\{8C5E4082-505E-4DE7-855A-18FCFC537325}: [NameServer]79.141.160.23,79.141.167.14

Tcpip\..\Interfaces\{EF5DD1A8-4F56-409A-88D4-59E587C57743}: [NameServer]79.141.160.23 79.141.167.14
 

FireFox:

========

FF ProfilePath: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox

FF NewTab: about:blank

FF DefaultSearchEngine: Ixquick (de)

FF SelectedSearchEngine: Ixquick (de)

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=

FF NetworkProxy: "ftp", "127.0.0.1"

FF NetworkProxy: "ftp_port", 4001

FF NetworkProxy: "gopher", "127.0.0.1"

FF NetworkProxy: "gopher_port", 4001

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 4001

FF NetworkProxy: "socks_remote_dns", true

FF NetworkProxy: "ssl", "127.0.0.1"

FF NetworkProxy: "ssl_port", 4001

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\duckduckgo-ssl-javascript-free.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo_ff.xml

FF Extension: HTTPS-Everywhere - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org

FF Extension: Flagfox - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

FF Extension: Cookie Monster - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}

FF Extension: unplug - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\unplug@compunach.xpi

FF Extension: preferences - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi

FF Extension: noscript - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: Adblock Plus - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi

FF Extension: prefs - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=412349836a9c47b19aa0f16305762553&tu=10G9y00Au1C01g0&sku=&tstsId=&ver=&", "hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch"

CHR DefaultSearchKeyword: yahoo.com search

CHR DefaultSearchProvider: Yahoo

CHR DefaultSearchURL: hxxp://de.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=198484&p={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Advanced SystemCare 6 Opera Plugin) - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\np_Asc_plugin.dll (IObit)

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File

CHR Plugin: (npAPI Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2.dll No File

CHR Plugin: (npAPI Ghost Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2ghost.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Extension: (HTTPS Everywhere) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2013.10.16_0

CHR Extension: (Ultimate User Agent Switcher, URL sniffer) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljfpjnehmoiabkefmnjegmpdddgcdnpo\0.9.3.3_0

CHR Extension: (Ghostery) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.0.0_0

CHR Extension: (Google Wallet) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (NotScripts) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn\0.9.6_0

CHR Extension: (ScriptSafe) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0

CHR HKLM-x32\...\Chrome\Extension: [aiibjampmlkfkdmgnkholklaechbdanh] - C:\ProgramData\Facebook Profile Viewer\5shja.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-12] (AVAST Software)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [26600 2013-10-08] (CyberGhost S.R.L)

R3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)

R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2013-12-13] (Comodo Security Solutions, Inc.)

R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6254152 2013-10-20] (COMODO)

S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO)

R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2098880 2013-11-11] ()

R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-12-13] (Comodo Security Solutions, Inc.)

R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 OpenVPNAccessClient; C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [24064 2010-08-12] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-01-14] (Crawler.com)

S2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-29] (TuneUp Software)

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2013-04-25] (WiseCleaner.com)

R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

S2 HPSLPSVC; C:\Users\Wolke\AppData\Local\Temp\7zS0F2C\hpslpsvc64.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-12] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-12] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-12] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-12] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-12] (AVAST Software)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-12] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-12] ()

R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows (R) Win 7 DDK provider)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO)

R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-11-14] (COMODO)

R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO)

S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [722488 2000-01-01] (Conexant Systems Inc.)

R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-12-07] (EldoS Corporation)

R1 ESProtectionDriver; C:\Program Files\Malwarebytes Anti-Exploit\MBAE.sys [62168 2013-08-01] ()

R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2013-10-07] ()

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [27456 2012-07-31] (Intel Corporation)

R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO)

R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-02-03] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)

R3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2010-08-03] (The OpenVPN Project)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-07-08] (Spotflux, Inc.)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

U4 bdselfpr; 

S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]

S3 MEMSWEEP2; \??\C:\Windows\system32\E37F.tmp [x]

S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-15 23:21 - 2013-12-15 23:22 - 00027097 _____ C:\Users\Wolke\Desktop\FRST.txt

2013-12-15 23:21 - 2013-12-15 23:21 - 00000000 ____D C:\FRST

2013-12-15 23:08 - 2013-12-15 23:08 - 00000056 _____ C:\Windows\setupact.log

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:07 - 2013-12-15 23:08 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:07 - 2013-12-15 23:07 - 00000336 _____ C:\Windows\PFRO.log

2013-12-15 23:02 - 2013-12-15 23:02 - 00000582 _____ C:\Users\Wolke\Desktop\defogger_disable.log

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:54 - 2013-12-15 22:55 - 01927796 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 22:24 - 2013-12-15 22:24 - 161662736 _____ C:\Users\Wolke\Desktop\my regis.reg

2013-12-15 21:03 - 2013-12-15 21:03 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 21:02 - 2013-12-15 21:02 - 00001185 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2013-12-15 21:02 - 2013-12-15 21:02 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-15 21:02 - 2013-12-15 21:02 - 00000000 ____D C:\ProgramData\Nico Mak Computing

2013-12-15 21:02 - 2013-12-15 21:02 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector

2013-12-15 21:02 - 2013-03-15 17:10 - 00020480 _____ C:\Windows\system32\wsusnative64.exe

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 20:01 - 2013-12-15 20:01 - 00981869 _____ C:\Users\Wolke\Downloads\EFRCSetup.exe

2013-12-15 19:14 - 2013-12-15 19:14 - 04892480 _____ (WinZip International LLC                                    ) C:\Users\Wolke\Downloads\wzmp_8.exe

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 18:42 - 2013-12-15 18:42 - 00000000 ____D C:\Users\Wolke\Desktop\Alte Firefox-Daten

2013-12-15 18:42 - 2013-12-09 16:14 - 00138724 _____ C:\Users\Wolke\Desktop\useragents.xml

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:58 - 2013-12-15 16:59 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:54 - 2013-12-15 16:57 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 00:50 - 2013-12-15 01:12 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:41 - 2013-06-29 05:36 - 00003994 _____ C:\Users\Wolke\Documents\vpnbook-euro1-tcp80.ovpn

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:26 - 2013-12-15 00:27 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:53 - 2013-12-15 23:11 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-14 23:53 - 2013-12-15 23:11 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:42 - 2013-12-15 00:00 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:42 - 2013-10-04 22:50 - 00509872 _____ (Ask Partner Network) C:\Users\Wolke\Documents\APNSetup.exe

XenoCoder

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 23:21 - 2013-05-31 15:53 - 00222200 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys

2013-12-14 23:16 - 2013-12-14 23:17 - 08141314 _____ C:\Users\Wolke\Downloads\hidemyrealip-trail.zip

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:26 - 2013-12-14 22:26 - 00002187 _____ C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk

2013-12-14 22:26 - 2013-12-14 22:26 - 00002163 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk

2013-12-14 22:26 - 2013-08-29 12:07 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-12-14 22:26 - 2013-08-29 12:07 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-12-14 22:26 - 2013-08-29 12:07 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll

2013-12-14 22:25 - 2013-12-14 22:26 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
 

2013-12-14 22:19 - 2013-12-14 22:43 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:45 - 2013-12-15 19:33 - 00000000 ____D C:\AdwCleaner

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 18:48 - 2013-12-14 18:48 - 00002015 _____ C:\Users\Public\Desktop\GeekBuddy.lnk

2013-12-14 17:22 - 2013-12-14 17:22 - 00000000 ____D C:\Windows\System32\Tasks\COMODO

2013-12-14 17:21 - 2013-12-14 17:21 - 00001871 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk

2013-12-14 17:21 - 2013-12-14 17:21 - 00001870 _____ C:\Users\Public\Desktop\COMODO Firewall.lnk

2013-12-14 17:19 - 2013-12-14 17:21 - 00000000 ___SD C:\ProgramData\Shared Space

2013-12-14 17:18 - 2013-12-14 17:21 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:18 - 2013-12-14 17:19 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00001082 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-14 16:59 - 2013-12-14 17:14 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:29 - 2013-12-14 15:30 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 11:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-14 11:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-14 11:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-14 11:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-14 11:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-14 11:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-14 11:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-14 11:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-14 11:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-14 11:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-14 11:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-14 11:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-14 11:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-14 11:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-14 11:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-14 11:52 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-12-03 10:01 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-11 07:50 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 07:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 07:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 07:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 07:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 07:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 07:32 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 07:32 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 07:32 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 07:32 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 07:30 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 07:30 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 07:30 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 07:30 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 21:56 - 2013-12-10 21:56 - 00013220 _____ C:\Users\Wolke\Downloads\hijackthis.log

2013-12-10 21:54 - 2013-12-10 21:55 - 00388608 _____ (Trend Micro Inc.) C:\Users\Wolke\Downloads\HiJackThis204.exe

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:57 - 2013-12-04 12:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:55 - 2013-12-15 13:34 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:54 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 12:52 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-12-04 12:52 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml
 

2

2013-12-02 23:10 - 2013-12-02 23:10 - 00000779 _____ C:\Users\Public\Desktop\World of Tanks.lnk

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 17:37 - 2013-12-02 17:38 - 00000000 ____D C:\Program Files\TAP-Windows

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag
 

2013-12-02 00:31 - 2013-12-14 18:52 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-14 17:31 - 00000000 ____D C:\ProgramData\ProductData

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:00 - 2013-12-14 18:30 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 21:47 - 2013-12-01 21:56 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 

                                           ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-12-01 17:53 - 2013-12-01 17:53 - 04353300 _____ 

2013-11-3

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 17:01 - 2013-11-30 17:01 - 00112677 _____ C:\Users\Wolke\Downloads\hjsplit_classic32.zip

2013-11-30 16:49 - 2013-11-30 16:50 - 

2013-11-30 16:45 - 2013-11-30 16:46 - 11942846 _____ C:\Users\Wolke\Downloads\IE11-Windows6.1-x64-en-us.exe.part

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:14 - 2013-11-30 16:19 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-28 21:08 - 2013-11-28 21:31 - 07133832 _____ (Goversoft LLC) C:\Users\Wolke\Downloads\privazer_free.exe

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:37 - 2013-12-15 17:14 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\Drivers\npf.sys

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll

2013-11-26 13:52 - 

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe
 

==================== One Month Modified Files and Folders =======
 

2013-12-15 23:22 - 2013-12-15 23:21 - 00027097 _____ C:\Users\Wolke\Desktop\FRST.txt

2013-12-15 23:21 - 2013-12-15 23:21 - 00000000 ____D C:\FRST

2013-12-15 23:21 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default

2013-12-15 23:18 - 2011-04-12 08:43 - 00700720 _____ C:\Windows\system32\perfh007.dat

2013-12-15 23:18 - 2011-04-12 08:43 - 00150326 _____ C:\Windows\system32\perfc007.dat

2013-12-15 23:18 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-15 23:18 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-15 23:17 - 2013-10-15 09:49 - 01995377 _____ C:\Windows\WindowsUpdate.log

2013-12-15 23:17 - 2009-07-14 06:13 - 01624106 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-15 23:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing

2013-12-15 23:11 - 2013-12-14 23:53 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-15 23:11 - 2013-12-14 23:53 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-15 23:11 - 2013-01-04 19:59 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Wise Care 365

2013-12-15 23:09 - 2013-05-20 20:16 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-15 23:08 - 2013-12-15 23:08 - 00000056 _____ C:\Windows\setupact.log

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:08 - 2013-12-15 23:07 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:08 - 2013-09-12 18:10 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2013-12-15 23:08 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-15 23:07 - 2013-12-15 23:07 - 00000336 _____ C:\Windows\PFRO.log

2013-12-15 23:02 - 2013-12-15 23:02 - 00000582 _____ C:\Users\Wolke\Desktop\defogger_disable.log

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 23:02 - 2012-07-27 15:54 - 00000000 ____D C:\Users\Wolke

2013-12-15 23:00 - 2013-05-20 20:16 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:55 - 2013-12-15 22:54 - 01927796 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 22:24 - 2013-12-15 22:24 - 161662736 _____ C:\Users\Wolke\Desktop\my regis.reg

2013-12-15 21:03 - 2013-12-15 21:03 - 00003116 _____ C:\Windows\System32\Tasks\WinZip Malware Protector_startup

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 21:02 - 2013-12-15 21:02 - 00001185 _____ C:\Users\Public\Desktop\WinZip Malware Protector.lnk

2013-12-15 21:02 - 2013-12-15 21:02 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-15 21:02 - 2013-12-15 21:02 - 00000000 ____D C:\ProgramData\Nico Mak Computing

2013-12-15 21:02 - 2013-12-15 21:02 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector

2013-12-15 20:48 - 2013-11-12 10:32 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-12-15 20:47 - 2013-08-16 19:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\PrivaZer

2013-12-15 20:34 - 2013-07-07 15:25 - 00000000 ____D C:\Users\Wolke\AppData\Local\Windows Live

2013-12-15 20:33 - 2013-07-07 15:33 - 00000000 ____D C:\Windows\de

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:12 - 2012-11-20 11:31 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Winamp

2013-12-15 20:12 - 2012-08-01 11:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\BitTorrent

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:05 - 2013-06-11 11:45 - 00000000 ____D C:\Program Files (x86)\Eusing Free Registry Cleaner

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 20:02 - 2013-06-11 11:45 - 00001041 _____ C:\Users\Wolke\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 20:01 - 2013-12-15 20:01 - 00981869 _____ C:\Users\Wolke\Downloads\EFRCSetup.exe

2013-12-15 19:58 - 2012-07-27 16:48 - 00000000 ____D C:\Windows\Panther

2013-12-15 19:57 - 2013-01-22 19:23 - 00000000 ____D C:\Users\Wolke\AppData\Local\CrashDumps

2013-12-15 19:33 - 2013-12-14 20:45 - 00000000 ____D C:\AdwCleaner

2013-12-15 19:14 - 2013-12-15 19:14 - 04892480 _____ (WinZip International LLC                                    ) C:\Users\Wolke\Downloads\wzmp_8.exe

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 18:42 - 2013-12-15 18:42 - 00000000 ____D C:\Users\Wolke\Desktop\Alte Firefox-Daten

2013-12-15 17:14 - 2013-11-26 14:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:59 - 2013-12-15 16:58 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:58 - 2013-07-17 08:45 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\DVDVideoSoft

2013-12-15 16:57 - 2013-12-15 16:54 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 15:18 - 2013-03-02 23:13 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ____D C:\ProgramData\Skype

2013-12-15 13:43 - 2013-03-25 16:00 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 13:34 - 2013-12-04 12:55 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 12:01 - 2013-10-13 09:24 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit

2013-12-15 11:24 - 2013-05-21 12:28 - 00000000 ____D C:\Program Files\PeerBlock
 

2013-12-15 01:12 - 2013-12-15 00:50 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:27 - 2013-12-15 00:26 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-15 00:00 - 2013-12-14 23:42 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software
 
 

XenoCoder

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 23:17 - 2013-12-14 23:16 - 08141314 _____ 

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:43 - 2013-12-14 22:19 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 22:33 - 2013-06-11 17:38 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-14 22:26 - 2013-12-14 22:26 - 00002187 _____ C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk
 

2013-12-14 22:25 - 2013-06-11 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\TuneUp Software
 

2013-12-14 20:59 - 2012-08-15 13:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\CheckPoint

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 18:52 - 2013-12-02 00:31 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-14 18:48 - 2013-12-14 18:48 - 00002015 _____ C:\Users\Public\Desktop\GeekBuddy.lnk

2013-12-14 18:30 - 2013-12-01 22:00 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-14 17:31 - 2013-12-01 22:02 - 00000000 ____D C:\ProgramData\ProductData

2013-12-14 17:22 - 2013-12-14 17:22 - 00000000 ____D C:\Windows\System32\Tasks\COMODO

2013-12-14 17:21 - 2013-12-14 17:21 - 00001871 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk

2013-12-14 17:21 - 2013-12-14 17:21 - 00001870 _____ C:\Users\Public\Desktop\COMODO Firewall.lnk

2013-12-14 17:21 - 2013-12-14 17:19 - 00000000 ___SD C:\ProgramData\Shared Space

2013-12-14 17:21 - 2013-12-14 17:18 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:19 - 2013-12-14 17:18 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00001082 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-14 17:14 - 2013-12-14 16:59 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:30 - 2013-12-14 15:29 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 13:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-13 13:18 - 2013-07-13 00:22 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\vlc

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 09:05 - 2013-01-21 17:58 - 00000000 ____D C:\ProgramData\iolo

2013-12-13 09:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:48 - 2013-07-19 19:29 - 00000000 ____D C:\Windows\system32\MRT

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-01-21 18:00 - 00001395 _____ C:\Users\Wolke\Desktop\System Mechanic.lnk

2013-12-13 08:44 - 2012-07-27 17:41 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-12 09:10 - 2013-05-02 10:12 - 00000402 _____ C:\Windows\Tasks\Wise Turbo Checker.job

2013-12-10 23:02 - 2013-11-12 10:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 21:56 - 2013-12-10 21:56 - 00013220 _____ C:\Users\Wolke\Downloads\hijackthis.log

2013-12-10 21:55 - 2013-12-10 21:54 - 00388608 _____ (Trend Micro Inc.) C:\Users\Wolke\Downloads\HiJackThis204.exe

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-09 16:14 - 2013-12-15 18:42 - 00138724 _____ C:\Users\Wolke\Desktop\useragents.xml

2013-12-08 20:30 - 2013-08-14 21:00 - 00000000 ____D C:\Users\Public\Documents\My Projects

2013-12-08 19:55 - 2013-05-20 20:16 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-08 19:55 - 2013-05-20 20:16 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-07 16:30 - 2012-07-27 18:09 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-12-07 16:30 - 2012-07-27 18:09 - 00000000 ____D C:\Program Files\CCleaner

2013-12-07 13:20 - 2013-02-03 11:30 - 00000000 ____D C:\ProgramData\Spyware Terminator

2013-12-05 10:10 - 2013-05-20 20:20 - 00002531 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:58 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:52 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-03 10:47 - 2013-01-21 18:00 - 00057584 _____ (iolo technologies, LLC) C:\Windows\system32\iolobtdfg.exe

2013-12-03 10:47 - 2013-01-21 18:00 - 00026184 _____ (iolo technologies, LLC) C:\Windows\system32\smrgdf.exe

2013-12-03 10:01 - 2013-12-13 08:46 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-03 10:01 - 2013-01-21 18:00 - 02097984 _____ (iolo technologies, LLC) C:\Windows\SysWOW64\Incinerator32.dll

2013-12-03 07:16 - 2013-12-03 07:15 - 

2013-12-03 07:15 - 2013-12-03 07:15 - 

2013-12-02 23:11 - 2012-08-24 09:30 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-12-02 23:10 - 2013-12-02 23:10 - 00000779 _____ C:\Users\Public\Desktop\World of Tanks.lnk

2013-12-02 23:10 - 2013-06-27 09:25 - 00000000 ____D C:\Games

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe
 

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net
 

2013-12-02 18:33 - 2013-05-04 13:48 - 00012257 _____ C:\Windows\wininit.ini

2013-12-02 17:38 - 2013-12-02 17:37 - 00000000 ____D C:\Program Files\TAP-Windows

2013-12-02 17:35 - 2012-07-31 13:10 - 00000000 ____D C:\ProgramData\SecTaskMan
 

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag
 

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:02 - 2013-06-14 16:02 - 00000000 ____D C:\Program Files (x86)\IObit

2013-12-01 22:02 - 2012-08-26 15:09 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\IObit

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 22:00 - 2012-11-14 11:32 - 00000000 ____D C:\ProgramData\IObit

2013-12-01 21:56 - 2013-12-01 21:47 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:32 - 08988024 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-12-01 17:53 - 2013-12-01 17:53 - 04353300 _____ C:\Users\Wolke\Desktop\trim.B01E2034_AAAD_4005_8FF5_7E90042ED655.MOV

2013-12-01 13:34 - 2013-03-03 20:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Adobe

2

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 17:01 - 2013-11-30 17:01 - 00112677 _____ C:\Users\Wolke\Downloads\hjsplit_classic32.zip
 

2013-11-30 16:46 - 2013-11-30 16:45 - 11942846 _____ C:\Users\Wolke\Downloads\IE11-Windows6.1-x64-en-us.exe.part

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:19 - 2013-11-30 16:14 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-30 16:13 - 2012-07-27 18:13 - 01598386 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-30 01:56 - 2013-08-10 09:18 - 00000094 _____ C:\Users\Wolke\AppData\Roaming\WB.CFG

2013-11-30 01:56 - 2013-06-17 21:56 - 00000006 _____ C:\Users\Wolke\AppData\Roaming\WBPU-TTL.DAT

2013-11-28 21:31 - 2013-11-28 21:08 - 07133832 _____ (Goversoft LLC) C:\Users\Wolke\Downloads\privazer_free.exe

2013-11-28 21:31 - 2013-09-01 18:05 - 00000000 ____D C:\Program Files (x86)\PrivaZer

2013-11-28 21:31 - 2013-08-16 19:56 - 00001851 _____ C:\Users\Public\Desktop\PrivaZer.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-26 12:54 - 2013-12-14 11:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-14 11:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-14 11:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-14 11:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-14 11:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-14 11:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-14 11:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-14 11:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-14 11:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-14 11:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-14 11:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-14 11:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-14 11:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-14 11:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-14 11:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-14 11:52 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-14 11:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-14 11:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-14 11:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-14 11:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-14 11:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-14 11:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-14 11:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-14 11:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 08:03 - 2013-10-20 18:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\medion

2013-11-26 07:40 - 2013-12-14 11:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-14 11:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-14 11:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-23 19:26 - 2013-12-11 07:34 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 07:34 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-21 09:33 - 2013-10-31 16:40 - 00000000 ____D C:\Users\Wolke\AppData\Local\Microsoft Games

2013-11-21 08:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-10 20:16
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

[/CODE]

cosinus

15.12.2013 23:45

Was ist mit meiner Frage nach bisherigen Funden?
Außerdem fehlt das andere Log vn FRST

Zitat:

C:\Users\Wolke\Downloads\Hide IP Easy 5.3.1.2+Crack-XenoCoder

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

lakil

16.12.2013 00:19

sorry das sind nur datei verweise aus meinem alten system das ich mit anderen leuten benutzt habe.
ich benutze solche software nicht

werde den text überarbeiten.

bitte um geduld.

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-12-2013

Ran by Wolke at 2013-12-15 23:22:39

Running from C:\Users\Wolke\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

AS: COMODO Antivirus (Disabled - Out of date) {0C2D2636-923D-EE52-2A83-E643204A8275}

FW: COMODO Firewall (Enabled) {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)

Advanced SystemCare 7 (x32 Version: 7.0.6)

AMD Accelerated Video Transcoding (Version: 13.20.100.30723)

AMD Catalyst Control Center (x32 Version: 2013.0723.1944.33607)

AMD Catalyst Install Manager (Version: 8.0.915.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.80723.2017)

AMD Wireless Display v3.0 (Version: 1.0.0.13)

avast! Free Antivirus (x32 Version: 9.0.2008)

Bing-Desktop (x32 Version: 1.3.171.0)

BitTorrent (HKCU Version: 7.8.2.30332)

Broadcom 802.11 Network Adapter (Version: 5.60.48.35)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center InstallProxy (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center Localization All (x32 Version: 2013.0723.1944.33607)

CCC Help Chinese Standard (x32 Version: 2013.0723.1943.33607)

CCC Help Chinese Traditional (x32 Version: 2013.0723.1943.33607)

CCC Help Czech (x32 Version: 2013.0723.1943.33607)

CCC Help Danish (x32 Version: 2013.0723.1943.33607)

CCC Help Dutch (x32 Version: 2013.0723.1943.33607)

CCC Help English (x32 Version: 2013.0723.1943.33607)

CCC Help Finnish (x32 Version: 2013.0723.1943.33607)

CCC Help French (x32 Version: 2013.0723.1943.33607)

CCC Help German (x32 Version: 2013.0723.1943.33607)

CCC Help Greek (x32 Version: 2013.0723.1943.33607)

CCC Help Hungarian (x32 Version: 2013.0723.1943.33607)

CCC Help Italian (x32 Version: 2013.0723.1943.33607)

CCC Help Japanese (x32 Version: 2013.0723.1943.33607)

CCC Help Korean (x32 Version: 2013.0723.1943.33607)

CCC Help Norwegian (x32 Version: 2013.0723.1943.33607)

CCC Help Polish (x32 Version: 2013.0723.1943.33607)

CCC Help Portuguese (x32 Version: 2013.0723.1943.33607)

CCC Help Russian (x32 Version: 2013.0723.1943.33607)

CCC Help Spanish (x32 Version: 2013.0723.1943.33607)

CCC Help Swedish (x32 Version: 2013.0723.1943.33607)

CCC Help Thai (x32 Version: 2013.0723.1943.33607)

CCC Help Turkish (x32 Version: 2013.0723.1943.33607)

ccc-utility64 (Version: 2013.0723.1944.33607)

CCleaner (Version: 4.08)

Comodo Dragon (x32 Version: 30.0.0.0)

COMODO Firewall (Version: 6.3.39949.2976)

Conexant Audio Driver For AMD HDMI/DP Codec (Version: 4.98.32.50)
 

DAEMON Tools Lite (x32 Version: 4.47.1.0333)

Do Not Track Me Add-on 2.2.9.1112 (x32 Version: 2.2.9.1112)

Eusing Free Registry Cleaner (x32)

Free YouTube to MP3 Converter version 3.12.17.1127 (x32 Version: 3.12.17.1127)

GeekBuddy (Version: 4.10.79)

Google Chrome (x32 Version: 31.0.1650.63)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.22.3)
 

Hide IP Easy (x32 Version: 5.3.1.2)

HydraVision (x32 Version: 4.2.252.0)

Intel(R) Control Center (x32 Version: 1.2.1.1008)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)

Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001)

Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002)

iolo technologies' System Mechanic (x32 Version: 12.5.0)

Java 7 Update 45 (x32 Version: 7.0.450)

Java Auto Updater (x32 Version: 2.1.9.8)

KeyScrambler (x32 Version: 3.3.0.0)

K-Lite Mega Codec Pack 3.9.5 (x32 Version: 3.9.5)

Malwarebytes Anti-Exploit version 0.09.3.1000 (Version: 0.09.3.1000)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)

Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Mortal Kombat Komplete Edition (x32)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)

Mozilla Maintenance Service (x32 Version: 26.0)

MSVCRT Redists (Version: 1.0)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

neroxml (x32 Version: 1.0.0)

NVIDIA PhysX (x32 Version: 9.10.0513)

OpenAL (x32)
 

Opera 12.16 (Version: 12.16.1860)

PeerBlock 1.1 (r518) (Version: 1.1.0.518)

Pidgin (x32 Version: 2.10.7)

Pinnacle Video Treiber (Version: 12.1.0.030)

PrivaZer (x32 Version: 2.10.0.0)

Project64 1.6 (x32 Version: 1.6)

Realtek Ethernet Controller Driver (x32 Version: 7.47.714.2011)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6687)

Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30111)

Secure Eraser (x32 Version: 4.2.0.1)

Simple Adblock (x32 Version: 1.1.5)

Skype™ 6.11 (x32 Version: 6.11.102)

Sophos Virus Removal Tool (x32 Version: 2.2)

Spybot - Search & Destroy (x32 Version: 2.1.19)

Spyware Terminator 2012 (x32 Version: 3.0.0.80)

Synaptics Pointing Device Driver (Version: 15.0.8.1)

TAP-Windows 9.9.2 (Version: 9.9.2)

Tinypic 3.18 (x32 Version: Tinypic 3.18)

Toshiba Assist (x32 Version: 3.00.11)

TOSHIBA Bulletin Board (Version: 1.6.07.64)

TOSHIBA Bulletin Board (x32 Version: 1.6.07.64)

TOSHIBA ConfigFree (x32 Version: 8.0.35)

TOSHIBA eco Utility (Version: 1.2.11.64)

TOSHIBA eco Utility (x32 Version: 1.2.11.64)

TOSHIBA Flash Cards Support Utility (x32 Version: 1.63.0.11C)

TOSHIBA HDD/SSD Alert (Version: 3.1.64.6)

TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.6)

TOSHIBA PC Health Monitor (Version: 1.6.0.64)

TOSHIBA Places Icon Utility (x32 Version: 1.1.1.4)

TOSHIBA ReelTime (Version: 1.6.06.64)

TOSHIBA ReelTime (x32 Version: 1.6.06.64)

TOSHIBA Service Station (x32 Version: 2.2.9)

TOSHIBA TEMPRO (x32 Version: 3.35)

TOSHIBA Value Added Package (Version: 1.3.19.64)

TOSHIBA Value Added Package (x32 Version: 1.3.19.64)

TOSHIBA Web Camera Application (x32 Version: 1.1.1.15)
 

Ubisoft Game Launcher (x32 Version: 1.0.0.0)

Utility Common Driver (x32 Version: 1.0.52.2C)

Vegas Pro 12.0 (64-bit) (Version: 12.0.670)
 

Winamp (x32 Version: 5.63 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Doctor 2.7.3 (x32)

Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

WinRAR 4.20 (64-Bit) (Version: 4.20.0)

WinZip Malware Protector (x32 Version: 2.1.1000.10798)

Wise Care 365 version 2.87 (x32 Version: 2.87)
 

XMedia Recode Version 3.1.4.5 (x32 Version: 3.1.4.5)

xp-AntiSpy 3.98-2 (x32)
 

==================== Restore Points  =========================
 

26-11-2013 07:34:52 Windows Update

29-11-2013 07:40:06 Windows Update

29-11-2013 12:44:59 Windows Update

30-11-2013 15:08:53 Windows Update

30-11-2013 15:40:05 Installed Microsoft Fix it 50123

04-12-2013 08:06:01 Windows Update

10-12-2013 10:20:38 Windows Update

11-12-2013 06:35:02 Windows Update

11-12-2013 06:50:55 Windows Update

12-12-2013 09:01:12 Gerätetreiber-Paketinstallation: HUAWEI Netzwerkadapter

13-12-2013 07:27:02 Windows Update

13-12-2013 07:43:25 Windows Update

13-12-2013 07:53:51 Windows Update

13-12-2013 08:23:21 Removed IObit Apps Toolbar v8.3.

14-12-2013 10:52:26 Windows Update

14-12-2013 16:20:24 Gerätetreiber-Paketinstallation: COMODO Netzwerkdienst

14-12-2013 21:23:31 TuneUp Utilities 2014 wird installiert

14-12-2013 22:24:28 Installed HidedMyRealIP-demo

14-12-2013 23:31:41 Installed OpenVPN Client

15-12-2013 00:12:06 Removed HidedMyRealIP-demo

15-12-2013 18:25:57 Removed Adobe Reader XI (11.0.05) - Deutsch.
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-04-14 22:31 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {07E0090C-042A-4FF5-A123-9D28761DDC37} - System32\Tasks\{4259E698-0EAE-4388-B42C-86F91FF49F20} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem

Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem

Task: {0F272DD7-5149-4663-A06D-01D62BFC046F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {286D0DDA-0C1D-42E8-A262-49CDA84A3ED4} - System32\Tasks\Pointstone\System Cleaner\Startup Dialog => C:\Program Files (x86)\Pointstone\System Cleaner 7\Helper.exe

Task: {2BF90F22-2435-4F5D-93F6-629C720F25FE} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

Task: {403A2650-A617-49E0-B410-CABEA9E347DD} - System32\Tasks\{996830C2-66C4-4C0C-BB9D-C43C5FEC202D} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {537C03F3-BB91-4D75-94A3-596785E3D9CA} - System32\Tasks\{944B9192-41AB-4674-9384-5EEFA0886B8A} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {5755A3AE-379E-4038-838F-61881904A749} - System32\Tasks\COMODO\COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [2013-11-20] (COMODO)

Task: {5C5DF0FC-4C4C-44DA-A0A6-F37CB80CFA10} - System32\Tasks\{81607F8B-DCE4-401E-9A39-A64D15BB2225} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {67607FD3-61CD-4122-B49D-42E738C3002E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3583547410-2317155067-1929240655-1000

Task: {677C707B-1A32-48F5-B49C-9BE32D860E7A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)

Task: {6C43EEA9-587F-47BD-9326-1A8621B029EC} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)

Task: {6F604BA2-DD73-493C-8492-D16F4F074E76} - System32\Tasks\{AAEFF361-D5E3-4B26-B773-B0D8C21264CD} => C:\Program Files\CyberGhost VPN\CyberGhost.exe [2012-04-26] (CyberGhost SRL)

Task: {789AF10D-80DA-47C7-A019-473DDB792733} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-06-03] (TOSHIBA CORPORATION)

Task: {7A90C836-0662-4EDA-99FB-1842BCDCB841} - System32\Tasks\WPD\SqmUpload_S-1-5-21-3583547410-2317155067-1929240655-1000 => Rundll32.exe portabledeviceapi.dll,#1

Task: {94EC2DDA-4515-456C-8773-5DE7D02604BF} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART

Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => Rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation

Task: {9A2A51EA-B167-422D-BE24-9422C74727FE} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe [2013-12-03] (iolo technologies, LLC)

Task: {A3D1F86F-2BDC-4248-9E8D-4DF5F3F80926} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate

Task: {A8287ACD-892E-435D-A994-B0D8C9D7E6D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {B893A3D0-5372-4D15-BFD9-85F3ADD90A50} - System32\Tasks\Malwarebytes Anti-Exploit => C:\Program Files\Malwarebytes Anti-Exploit\mbae-loader.exe [2013-08-01] (Malwarebytes Corporation)

Task: {C52EB4D8-7E5A-4D10-96A3-F88CD05B9BC3} - \DSite No Task File

Task: {C8E99B63-0C76-4075-95A8-87FBAFC776F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-12] (AVAST Software)

Task: {CA7EE6E1-03CC-4CEB-9DA6-A15A6D86BF4C} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-08-22] (WiseCleaner.COM)

Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations

Task: {DADF2B40-7B1A-41AF-9894-84DF1A5BFF43} - System32\Tasks\{4A91DEF5-6223-4882-BB49-04163FC708D8} => C:\Program Files (x86)\Activision\Transformers Fall of Cybertron\Binaries\TFOC.exe

Task: {DC699450-1128-4B8C-BA85-791F296ED439} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange

Task: {E233ED1D-20C3-44F8-AB2C-817155153D21} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {E57F50A2-05DA-40A2-9346-3F8B59125288} - System32\Tasks\ASC7_SkipUac_Wolke => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2013-11-18] (IObit)

Task: {F280D42C-E1B0-4007-BAB3-453E156609D6} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2013-07-15] (Nico Mak Computing)

Task: {F31FFD37-7725-4B7B-BC4A-C4B7E0336100} - System32\Tasks\{1A8566DC-26EF-4235-B528-B092A5B1AAFF} => Chrome.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?source=lightinstaller&amp;page=tsInstall

Task: {FCCAFAD5-1D5A-4C65-B0DF-CB284CD5F5BF} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-11-11] (COMODO)

Task: {FF81C936-9663-43C9-8D74-F53A1C1592A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Malwarebytes Anti-Exploit.job => C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe

Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-10-14 20:38 - 2012-09-07 15:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll

2013-11-01 08:50 - 2013-11-01 08:50 - 03525687 _____ () C:\Program Files (x86)\PrivaZer\PrivaMenu3.dll

2010-04-07 15:07 - 2010-04-07 15:07 - 09468728 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

2009-11-03 12:26 - 2009-11-03 12:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll

2012-07-27 16:50 - 2009-06-22 13:40 - 00022328 _____ () C:\Program Files\TOSHIBA CORPORATION\Toshiba Assist\NotifyX.dll

2009-03-12 18:08 - 2009-03-12 18:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll

2010-04-06 13:53 - 2010-04-06 13:53 - 00578936 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll

2010-02-05 16:44 - 2010-02-05 16:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

2013-12-01 22:00 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll

2013-12-15 17:14 - 2013-12-15 11:19 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13121500\algo.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00028160 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\servicemanager.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pywintypes26.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00041472 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32service.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00096256 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32api.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00153088 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pyexpat.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00040448 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_socket.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00645120 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ssl.pyd

2010-03-16 13:05 - 2010-03-16 13:05 - 00020480 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\zope.interface._zope_interface_coptimizations.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00311808 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_hashlib.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00073728 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ctypes.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00011776 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\select.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00010752 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.rand.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00051200 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.crypto.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00039936 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.SSL.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00036352 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32process.pyd

2010-05-05 13:43 - 2010-05-05 13:43 - 00008192 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\twisted.protocols._c_urlarg.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32security.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00017920 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32event.pyd

2009-07-06 04:16 - 2009-07-06 04:16 - 00111104 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32file.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00024064 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32pipe.pyd

2013-11-12 10:09 - 2013-11-12 10:09 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-07-16 21:20 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2013-07-16 21:20 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2013-07-16 21:20 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00524288 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgCore.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00139264 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgBluetooth.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00065536 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDialup.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgUtil.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00090112 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgPorts.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00106496 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDatabase.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00143360 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDetection.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00053248 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDriverInstall.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 06057984 ____N () C:\Program Files (x86)\Verbindungsassistent\VerbindungsassistentGer.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGSMSPCClient.Dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDebugs.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 00016384 ____N () C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent_WTGSMSPCClientGer.dll

2013-11-26 14:45 - 2009-03-03 12:42 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDriverInstallX.Dll

2013-11-29 20:01 - 2013-11-29 20:01 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\c928e05ad4d57c6ce294ae68e8598b0f\PSIClient.ni.dll

2013-12-03 07:15 - 2010-07-20 14:39 - 01546781 _____ () C:\Program Files\CyberGhost VPN\libeay32.dll

2013-12-03 07:15 - 2010-07-20 14:39 - 00332987 _____ () C:\Program Files\CyberGhost VPN\ssleay32.dll

2013-12-03 07:15 - 2011-12-15 20:29 - 00090112 _____ () C:\Program Files\CyberGhost VPN\OpenVPN\lzo2.dll

2013-12-10 19:56 - 2013-12-10 19:56 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom 802.11n-Netzwerkadapter

Description: Broadcom 802.11n-Netzwerkadapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: BCM43XX

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service) (User: )

Description: Der Index kann nicht initialisiert werden.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service) (User: )

Description: Die Anwendung kann nicht initialisiert werden.
 

Kontext: Windows Anwendung
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service) (User: )

Description: Das Gatherer-Objekt kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service) (User: )

Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service) (User: )

Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service) (User: )

Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service) (User: )

Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service) (User: )

Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.
 
 

Details:

        0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))
 

Error: (12/15/2013 11:11:33 PM) (Source: ESENT) (User: )

Description: Windows (2268) Windows: Fehler -1811 beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00026.log.
 
 

System errors:

=============

Error: (12/15/2013 11:14:11 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "CyberGhost VPN 5 Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/15/2013 11:14:11 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst CyberGhost VPN 5 Client Service erreicht.
 

Error: (12/15/2013 11:13:30 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/15/2013 11:11:36 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/15/2013 11:11:36 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.
 

Error: (12/15/2013 11:11:22 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "CyberGhost VPN 5 Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/15/2013 11:11:22 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst CyberGhost VPN 5 Client Service erreicht.
 

Error: (12/15/2013 11:10:41 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Notebook Performance Tuning Service (TEMPRO) erreicht.
 

Error: (12/15/2013 11:10:10 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (12/15/2013 11:09:50 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 
 

Microsoft Office Sessions:

=========================

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service)(User: )

Description: 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service)(User: )

Description: Kontext: Windows Anwendung
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service)(User: )

Description: Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service)(User: )

Description: Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Search.TripoliIndexer
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service)(User: )

Description: Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Search.JetPropStore
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service)(User: )

Description: Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service)(User: )

Description: 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

The catalog is corrupt
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service)(User: )

Description: 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

4700
 

Error: (12/15/2013 11:11:34 PM) (Source: Windows Search Service)(User: )

Description: 

Details:

        0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))
 

Error: (12/15/2013 11:11:33 PM) (Source: ESENT)(User: )

Description: Windows2268Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00026.log-1811
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 56%

Total physical RAM: 3954.67 MB

Available physical RAM: 1737.75 MB

Total Pagefile: 4164.25 MB

Available Pagefile: 1447.15 MB

Total Virtual: 8192 MB

Available Virtual: 8191.8 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:297.99 GB) (Free:142.86 GB) NTFS

Drive e: (MEDION) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 40D49AEE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

[/CODE]

cosinus

16.12.2013 00:22

Du sollst nicht den Text überarbeiten sondern alles illegale von deinem Rechner entfernen

lakil

16.12.2013 00:33

Zitat:

Zitat von cosinus (Beitrag 1214032)

Du sollst nicht den Text überarbeiten sondern alles illegale von deinem Rechner entfernen

Sorry ich habe nix illegales drauf es sind nur alte datei pfade die von anderen leuten mal runtergeladen wurden.

cosinus

16.12.2013 00:40

Ja und iuch möchte dass du alles illegale entfernst. Sonst geht es nicht weiter.
War doch schon am Anfang deutlich genug oder nicht :confused:

lakil

16.12.2013 00:50

ich sagte doch das ich nix illegales habe..

cosinus

16.12.2013 08:22

Du kannst lesen oder?
Also behaupte nicht, du hättest nix illegales drauf. Oder behauptest du der Crack im Downloadordner sei eine Fata Morgana? :balla:

lakil

16.12.2013 10:40

Ok es sind einige sachen drauf gewesen die aber nicht von mir stammen ausserdem ist das ein alter ordner der nicht gelöscht wurde in dem aber nix drin ist.
Wie gesagt ich habe mein PC davon jetzt gesäubert.
Ich wollte eigentlich nur wissen ob mein PC frei von Adware ist und nicht drüber belehrt .....

cosinus

16.12.2013 11:06

Zitat:

Ich wollte eigentlich nur wissen ob mein PC frei von Adware ist und nicht drüber belehrt .....

Ja und? Wir unterstützen die Vernwedung von Cracks und anderem illegalen Zeug aber nicht und deswegen muss das runter bevor es weiter geht, so einfach ist diese Regel, völlig egal was du davon halten magst.

Du hast jetzt alles Illegale entfernt? Wenn ja dann:

- FRST neu runterladen auf den Desktop
- Starten per Doppelklick, Haken setzen bei additions.txt
- auf Scan klicken
- beide neuen Logs in CODE-Tags hier posten

lakil

16.12.2013 11:11

Zitat:

Zitat von cosinus (Beitrag 1214192)

warum soll ich ein neue scan machen die beiden logs stehen doch bereits?
und FRST habe ich auch aufm desktop.

cosinus

16.12.2013 11:21

Weil sich dein System verändert hat. Einfach deswegen. Und ich würde mich freuen wenn du nicht jede Kleinigkeit hinterfragen würdest.

lakil

17.12.2013 11:08

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2013 01

Ran by Wolke (administrator) on MY-PC on 17-12-2013 10:47:55

Running from C:\Users\Wolke\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

() C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe

(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe

() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit_manager.exe

(Comodo Security Solutions, Inc.) C:\Program Files\COMODO\GeekBuddy\unit.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(mobile concepts GmbH) C:\Program Files\CyberGhost VPN\CGVPNCliService.exe

(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe

(CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe

(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe

(The OpenVPN Project) C:\Program Files\CyberGhost 5\Data\OpenVPN\openvpn.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Goversoft LLC) C:\Program Files (x86)\PrivaZer\PrivaZer.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [566184 2010-09-28] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)

HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)

HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)

HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)

HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe [1612504 2013-11-11] (COMODO)

HKLM-x32\...\Winlogon: [Userinit] %windows%\system32\userinit.exe, [x]

HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKCU\...\Run: [CyberGhost] - C:\Program Files\CyberGhost 5\CyberGhost.exe [360560 2013-12-16] (CyberGhost S.R.L.)

HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6541592 2013-12-14] (SUPERAntiSpyware)

HKCU\...\Policies\Explorer: [CDRAutoRun] 0

HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1

HKCU\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1

HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 0

HKCU\...\Policies\Explorer: [NoInstrumentation] 1

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

MountPoints2: E - E:\AutoRun.exe

MountPoints2: G - G:\Razor1911_Installer.exe

MountPoints2: H - H:\LaunchU3.exe -a

MountPoints2: {4a603744-ec8e-11e1-9032-4cedde54a1e5} - E:\Setup.exe

MountPoints2: {cd67f712-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f718-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f758-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {d4c29d90-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {d4c29da0-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {dfb72204-d952-11e1-bb50-88ae1dfbb2f1} - G:\LaunchU3.exe -a

HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION)

HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-07-23] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-12] (AVAST Software)

HKLM-x32\...\Run: [KeyScrambler] - C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe [508144 2013-11-14] (QFX Software Corporation)

HKU\Administrator\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:6957;https=127.0.0.1:6957

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2413} URL = 

SearchScopes: HKCU - DefaultScope {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

SearchScopes: HKCU - {0A786B8B-42ED-4861-B82E-23FD4F415524} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=7e99ace7000000000000000000000000&r=80

SearchScopes: HKCU - {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 79.141.167.14 79.141.160.23 67.221.255.31

Tcpip\..\Interfaces\{04CEE883-E95A-4699-8693-414EB7592ACC}: [NameServer]79.141.167.14,79.141.160.23

Tcpip\..\Interfaces\{228D7DD5-4B7F-4A02-831B-89396E3BBEE5}: [NameServer]79.141.167.14,79.141.160.23

Tcpip\..\Interfaces\{8C5E4082-505E-4DE7-855A-18FCFC537325}: [NameServer]79.141.160.23,79.141.167.14

Tcpip\..\Interfaces\{EF5DD1A8-4F56-409A-88D4-59E587C57743}: [NameServer]79.141.167.14,79.141.160.23
 

FireFox:

========

FF ProfilePath: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox

FF NewTab: about:blank

FF DefaultSearchEngine: Google Encrypted: No Personalization

FF SelectedSearchEngine: Google Encrypted: No Personalization

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=

FF NetworkProxy: "ftp", "127.0.0.1"

FF NetworkProxy: "ftp_port", 4001

FF NetworkProxy: "gopher", "127.0.0.1"

FF NetworkProxy: "gopher_port", 4001

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 4001

FF NetworkProxy: "socks", "127.0.0.1"

FF NetworkProxy: "socks_port", 4001

FF NetworkProxy: "socks_remote_dns", true

FF NetworkProxy: "ssl", "127.0.0.1"

FF NetworkProxy: "ssl_port", 4001

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\duckduckgo-ssl-javascript-free.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo_ff.xml

FF Extension: HTTPS-Everywhere - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org

FF Extension: Flagfox - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

FF Extension: Cookie Monster - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}

FF Extension: firefox - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\firefox@ghostery.com.xpi

FF Extension: preferences - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi

FF Extension: noscript - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: Adblock Plus - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi

FF Extension: prefs - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=412349836a9c47b19aa0f16305762553&tu=10G9y00Au1C01g0&sku=&tstsId=&ver=&", "hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch"

CHR DefaultSearchKeyword: yahoo.com search

CHR DefaultSearchProvider: Yahoo

CHR DefaultSearchURL: hxxp://de.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=198484&p={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Advanced SystemCare 6 Opera Plugin) - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\np_Asc_plugin.dll (IObit)

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File

CHR Plugin: (npAPI Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2.dll No File

CHR Plugin: (npAPI Ghost Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2ghost.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Extension: (HTTPS Everywhere) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2013.10.16_0

CHR Extension: (Ultimate User Agent Switcher, URL sniffer) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljfpjnehmoiabkefmnjegmpdddgcdnpo\0.9.3.3_0

CHR Extension: (Ghostery) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.0.0_0

CHR Extension: (Google Wallet) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (NotScripts) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn\0.9.6_0

CHR Extension: (ScriptSafe) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0

CHR HKLM-x32\...\Chrome\Extension: [aiibjampmlkfkdmgnkholklaechbdanh] - C:\ProgramData\Facebook Profile Viewer\5shja.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-12] (AVAST Software)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [63088 2013-12-16] (CyberGhost S.R.L)

R3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)

R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2013-12-13] (Comodo Security Solutions, Inc.)

R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6254152 2013-10-20] (COMODO)

S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO)

R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2098880 2013-11-11] ()

R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2013-12-13] (Comodo Security Solutions, Inc.)

R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 OpenVPNAccessClient; C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [24064 2010-08-12] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-01-14] (Crawler.com)

R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2100024 2013-08-29] (TuneUp Software)

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2013-04-25] (WiseCleaner.com)

R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

S2 HPSLPSVC; C:\Users\Wolke\AppData\Local\Temp\7zS0F2C\hpslpsvc64.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-12] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-12] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-12] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-12] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-12] (AVAST Software)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-12] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-12] ()

R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows (R) Win 7 DDK provider)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO)

R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-11-14] (COMODO)

R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO)

S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [722488 2000-01-01] (Conexant Systems Inc.)

R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-12-07] (EldoS Corporation)

R1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2013-10-07] ()

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [27456 2012-07-31] (Intel Corporation)

R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO)

R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-02-03] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)

R3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2010-08-03] (The OpenVPN Project)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-07-08] (Spotflux, Inc.)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

U4 bdselfpr; 

S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]

S3 MEMSWEEP2; \??\C:\Windows\system32\E37F.tmp [x]

S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-17 10:47 - 2013-12-17 10:48 - 00028125 _____ C:\Users\Wolke\Desktop\FRST.txt

2013-12-17 10:42 - 2013-12-17 10:42 - 01928078 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-16 21:50 - 2013-12-16 22:00 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 17:38 - 2013-12-17 09:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-16 17:38 - 2013-12-17 07:42 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-16 16:32 - 2013-12-16 16:32 - 08610888 _____ (CyberGhost S.R.L.                                           ) C:\Users\Wolke\Downloads\CG_5.0.10.10.exe

2013-12-16 10:53 - 2013-12-16 10:53 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

2013-12-15 23:21 - 2013-12-15 23:21 - 00000000 ____D C:\FRST

2013-12-15 23:08 - 2013-12-16 21:38 - 00000448 _____ C:\Windows\setupact.log

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:07 - 2013-12-16 19:48 - 00001540 _____ C:\Windows\PFRO.log

2013-12-15 23:07 - 2013-12-15 23:08 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 21:02 - 2013-12-16 17:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 18:42 - 2013-12-09 16:14 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:58 - 2013-12-15 16:59 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:54 - 2013-12-15 16:57 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 00:50 - 2013-12-15 01:12 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:41 - 2013-06-29 05:36 - 00003994 _____ C:\Users\Wolke\Documents\vpnbook-euro1-tcp80.ovpn

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:26 - 2013-12-15 00:27 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:53 - 2013-12-16 21:39 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-14 23:53 - 2013-12-16 21:39 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:42 - 2013-12-15 00:00 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:42 - 2013-10-04 22:50 - 00509872 _____ (Ask Partner Network) C:\Users\Wolke\Documents\APNSetup.exe

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 23:21 - 2013-05-31 15:53 - 00222200 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:26 - 2013-12-14 22:26 - 00002187 _____ C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk

2013-12-14 22:26 - 2013-12-14 22:26 - 00002163 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk

2013-12-14 22:26 - 2013-08-29 12:07 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-12-14 22:26 - 2013-08-29 12:07 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-12-14 22:26 - 2013-08-29 12:07 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll

2013-12-14 22:25 - 2013-12-14 22:26 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-12-14 22:19 - 2013-12-14 22:43 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:45 - 2013-12-15 19:33 - 00000000 ____D C:\AdwCleaner

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 18:48 - 2013-12-14 18:48 - 00002015 _____ C:\Users\Public\Desktop\GeekBuddy.lnk

2013-12-14 17:22 - 2013-12-14 17:22 - 00000000 ____D C:\Windows\System32\Tasks\COMODO

2013-12-14 17:21 - 2013-12-14 17:21 - 00001871 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk

2013-12-14 17:21 - 2013-12-14 17:21 - 00001870 _____ C:\Users\Public\Desktop\COMODO Firewall.lnk

2013-12-14 17:19 - 2013-12-14 17:21 - 00000000 ___SD C:\ProgramData\Shared Space

2013-12-14 17:18 - 2013-12-14 17:21 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:18 - 2013-12-14 17:19 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00001082 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-14 16:59 - 2013-12-14 17:14 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:29 - 2013-12-14 15:30 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 11:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-14 11:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-14 11:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-14 11:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-14 11:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-14 11:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-14 11:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-14 11:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-14 11:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-14 11:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-14 11:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-14 11:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-14 11:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-14 11:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-14 11:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-14 11:52 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-12-03 10:01 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-11 07:50 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 07:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 07:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 07:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 07:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 07:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 07:32 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 07:32 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 07:32 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 07:32 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 07:30 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 07:30 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 07:30 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 07:30 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:57 - 2013-12-04 12:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:55 - 2013-12-15 13:34 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:54 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 12:52 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-12-04 12:52 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-03 07:15 - 2013-12-03 07:16 - 00000000 ____D C:\Program Files\CyberGhost VPN

2013-12-03 07:15 - 2013-12-03 07:15 - 00000874 _____ C:\Users\Public\Desktop\CyberGhost VPN.lnk

2013-12-02 23:10 - 2013-12-02 23:10 - 00000779 _____ C:\Users\Public\Desktop\World of Tanks.lnk

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 17:37 - 2013-12-02 17:38 - 00000000 ____D C:\Program Files\TAP-Windows

2013-12-02 12:46 - 2013-12-02 12:47 - 08566040 _____ (CyberGhost S.R.L.                                           ) C:\Users\Wolke\Downloads\CGWebInstall(1).exe

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-14 18:52 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-14 17:31 - 00000000 ____D C:\ProgramData\ProductData

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:00 - 2013-12-14 18:30 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 21:47 - 2013-12-01 21:56 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:33 - 00000818 _____ C:\Users\Public\Desktop\World of Warplanes.lnk

2013-12-01 18:32 - 2013-12-01 18:33 - 08988024 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:14 - 2013-11-30 16:19 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:37 - 2013-12-17 07:43 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\Drivers\npf.sys

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe
 

==================== One Month Modified Files and Folders =======
 

2013-12-17 10:48 - 2013-12-17 10:47 - 00028125 _____ C:\Users\Wolke\Desktop\FRST.txt

2013-12-17 10:46 - 2013-08-16 19:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\PrivaZer

2013-12-17 10:44 - 2013-06-23 21:51 - 00000000 ____D C:\Program Files (x86)\GRID 2

2013-12-17 10:42 - 2013-12-17 10:42 - 01928078 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-17 10:16 - 2013-10-15 09:49 - 02064162 _____ C:\Windows\WindowsUpdate.log

2013-12-17 10:00 - 2013-05-20 20:16 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-17 09:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing

2013-12-17 09:38 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-17 07:57 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-17 07:57 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-17 07:46 - 2011-04-12 08:43 - 00700720 _____ C:\Windows\system32\perfh007.dat

2013-12-17 07:46 - 2011-04-12 08:43 - 00150326 _____ C:\Windows\system32\perfc007.dat

2013-12-17 07:46 - 2009-07-14 06:13 - 01624106 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-17 07:43 - 2013-11-26 14:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-12-17 07:42 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-16 22:42 - 2013-03-25 16:00 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-12-16 22:00 - 2013-12-16 21:50 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 21:42 - 2013-10-13 09:24 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit

2013-12-16 21:40 - 2013-01-04 19:59 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Wise Care 365

2013-12-16 21:39 - 2013-12-14 23:53 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-16 21:39 - 2013-12-14 23:53 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-16 21:39 - 2013-09-12 18:10 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2013-12-16 21:39 - 2013-05-20 20:16 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-16 21:39 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-16 21:38 - 2013-12-15 23:08 - 00000448 _____ C:\Windows\setupact.log

2013-12-16 20:55 - 2012-10-30 07:45 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-12-16 20:49 - 2012-08-13 17:34 - 00000000 ____D C:\Windows\Minidump

2013-12-16 20:49 - 2012-07-27 15:49 - 00287020 ____N C:\Windows\Minidump\121613-32541-01.dmp

2013-12-16 20:13 - 2013-05-21 12:28 - 00000000 ____D C:\Program Files\PeerBlock

2013-12-16 19:48 - 2013-12-15 23:07 - 00001540 _____ C:\Windows\PFRO.log

2013-12-16 19:02 - 2013-02-03 11:30 - 00000000 ____D C:\ProgramData\Spyware Terminator

2013-12-16 18:05 - 2013-11-12 11:31 - 00000000 ____D C:\Users\Wolke\AppData\Local\CyberGhost

2013-12-16 18:05 - 2012-07-27 15:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\VirtualStore

2013-12-16 17:56 - 2013-12-15 21:02 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-16 16:43 - 2013-11-12 11:30 - 00001893 _____ C:\Users\Wolke\Desktop\CyberGhost 5.lnk

2013-12-16 16:33 - 2013-10-15 11:23 - 00000000 ____D C:\Program Files\CyberGhost 5

2013-12-16 16:32 - 2013-12-16 16:32 - 08610888 _____ (CyberGhost S.R.L.                                           ) C:\Users\Wolke\Downloads\CG_5.0.10.10.exe

2013-12-16 10:53 - 2013-12-16 10:53 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

2013-12-16 01:07 - 2012-08-01 11:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\BitTorrent

2013-12-15 23:21 - 2013-12-15 23:21 - 00000000 ____D C:\FRST

2013-12-15 23:21 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:08 - 2013-12-15 23:07 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 23:02 - 2012-07-27 15:54 - 00000000 ____D C:\Users\Wolke

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 20:48 - 2013-11-12 10:32 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-12-15 20:34 - 2013-07-07 15:25 - 00000000 ____D C:\Users\Wolke\AppData\Local\Windows Live

2013-12-15 20:33 - 2013-07-07 15:33 - 00000000 ____D C:\Windows\de

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:12 - 2012-11-20 11:31 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Winamp

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:05 - 2013-06-11 11:45 - 00000000 ____D C:\Program Files (x86)\Eusing Free Registry Cleaner

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 20:02 - 2013-06-11 11:45 - 00001041 _____ C:\Users\Wolke\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 19:58 - 2012-07-27 16:48 - 00000000 ____D C:\Windows\Panther

2013-12-15 19:57 - 2013-01-22 19:23 - 00000000 ____D C:\Users\Wolke\AppData\Local\CrashDumps

2013-12-15 19:33 - 2013-12-14 20:45 - 00000000 ____D C:\AdwCleaner

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:59 - 2013-12-15 16:58 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:58 - 2013-07-17 08:45 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\DVDVideoSoft

2013-12-15 16:57 - 2013-12-15 16:54 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 15:18 - 2013-03-02 23:13 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ____D C:\ProgramData\Skype

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 13:34 - 2013-12-04 12:55 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 01:12 - 2013-12-15 00:50 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:27 - 2013-12-15 00:26 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-15 00:00 - 2013-12-14 23:42 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:43 - 2013-12-14 22:19 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 22:33 - 2013-06-11 17:38 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-14 22:26 - 2013-12-14 22:26 - 00002187 _____ C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk

2013-12-14 22:26 - 2013-12-14 22:26 - 00002163 _____ C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk

2013-12-14 22:26 - 2013-12-14 22:25 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-12-14 22:25 - 2013-06-11 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\TuneUp Software

2013-12-14 22:07 - 2013-07-08 13:37 - 1086264402 _____ C:\Users\Wolke\Downloads\GGG.Sperma.Fuck.DVDRip.XxX.avi

2013-12-14 20:59 - 2012-08-15 13:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\CheckPoint

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 18:52 - 2013-12-02 00:31 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-14 18:48 - 2013-12-14 18:48 - 00002015 _____ C:\Users\Public\Desktop\GeekBuddy.lnk

2013-12-14 18:30 - 2013-12-01 22:00 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-14 17:31 - 2013-12-01 22:02 - 00000000 ____D C:\ProgramData\ProductData

2013-12-14 17:22 - 2013-12-14 17:22 - 00000000 ____D C:\Windows\System32\Tasks\COMODO

2013-12-14 17:21 - 2013-12-14 17:21 - 00001871 _____ C:\Users\Public\Desktop\Virtuelle Comodo Dragon.lnk

2013-12-14 17:21 - 2013-12-14 17:21 - 00001870 _____ C:\Users\Public\Desktop\COMODO Firewall.lnk

2013-12-14 17:21 - 2013-12-14 17:19 - 00000000 ___SD C:\ProgramData\Shared Space

2013-12-14 17:21 - 2013-12-14 17:18 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:19 - 2013-12-14 17:18 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00001082 _____ C:\Users\Public\Desktop\Comodo Dragon.lnk

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-14 17:14 - 2013-12-14 16:59 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:30 - 2013-12-14 15:29 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 13:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-13 13:18 - 2013-07-13 00:22 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\vlc

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 09:05 - 2013-01-21 17:58 - 00000000 ____D C:\ProgramData\iolo

2013-12-13 09:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:48 - 2013-07-19 19:29 - 00000000 ____D C:\Windows\system32\MRT

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-01-21 18:00 - 00001395 _____ C:\Users\Wolke\Desktop\System Mechanic.lnk

2013-12-13 08:44 - 2012-07-27 17:41 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-12 09:10 - 2013-05-02 10:12 - 00000402 _____ C:\Windows\Tasks\Wise Turbo Checker.job

2013-12-10 23:02 - 2013-11-12 10:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-09 16:14 - 2013-12-15 18:42 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-08 20:30 - 2013-08-14 21:00 - 00000000 ____D C:\Users\Public\Documents\My Projects

2013-12-08 19:55 - 2013-05-20 20:16 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-08 19:55 - 2013-05-20 20:16 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-07 16:30 - 2012-07-27 18:09 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-12-07 16:30 - 2012-07-27 18:09 - 00000000 ____D C:\Program Files\CCleaner

2013-12-05 10:10 - 2013-05-20 20:20 - 00002531 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:58 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:52 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-03 10:47 - 2013-01-21 18:00 - 00057584 _____ (iolo technologies, LLC) C:\Windows\system32\iolobtdfg.exe

2013-12-03 10:47 - 2013-01-21 18:00 - 00026184 _____ (iolo technologies, LLC) C:\Windows\system32\smrgdf.exe

2013-12-03 10:01 - 2013-12-13 08:46 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-03 10:01 - 2013-01-21 18:00 - 02097984 _____ (iolo technologies, LLC) C:\Windows\SysWOW64\Incinerator32.dll

2013-12-03 07:16 - 2013-12-03 07:15 - 00000000 ____D C:\Program Files\CyberGhost VPN

2013-12-03 07:15 - 2013-12-03 07:15 - 00000874 _____ C:\Users\Public\Desktop\CyberGhost VPN.lnk

2013-12-02 23:11 - 2012-08-24 09:30 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-12-02 23:10 - 2013-12-02 23:10 - 00000779 _____ C:\Users\Public\Desktop\World of Tanks.lnk

2013-12-02 23:10 - 2013-06-27 09:25 - 00000000 ____D C:\Games

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:10 - 2013-10-14 11:05 - 844549621 _____ C:\Users\Wolke\Downloads\Emma und Cony im Sperma Labyrinth_26539.mp4

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 18:33 - 2013-05-04 13:48 - 00012257 _____ C:\Windows\wininit.ini

2013-12-02 17:38 - 2013-12-02 17:37 - 00000000 ____D C:\Program Files\TAP-Windows

2013-12-02 17:35 - 2012-07-31 13:10 - 00000000 ____D C:\ProgramData\SecTaskMan

2013-12-02 12:47 - 2013-12-02 12:46 - 08566040 _____ (CyberGhost S.R.L.                                           ) C:\Users\Wolke\Downloads\CGWebInstall(1).exe

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:02 - 2013-06-14 16:02 - 00000000 ____D C:\Program Files (x86)\IObit

2013-12-01 22:02 - 2012-08-26 15:09 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\IObit

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 22:00 - 2012-11-14 11:32 - 00000000 ____D C:\ProgramData\IObit

2013-12-01 21:56 - 2013-12-01 21:47 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:33 - 00000818 _____ C:\Users\Public\Desktop\World of Warplanes.lnk

2013-12-01 18:33 - 2013-12-01 18:32 - 08988024 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-12-01 13:34 - 2013-03-03 20:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Adobe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:19 - 2013-11-30 16:14 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-30 16:13 - 2012-07-27 18:13 - 01598386 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-30 01:56 - 2013-08-10 09:18 - 00000094 _____ C:\Users\Wolke\AppData\Roaming\WB.CFG

2013-11-30 01:56 - 2013-06-17 21:56 - 00000006 _____ C:\Users\Wolke\AppData\Roaming\WBPU-TTL.DAT

2013-11-28 21:31 - 2013-09-01 18:05 - 00000000 ____D C:\Program Files (x86)\PrivaZer

2013-11-28 21:31 - 2013-08-16 19:56 - 00001851 _____ C:\Users\Public\Desktop\PrivaZer.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-26 12:54 - 2013-12-14 11:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-14 11:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-14 11:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-14 11:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-14 11:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-14 11:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-14 11:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-14 11:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-14 11:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-14 11:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-14 11:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-14 11:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-14 11:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-14 11:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-14 11:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-14 11:52 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-14 11:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-14 11:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-14 11:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-14 11:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-14 11:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-14 11:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-14 11:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-14 11:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 08:03 - 2013-10-20 18:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\medion

2013-11-26 07:40 - 2013-12-14 11:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-14 11:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-14 11:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-23 19:26 - 2013-12-11 07:34 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 07:34 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-21 09:33 - 2013-10-31 16:40 - 00000000 ____D C:\Users\Wolke\AppData\Local\Microsoft Games

2013-11-21 08:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe

2013-11-19 03:33 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-10 20:16
 

==================== End Of Log ============================

--- --- ---

lakil

17.12.2013 11:10

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-12-2013 01

Ran by Wolke at 2013-12-17 10:49:12

Running from C:\Users\Wolke\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

AS: COMODO Antivirus (Disabled - Out of date) {0C2D2636-923D-EE52-2A83-E643204A8275}

FW: COMODO Firewall (Enabled) {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)

Advanced SystemCare 7 (x32 Version: 7.0.6)

AMD Accelerated Video Transcoding (Version: 13.20.100.30723)

AMD Catalyst Control Center (x32 Version: 2013.0723.1944.33607)

AMD Catalyst Install Manager (Version: 8.0.915.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.80723.2017)

AMD Wireless Display v3.0 (Version: 1.0.0.13)

avast! Free Antivirus (x32 Version: 9.0.2008)

Bing-Desktop (x32 Version: 1.3.171.0)

BitTorrent (HKCU Version: 7.8.2.30332)

Broadcom 802.11 Network Adapter (Version: 5.60.48.35)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center InstallProxy (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center Localization All (x32 Version: 2013.0723.1944.33607)

CCC Help Chinese Standard (x32 Version: 2013.0723.1943.33607)

CCC Help Chinese Traditional (x32 Version: 2013.0723.1943.33607)

CCC Help Czech (x32 Version: 2013.0723.1943.33607)

CCC Help Danish (x32 Version: 2013.0723.1943.33607)

CCC Help Dutch (x32 Version: 2013.0723.1943.33607)

CCC Help English (x32 Version: 2013.0723.1943.33607)

CCC Help Finnish (x32 Version: 2013.0723.1943.33607)

CCC Help French (x32 Version: 2013.0723.1943.33607)

CCC Help German (x32 Version: 2013.0723.1943.33607)

CCC Help Greek (x32 Version: 2013.0723.1943.33607)

CCC Help Hungarian (x32 Version: 2013.0723.1943.33607)

CCC Help Italian (x32 Version: 2013.0723.1943.33607)

CCC Help Japanese (x32 Version: 2013.0723.1943.33607)

CCC Help Korean (x32 Version: 2013.0723.1943.33607)

CCC Help Norwegian (x32 Version: 2013.0723.1943.33607)

CCC Help Polish (x32 Version: 2013.0723.1943.33607)

CCC Help Portuguese (x32 Version: 2013.0723.1943.33607)

CCC Help Russian (x32 Version: 2013.0723.1943.33607)

CCC Help Spanish (x32 Version: 2013.0723.1943.33607)

CCC Help Swedish (x32 Version: 2013.0723.1943.33607)

CCC Help Thai (x32 Version: 2013.0723.1943.33607)

CCC Help Turkish (x32 Version: 2013.0723.1943.33607)

ccc-utility64 (Version: 2013.0723.1944.33607)

CCleaner (Version: 4.08)

Comodo Dragon (x32 Version: 30.0.0.0)

COMODO Firewall (Version: 6.3.39949.2976)

Conexant Audio Driver For AMD HDMI/DP Codec (Version: 4.98.32.50)

CyberGhost 5

CyberGhost VPN

DAEMON Tools Lite (x32 Version: 4.47.1.0333)

Do Not Track Me Add-on 2.2.9.1112 (x32 Version: 2.2.9.1112)

Eusing Free Registry Cleaner (x32)

Free YouTube to MP3 Converter version 3.12.17.1127 (x32 Version: 3.12.17.1127)

GeekBuddy (Version: 4.10.79)

Google Chrome (x32 Version: 31.0.1650.63)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.22.3)

Hide IP Easy (x32 Version: 5.3.1.2)

HydraVision (x32 Version: 4.2.252.0)

Intel(R) Control Center (x32 Version: 1.2.1.1008)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)

Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001)

Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002)

iolo technologies' System Mechanic (x32 Version: 12.5.0)

Java 7 Update 45 (x32 Version: 7.0.450)

Java Auto Updater (x32 Version: 2.1.9.8)

KeyScrambler (x32 Version: 3.3.0.0)

K-Lite Mega Codec Pack 3.9.5 (x32 Version: 3.9.5)

Malwarebytes Anti-Exploit version 0.09.3.1000 (Version: 0.09.3.1000)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)

Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Mortal Kombat Komplete Edition (x32)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)

Mozilla Maintenance Service (x32 Version: 26.0)

MSVCRT Redists (Version: 1.0)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

neroxml (x32 Version: 1.0.0)

NVIDIA PhysX (x32 Version: 9.10.0513)

OpenAL (x32)

OpenVPN Client (x32 Version: 1.5.6)

Opera 12.16 (Version: 12.16.1860)

PeerBlock 1.1 (r518) (Version: 1.1.0.518)

Pidgin (x32 Version: 2.10.7)

Pinnacle Video Treiber (Version: 12.1.0.030)

PrivaZer (x32 Version: 2.10.0.0)

Project64 1.6 (x32 Version: 1.6)

Realtek Ethernet Controller Driver (x32 Version: 7.47.714.2011)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6687)

Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30111)

Secure Eraser (x32 Version: 4.2.0.1)

Simple Adblock (x32 Version: 1.1.5)

Skype™ 6.11 (x32 Version: 6.11.102)

Sophos Virus Removal Tool (x32 Version: 2.2)

Spybot - Search & Destroy (x32 Version: 2.1.19)

Spyware Terminator 2012 (x32 Version: 3.0.0.80)

SUPERAntiSpyware (Version: 5.7.1010)

Synaptics Pointing Device Driver (Version: 15.0.8.1)

TAP-Windows 9.9.2 (Version: 9.9.2)

Tinypic 3.18 (x32 Version: Tinypic 3.18)

Toshiba Assist (x32 Version: 3.00.11)

TOSHIBA Bulletin Board (Version: 1.6.07.64)

TOSHIBA Bulletin Board (x32 Version: 1.6.07.64)

TOSHIBA ConfigFree (x32 Version: 8.0.35)

TOSHIBA eco Utility (Version: 1.2.11.64)

TOSHIBA eco Utility (x32 Version: 1.2.11.64)

TOSHIBA Flash Cards Support Utility (x32 Version: 1.63.0.11C)

TOSHIBA HDD/SSD Alert (Version: 3.1.64.6)

TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.6)

TOSHIBA PC Health Monitor (Version: 1.6.0.64)

TOSHIBA Places Icon Utility (x32 Version: 1.1.1.4)

TOSHIBA ReelTime (Version: 1.6.06.64)

TOSHIBA ReelTime (x32 Version: 1.6.06.64)

TOSHIBA Service Station (x32 Version: 2.2.9)

TOSHIBA TEMPRO (x32 Version: 3.35)

TOSHIBA Value Added Package (Version: 1.3.19.64)

TOSHIBA Value Added Package (x32 Version: 1.3.19.64)

TOSHIBA Web Camera Application (x32 Version: 1.1.1.15)

TuneUp Utilities 2014 (en-US) (x32 Version: 14.0.1000.88)

TuneUp Utilities 2014 (x32 Version: 14.0.1000.88)

Ubisoft Game Launcher (x32 Version: 1.0.0.0)

Utility Common Driver (x32 Version: 1.0.52.2C)

Vegas Pro 12.0 (64-bit) (Version: 12.0.670)

Verbindungsassistent (x32 Version: 2.1)

Winamp (x32 Version: 5.63 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Doctor 2.7.3 (x32)

Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

WinRAR 4.20 (64-Bit) (Version: 4.20.0)

Wise Care 365 version 2.87 (x32 Version: 2.87)

World of Tanks (x32)

World of Warplanes (x32)

XMedia Recode Version 3.1.4.5 (x32 Version: 3.1.4.5)

xp-AntiSpy 3.98-2 (x32)
 

==================== Restore Points  =========================
 

26-11-2013 07:34:52 Windows Update

29-11-2013 07:40:06 Windows Update

29-11-2013 12:44:59 Windows Update

30-11-2013 15:08:53 Windows Update

30-11-2013 15:40:05 Installed Microsoft Fix it 50123

04-12-2013 08:06:01 Windows Update

10-12-2013 10:20:38 Windows Update

11-12-2013 06:35:02 Windows Update

11-12-2013 06:50:55 Windows Update

12-12-2013 09:01:12 Gerätetreiber-Paketinstallation: HUAWEI Netzwerkadapter

13-12-2013 07:27:02 Windows Update

13-12-2013 07:43:25 Windows Update

13-12-2013 07:53:51 Windows Update

13-12-2013 08:23:21 Removed IObit Apps Toolbar v8.3.

14-12-2013 10:52:26 Windows Update

14-12-2013 16:20:24 Gerätetreiber-Paketinstallation: COMODO Netzwerkdienst

14-12-2013 21:23:31 TuneUp Utilities 2014 wird installiert

14-12-2013 22:24:28 Installed HidedMyRealIP-demo

14-12-2013 23:31:41 Installed OpenVPN Client

15-12-2013 00:12:06 Removed HidedMyRealIP-demo

15-12-2013 18:25:57 Removed Adobe Reader XI (11.0.05) - Deutsch.
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-04-14 22:31 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {07E0090C-042A-4FF5-A123-9D28761DDC37} - System32\Tasks\{4259E698-0EAE-4388-B42C-86F91FF49F20} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem

Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem

Task: {0F272DD7-5149-4663-A06D-01D62BFC046F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {286D0DDA-0C1D-42E8-A262-49CDA84A3ED4} - System32\Tasks\Pointstone\System Cleaner\Startup Dialog => C:\Program Files (x86)\Pointstone\System Cleaner 7\Helper.exe

Task: {2BF90F22-2435-4F5D-93F6-629C720F25FE} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

Task: {403A2650-A617-49E0-B410-CABEA9E347DD} - System32\Tasks\{996830C2-66C4-4C0C-BB9D-C43C5FEC202D} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {537C03F3-BB91-4D75-94A3-596785E3D9CA} - System32\Tasks\{944B9192-41AB-4674-9384-5EEFA0886B8A} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {5755A3AE-379E-4038-838F-61881904A749} - System32\Tasks\COMODO\COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [2013-11-20] (COMODO)

Task: {5C5DF0FC-4C4C-44DA-A0A6-F37CB80CFA10} - System32\Tasks\{81607F8B-DCE4-401E-9A39-A64D15BB2225} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {67607FD3-61CD-4122-B49D-42E738C3002E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3583547410-2317155067-1929240655-1000

Task: {677C707B-1A32-48F5-B49C-9BE32D860E7A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)

Task: {6C43EEA9-587F-47BD-9326-1A8621B029EC} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)

Task: {6F604BA2-DD73-493C-8492-D16F4F074E76} - System32\Tasks\{AAEFF361-D5E3-4B26-B773-B0D8C21264CD} => C:\Program Files\CyberGhost VPN\CyberGhost.exe [2012-04-26] (CyberGhost SRL)

Task: {789AF10D-80DA-47C7-A019-473DDB792733} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-06-03] (TOSHIBA CORPORATION)

Task: {7A90C836-0662-4EDA-99FB-1842BCDCB841} - System32\Tasks\WPD\SqmUpload_S-1-5-21-3583547410-2317155067-1929240655-1000 => Rundll32.exe portabledeviceapi.dll,#1

Task: {8C097928-E444-430E-AFBC-D84A47246952} - System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {94EC2DDA-4515-456C-8773-5DE7D02604BF} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART

Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => Rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation

Task: {9A2A51EA-B167-422D-BE24-9422C74727FE} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe [2013-12-03] (iolo technologies, LLC)

Task: {A3D1F86F-2BDC-4248-9E8D-4DF5F3F80926} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate

Task: {A8287ACD-892E-435D-A994-B0D8C9D7E6D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {B4C2B99F-BC51-4243-A930-E463E5F807AD} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-08-29] (TuneUp Software)

Task: {C52EB4D8-7E5A-4D10-96A3-F88CD05B9BC3} - \DSite No Task File

Task: {C8E99B63-0C76-4075-95A8-87FBAFC776F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-12] (AVAST Software)

Task: {CA7EE6E1-03CC-4CEB-9DA6-A15A6D86BF4C} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-08-22] (WiseCleaner.COM)

Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations

Task: {DADF2B40-7B1A-41AF-9894-84DF1A5BFF43} - System32\Tasks\{4A91DEF5-6223-4882-BB49-04163FC708D8} => C:\Program Files (x86)\Activision\Transformers Fall of Cybertron\Binaries\TFOC.exe

Task: {DC699450-1128-4B8C-BA85-791F296ED439} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange

Task: {E233ED1D-20C3-44F8-AB2C-817155153D21} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {E4AFDA1A-E879-4A62-AE69-A1D38D76A5B7} - System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {E57F50A2-05DA-40A2-9346-3F8B59125288} - System32\Tasks\ASC7_SkipUac_Wolke => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2013-11-18] (IObit)

Task: {F2BC665E-451B-4B78-ADBC-2FD0792D07E1} - System32\Tasks\Malwarebytes Anti-Exploit => C:\Program Files\Malwarebytes Anti-Exploit\mbae-loader.exe [2013-08-01] (Malwarebytes Corporation)

Task: {F31FFD37-7725-4B7B-BC4A-C4B7E0336100} - System32\Tasks\{1A8566DC-26EF-4235-B528-B092A5B1AAFF} => Chrome.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?source=lightinstaller&amp;page=tsInstall

Task: {FCCAFAD5-1D5A-4C65-B0DF-CB284CD5F5BF} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-11-11] (COMODO)

Task: {FF81C936-9663-43C9-8D74-F53A1C1592A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Malwarebytes Anti-Exploit.job => C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-10-14 20:38 - 2012-09-07 15:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll

2013-11-01 08:50 - 2013-11-01 08:50 - 03525687 _____ () C:\Program Files (x86)\PrivaZer\PrivaMenu3.dll

2010-04-07 15:07 - 2010-04-07 15:07 - 09468728 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

2009-11-03 12:26 - 2009-11-03 12:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll

2012-07-27 16:50 - 2009-06-22 13:40 - 00022328 _____ () C:\Program Files\TOSHIBA CORPORATION\Toshiba Assist\NotifyX.dll

2009-03-12 18:08 - 2009-03-12 18:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll

2010-04-06 13:53 - 2010-04-06 13:53 - 00578936 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll

2010-02-05 16:44 - 2010-02-05 16:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

2013-11-12 11:30 - 2013-11-26 09:52 - 00032768 _____ () C:\Program Files\CyberGhost 5\de\CyberGhost.resources.dll

2013-11-12 11:30 - 2013-11-26 09:52 - 00003072 _____ () C:\Program Files\CyberGhost 5\de\MobileConcepts.resources.dll

2013-12-01 22:00 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll

2013-12-16 21:07 - 2013-12-16 20:06 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13121601\algo.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00028160 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\servicemanager.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pywintypes26.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00041472 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32service.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00096256 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32api.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00153088 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pyexpat.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00040448 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_socket.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00645120 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ssl.pyd

2010-03-16 13:05 - 2010-03-16 13:05 - 00020480 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\zope.interface._zope_interface_coptimizations.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00311808 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_hashlib.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00073728 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ctypes.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00011776 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\select.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00010752 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.rand.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00051200 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.crypto.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00039936 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.SSL.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00036352 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32process.pyd

2010-05-05 13:43 - 2010-05-05 13:43 - 00008192 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\twisted.protocols._c_urlarg.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32security.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00017920 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32event.pyd

2009-07-06 04:16 - 2009-07-06 04:16 - 00111104 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32file.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00024064 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32pipe.pyd

2013-07-16 21:20 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2013-07-16 21:20 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2013-07-16 21:20 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2013-11-12 10:09 - 2013-11-12 10:09 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-11-29 20:01 - 2013-11-29 20:01 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\c928e05ad4d57c6ce294ae68e8598b0f\PSIClient.ni.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00524288 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgCore.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00139264 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgBluetooth.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00065536 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDialup.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgUtil.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00090112 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgPorts.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00106496 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDatabase.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00143360 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDetection.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00053248 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDriverInstall.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 06057984 ____N () C:\Program Files (x86)\Verbindungsassistent\VerbindungsassistentGer.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGSMSPCClient.Dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDebugs.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 00016384 ____N () C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent_WTGSMSPCClientGer.dll

2013-11-26 14:45 - 2009-03-03 12:42 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDriverInstallX.Dll

2013-11-12 11:30 - 2013-08-22 15:10 - 00161992 _____ () C:\Program Files\CyberGhost 5\Data\OpenVPN\liblzo2-2.dll

2013-11-12 11:30 - 2013-08-22 15:10 - 00107720 _____ () C:\Program Files\CyberGhost 5\Data\OpenVPN\libpkcs11-helper-1.dll

2013-12-10 19:56 - 2013-12-10 19:56 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom 802.11n-Netzwerkadapter

Description: Broadcom 802.11n-Netzwerkadapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: BCM43XX

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/16/2013 09:40:15 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 08:57:34 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 08:51:54 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 07:52:26 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 07:44:19 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 05:54:41 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 04:40:29 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/15/2013 11:27:41 PM) (Source: Application Hang) (User: )

Description: Programm gmer_2.1.19163.exe, Version 2.1.19163.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 111c
 

Startzeit: 01cef9e4cb2c29ed
 

Endzeit: 15
 

Anwendungspfad: C:\Users\Wolke\Desktop\gmer_2.1.19163.exe
 

Berichts-ID: 1a9ffbdb-65d8-11e3-aad2-88ae1dfbb2f1
 

Error: (12/15/2013 11:27:00 PM) (Source: Application Hang) (User: )

Description: Programm gmer_2.1.19163.exe, Version 2.1.19163.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: d50
 

Startzeit: 01cef9e4939165c4
 

Endzeit: 16
 

Anwendungspfad: C:\Users\Wolke\Desktop\gmer_2.1.19163.exe
 

Berichts-ID: 011759e8-65d8-11e3-aad2-88ae1dfbb2f1
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service) (User: )

Description: Der Index kann nicht initialisiert werden.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 
 

System errors:

=============

Error: (12/16/2013 09:42:42 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/16/2013 09:39:40 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (12/16/2013 09:00:03 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/16/2013 08:56:55 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (12/16/2013 08:56:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/16/2013 08:56:49 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
 

Error: (12/16/2013 08:55:10 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎16.‎12.‎2013 um 20:53:38 unerwartet heruntergefahren.
 

Error: (12/16/2013 08:51:18 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (12/16/2013 08:50:11 PM) (Source: BugCheck) (User: )

Description: 0x00000109 (0xa3a039d89c4cfb62, 0xb3b7465eeecb375c, 0xfffff8800356e5c0, 0x0000000000000002)C:\Windows\Minidump\121613-32541-01.dmp121613-32541-01
 

Error: (12/16/2013 08:50:10 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ‎16.‎12.‎2013 um 20:47:53 unerwartet heruntergefahren.
 
 

Microsoft Office Sessions:

=========================

Error: (12/16/2013 09:40:15 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 08:57:34 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 08:51:54 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 07:52:26 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 07:44:19 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 05:54:41 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/16/2013 04:40:29 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/15/2013 11:27:41 PM) (Source: Application Hang)(User: )

Description: gmer_2.1.19163.exe2.1.19163.0111c01cef9e4cb2c29ed15C:\Users\Wolke\Desktop\gmer_2.1.19163.exe1a9ffbdb-65d8-11e3-aad2-88ae1dfbb2f1
 

Error: (12/15/2013 11:27:00 PM) (Source: Application Hang)(User: )

Description: gmer_2.1.19163.exe2.1.19163.0d5001cef9e4939165c416C:\Users\Wolke\Desktop\gmer_2.1.19163.exe011759e8-65d8-11e3-aad2-88ae1dfbb2f1
 

Error: (12/15/2013 11:11:36 PM) (Source: Windows Search Service)(User: )

Description: 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 62%

Total physical RAM: 3954.67 MB

Available physical RAM: 1468.66 MB

Total Pagefile: 4671.85 MB

Available Pagefile: 1185.49 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:297.99 GB) (Free:151.68 GB) NTFS

Drive e: (MEDION) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 40D49AEE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

cosinus

17.12.2013 11:23

Zitat:

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
AS: COMODO Antivirus (Disabled - Out of date) {0C2D2636-923D-EE52-2A83-E643204A8275}
FW: COMODO Firewall (Enabled) {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}

Man kann's mit so einer Software wie in diesem Fall auch echt übertreiben. Es ist absolut kontraproduktiv sowas wie COMODO und Avast gleichzeitig zu verwenden. Noch nie gehört davon dass sich zwei solcher Scanner gegenseitig aushebeln können?

Ich würd es max. bei Avast lassen, COMODO/Spybot runter + Windows-Defender deaktivieren. Aber Windows-Firewall aktivieren.

Zitat:

ProxyServer: http=127.0.0.1:6957;https=127.0.0.1:6957

Proxy im IE? Ist der gewollt?

lakil

17.12.2013 11:48

hm ja ok ich habe keine proxy gesetzt
naja habe comodo firewall gewählt weil mir bessere auskunft über ausgehende verbindungen gibt
letzteres hatte ich ein trojaner der vom ausland gesteuert wurde und habe ihn dadurch erkannt durch seine ip.und spybot ist garnicht online aktiv nutze ihn immer zu einem manuellen scan und der ist sehr gut findet immer was.
ich möchte aber diese nervigen suchmaschinen entfernen und auch als start seite aus allen ie-exploreren.
such maschinen verwalten option in ex..... hilft da wenig habe es paar mal versucht.
das ist der eigentliche grund.

cosinus

17.12.2013 11:53

Zitat:

naja habe comodo firewall gewählt weil mir bessere auskunft über ausgehende verbindungen gibt

Ausgehenden Verkehr zuverlässig überwachen/kontrollieren geht nicht

Zitat:

letzteres hatte ich ein trojaner der vom ausland gesteuert wurde und habe ihn dadurch erkannt durch seine ip.

Dazu braucht man kein Gedöns wie COMODO. Aber naja musst du wissen. Eine vernünftige Absicherung kommt ohne Schlangenöl aus :pfeiff:

Zitat:

und der ist sehr gut findet immer was.

Nur weil ein Programm ständig etwas findet ist es deswegen nicht gut. Es kann auch ständig hysterische irgendwelche harmlosen RegValues oder Cookies anzeigen, sinnvoll und gut ist das noch lange nicht.

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

lakil

17.12.2013 12:09

-mbar exe läuft unter prozesse doppelt läst sich nicht im taskmanager beenden!

-wurde nicht manuell gestartet!

komisch:confused:

cosinus

17.12.2013 12:21

Was interessiert dich die Prozessliste wenn MBAR läuft. Lass einfach das Programm durchlaufen und halt dich nicht immer an Kleinigkeiten auf

lakil

17.12.2013 15:27

sorry mein fehler.
das war ne anti exploit exe.
alles ok.

Habe den test durchgeführt und es wurde nix gefunden.

Code:



ccount is Administrative
 

Internet Explorer version: 11.0.9600.16476
 

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED

CPU speed: 2.527000 GHz

Memory total: 4146774016, free: 1407496192
 

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
 

(c) Malwarebytes Corporation 2011-2012
 

OS version: 6.1.7601 Windows 7 Service Pack 1 x64
 

Account is Administrative
 

Internet Explorer version: 11.0.9600.16476
 

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED

CPU speed: 2.527000 GHz

Memory total: 4146774016, free: 1498697728
 

Could not load protection driver

Downloaded database version: v2013.12.17.04

Downloaded database version: v2013.10.11.02

=======================================

------------ Kernel report ------------

     12/17/2013 14:38:28

------------ Loaded modules -----------

\SystemRoot\system32\ntoskrnl.exe

\SystemRoot\system32\hal.dll

\SystemRoot\system32\kdcom.dll

\SystemRoot\system32\mcupdate_GenuineIntel.dll

\SystemRoot\system32\PSHED.dll

\SystemRoot\system32\CLFS.SYS

\SystemRoot\system32\CI.dll

\SystemRoot\system32\drivers\Wdf01000.sys

\SystemRoot\system32\drivers\WDFLDR.SYS

\SystemRoot\system32\drivers\ACPI.sys

\SystemRoot\system32\drivers\WMILIB.SYS

\SystemRoot\system32\drivers\msisadrv.sys

\SystemRoot\system32\drivers\vdrvroot.sys

\SystemRoot\system32\DRIVERS\LPCFilter.sys

\SystemRoot\system32\drivers\pci.sys

\SystemRoot\System32\drivers\partmgr.sys

\SystemRoot\system32\DRIVERS\compbatt.sys

\SystemRoot\system32\DRIVERS\BATTC.SYS

\SystemRoot\system32\drivers\volmgr.sys

\SystemRoot\System32\drivers\volmgrx.sys

\SystemRoot\System32\drivers\mountmgr.sys

\SystemRoot\system32\DRIVERS\iaStor.sys

\SystemRoot\system32\drivers\atapi.sys

\SystemRoot\system32\drivers\ataport.SYS

\SystemRoot\system32\drivers\msahci.sys

\SystemRoot\system32\drivers\PCIIDEX.SYS

\SystemRoot\system32\DRIVERS\iaStorA.sys

\SystemRoot\system32\DRIVERS\storport.sys

\SystemRoot\system32\drivers\amdxata.sys

\SystemRoot\system32\drivers\fltmgr.sys

\SystemRoot\system32\drivers\fileinfo.sys

\SystemRoot\System32\Drivers\Ntfs.sys

\SystemRoot\System32\Drivers\msrpc.sys

\SystemRoot\System32\Drivers\ksecdd.sys

\SystemRoot\System32\Drivers\cng.sys

\SystemRoot\System32\drivers\pcw.sys

\SystemRoot\System32\Drivers\Fs_Rec.sys

\SystemRoot\system32\drivers\ndis.sys

\SystemRoot\system32\drivers\NETIO.SYS

\SystemRoot\System32\Drivers\ksecpkg.sys

\SystemRoot\System32\drivers\tcpip.sys

\SystemRoot\System32\drivers\fwpkclnt.sys

\SystemRoot\system32\drivers\volsnap.sys

\SystemRoot\system32\DRIVERS\TVALZ_O.SYS

\SystemRoot\System32\Drivers\spldr.sys

\SystemRoot\System32\drivers\rdyboost.sys

\SystemRoot\System32\Drivers\mup.sys

\SystemRoot\system32\DRIVERS\iaStorF.sys

\SystemRoot\System32\drivers\hwpolicy.sys

\SystemRoot\System32\DRIVERS\fvevol.sys

\SystemRoot\system32\drivers\disk.sys

\SystemRoot\system32\drivers\CLASSPNP.SYS

\SystemRoot\System32\Drivers\aswVmm.sys

\SystemRoot\System32\Drivers\aswRvrt.sys

\SystemRoot\system32\DRIVERS\cdrom.sys

\??\C:\Windows\system32\drivers\aswSnx.sys

\SystemRoot\System32\Drivers\Null.SYS

\SystemRoot\System32\Drivers\Beep.SYS

\SystemRoot\System32\drivers\vga.sys

\SystemRoot\System32\drivers\VIDEOPRT.SYS

\SystemRoot\System32\drivers\watchdog.sys

\SystemRoot\System32\DRIVERS\RDPCDD.sys

\SystemRoot\system32\drivers\rdpencdd.sys

\SystemRoot\system32\drivers\rdprefmp.sys

\SystemRoot\System32\Drivers\Msfs.SYS

\SystemRoot\System32\Drivers\Npfs.SYS

\SystemRoot\system32\DRIVERS\tdx.sys

\SystemRoot\system32\DRIVERS\TDI.SYS

\??\C:\Windows\system32\drivers\aswTdi.sys

\SystemRoot\system32\drivers\afd.sys

\??\C:\Windows\system32\drivers\aswRdr2.sys

\SystemRoot\System32\DRIVERS\netbt.sys

\SystemRoot\system32\DRIVERS\wfplwf.sys

\SystemRoot\system32\DRIVERS\pacer.sys

\SystemRoot\system32\DRIVERS\vwififlt.sys

\SystemRoot\system32\DRIVERS\netbios.sys

\SystemRoot\system32\DRIVERS\wanarp.sys

\SystemRoot\system32\DRIVERS\termdd.sys

\??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS

\??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS

\SystemRoot\system32\DRIVERS\rdbss.sys

\SystemRoot\system32\drivers\nsiproxy.sys

\SystemRoot\system32\DRIVERS\mssmbios.sys

\??\C:\Program Files\Malwarebytes Anti-Exploit\MBAE.sys

\??\C:\Windows\system32\drivers\ElRawDsk.sys

\SystemRoot\System32\drivers\discache.sys

\SystemRoot\System32\Drivers\dfsc.sys

\SystemRoot\system32\DRIVERS\blbdrive.sys

\??\C:\Windows\system32\drivers\aswSP.sys

\SystemRoot\system32\DRIVERS\tunnel.sys

\SystemRoot\system32\DRIVERS\atikmpag.sys

\SystemRoot\system32\DRIVERS\atikmdag.sys

\SystemRoot\System32\drivers\dxgkrnl.sys

\SystemRoot\System32\drivers\dxgmms1.sys

\SystemRoot\system32\DRIVERS\HDAudBus.sys

\SystemRoot\system32\DRIVERS\HECIx64.sys

\SystemRoot\system32\drivers\usbehci.sys

\SystemRoot\system32\drivers\USBPORT.SYS

\SystemRoot\system32\DRIVERS\Rt64win7.sys

\SystemRoot\system32\DRIVERS\tosrfec.sys

\SystemRoot\system32\DRIVERS\CmBatt.sys

\SystemRoot\system32\DRIVERS\i8042prt.sys

\SystemRoot\system32\DRIVERS\CeKbFilter.sys

\SystemRoot\System32\drivers\keyscrambler.sys

\SystemRoot\system32\DRIVERS\kbdclass.sys

\SystemRoot\system32\DRIVERS\SynTP.sys

\SystemRoot\system32\DRIVERS\USBD.SYS

\SystemRoot\system32\DRIVERS\mouclass.sys

\SystemRoot\system32\DRIVERS\Impcd.sys

\SystemRoot\system32\DRIVERS\TVALZFL.sys

\SystemRoot\system32\DRIVERS\intelppm.sys

\SystemRoot\system32\DRIVERS\CompositeBus.sys

\SystemRoot\system32\DRIVERS\AgileVpn.sys

\SystemRoot\system32\DRIVERS\rasl2tp.sys

\SystemRoot\system32\DRIVERS\ndistapi.sys

\SystemRoot\system32\DRIVERS\ndiswan.sys

\SystemRoot\system32\DRIVERS\raspppoe.sys

\SystemRoot\system32\DRIVERS\raspptp.sys

\SystemRoot\system32\DRIVERS\rassstp.sys

\SystemRoot\system32\DRIVERS\tapoas.sys

\SystemRoot\system32\DRIVERS\swenum.sys

\SystemRoot\system32\DRIVERS\ks.sys

\SystemRoot\system32\DRIVERS\MarvinBus64.sys

\SystemRoot\system32\DRIVERS\umbus.sys

\SystemRoot\system32\DRIVERS\usbhub.sys

\SystemRoot\System32\Drivers\NDProxy.SYS

\SystemRoot\system32\drivers\AtihdW76.sys

\SystemRoot\system32\drivers\portcls.sys

\SystemRoot\system32\drivers\drmk.sys

\SystemRoot\system32\drivers\ksthunk.sys

\SystemRoot\system32\drivers\RTKVHD64.sys

\SystemRoot\System32\Drivers\crashdmp.sys

\SystemRoot\System32\Drivers\dump_diskdump.sys

\SystemRoot\System32\Drivers\dump_iaStorA.sys

\SystemRoot\System32\Drivers\dump_dumpfve.sys

\SystemRoot\system32\DRIVERS\usbccgp.sys

\SystemRoot\System32\Drivers\usbvideo.sys

\SystemRoot\System32\win32k.sys

\SystemRoot\System32\drivers\Dxapi.sys

\SystemRoot\system32\DRIVERS\pgeffect.sys

\SystemRoot\system32\drivers\hidusb.sys

\SystemRoot\system32\drivers\HIDCLASS.SYS

\SystemRoot\system32\drivers\HIDPARSE.SYS

\SystemRoot\system32\DRIVERS\mouhid.sys

\SystemRoot\system32\DRIVERS\monitor.sys

\SystemRoot\System32\TSDDD.dll

\SystemRoot\System32\cdd.dll

\SystemRoot\System32\ATMFD.DLL

\SystemRoot\system32\drivers\luafv.sys

\??\C:\Windows\system32\drivers\aswMonFlt.sys

\??\C:\Windows\system32\drivers\aswFsBlk.sys

\SystemRoot\system32\DRIVERS\PDFsFilter.sys

\SystemRoot\system32\DRIVERS\stflt.sys

\SystemRoot\system32\DRIVERS\lltdio.sys

\SystemRoot\system32\DRIVERS\nwifi.sys

\SystemRoot\system32\DRIVERS\ndisuio.sys

\SystemRoot\system32\DRIVERS\rspndr.sys

\SystemRoot\system32\drivers\HTTP.sys

\SystemRoot\system32\DRIVERS\bowser.sys

\SystemRoot\System32\drivers\mpsdrv.sys

\SystemRoot\system32\DRIVERS\mrxsmb.sys

\SystemRoot\system32\DRIVERS\mrxsmb10.sys

\SystemRoot\system32\DRIVERS\mrxsmb20.sys

\SystemRoot\system32\drivers\peauth.sys

\SystemRoot\System32\Drivers\secdrv.SYS

\SystemRoot\System32\DRIVERS\srvnet.sys

\SystemRoot\System32\drivers\tcpipreg.sys

\SystemRoot\System32\DRIVERS\srv2.sys

\SystemRoot\System32\DRIVERS\srv.sys

\??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys

\SystemRoot\system32\DRIVERS\tap0901.sys

\SystemRoot\system32\DRIVERS\ewusbmdm.sys

\SystemRoot\system32\drivers\WudfPf.sys

\SystemRoot\system32\DRIVERS\asyncmac.sys

\SystemRoot\system32\drivers\modem.sys

\SystemRoot\system32\DRIVERS\USBSTOR.SYS

\SystemRoot\system32\DRIVERS\WUDFRd.sys

\SystemRoot\system32\DRIVERS\cdfs.sys

\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys

\Windows\System32\ntdll.dll

\Windows\System32\smss.exe

\Windows\System32\apisetschema.dll

\Windows\System32\autochk.exe

\Windows\System32\kernel32.dll

\Windows\System32\comdlg32.dll

----------- End -----------

Done!

<<<1>>>

Upper Device Name: \Device\Harddisk1\DR2

Upper Device Object: 0xfffffa8003c7b060

Upper Device Driver Name: \Driver\Disk\

Lower Device Name: \Device\000000a1\

Lower Device Object: 0xfffffa8003c13b60

Lower Device Driver Name: \Driver\USBSTOR\

<<<1>>>

Upper Device Name: \Device\Harddisk0\DR0

Upper Device Object: 0xfffffa8004ced060

Upper Device Driver Name: \Driver\Disk\

Lower Device Name: \Device\00000073\

Lower Device Object: 0xfffffa80049cc8f0

Lower Device Driver Name: \Driver\iaStorA\

<<<2>>>

Physical Sector Size: 512

Drive: 0, DevicePointer: 0xfffffa8004ced060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

--------- Disk Stack ------

DevicePointer: 0xfffffa8004cedb90, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xfffffa8004ced060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

DevicePointer: 0xfffffa8004b838d0, DeviceName: Unknown, DriverName: \Driver\iaStorF\

DevicePointer: 0xfffffa80049cc8f0, DeviceName: \Device\00000073\, DriverName: \Driver\iaStorA\

------------ End ----------

Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

Upper DeviceData: 0x0, 0x0, 0x0

Lower DeviceData: 0x0, 0x0, 0x0

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

<<<2>>>

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...

<<<2>>>

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

Done!

Drive 0

Scanning MBR on drive 0...

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: 40D49AEE
 

Partition information:
 

    Partition 0 type is Primary (0x7)

    Partition is ACTIVE.

    Partition starts at LBA: 2048  Numsec = 204800

    Partition file system is NTFS

    Partition is bootable
 

    Partition 1 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 206848  Numsec = 624932864
 

    Partition 2 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

    Partition 3 type is Empty (0x0)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 0  Numsec = 0
 

Disk Size: 320072933376 bytes

Sector size: 512 bytes
 

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-625122448-625142448)...

Done!

Physical Sector Size: 0

Drive: 1, DevicePointer: 0xfffffa8003c7b060, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\Disk\

--------- Disk Stack ------

DevicePointer: 0xfffffa8003ea5440, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xfffffa8003c7b060, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\Disk\

DevicePointer: 0xfffffa80043f7040, DeviceName: Unknown, DriverName: \Driver\iaStorF\

DevicePointer: 0xfffffa8003c13b60, DeviceName: \Device\000000a1\, DriverName: \Driver\USBSTOR\

------------ End ----------

Scan finished

=======================================
 
 

Removal queue found; removal started

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\Bootstrap_0_0_2048_i.mbam...

Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR_0_r.mbam...

Removal finished

cosinus

17.12.2013 15:58

Bitte trotzdem das richtige Log posten.

lakil

17.12.2013 17:47

Code:



Malwarebytes Anti-Rootkit BETA 1.07.0.1008

www.malwarebytes.org
 

Database version: v2013.12.17.04
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

Wolke :: MY-PC [administrator]
 

17.12.2013 14:38:35

mbar-log-2013-12-17 (14-38-35).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 257072

Time elapsed: 32 minute(s), 34 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

cosinus

17.12.2013 23:04

Ok, MBAR war auch aktuell

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

lakil

18.12.2013 12:23

Danke für die Anleitung aber,
Der such vorgang dauer unendlich lange.
Wann ist er abgeschlossen?>Dialog Zitat:Warte ab.Bitte wählen sie alle Elemente ab,die sie nicht......
Suchen Button im angeklicktem zustand.
In Chrome und Firefox paar einträge gefunden.:kaffee:
unter anderem jondofox was ich natürlich behalten möchte.
soll ich erst den Log. posten?

AdwCleaner Logfile:

Code:

# AdwCleaner v3.015 - Bericht erstellt am 18/12/2013 um 10:56:26

# Updated 10/12/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Wolke - MY-PC

# Gestartet von : C:\Users\Wolke\Desktop\adwcleaner.exe

# Option : Suchen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gefunden : C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Uninstall.exe
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v26.0 (de)
 

[ Datei : C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\3v5oa5hm.default-1387129316960\prefs.js ]
 
 

[ Datei : C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\azpbgbjx.default-1375823728213\prefs.js ]
 
 

[ Datei : C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\hyra7lzh.default\prefs.js ]
 
 

[ Datei : C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\prefs.js ]
 

Zeile gefunden : user_pref("pttl.menu-search-groups-tab", false);

Zeile gefunden : user_pref("pttl.menu-search-groups-win", false);
 

[ Datei : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\5efs59na.default\prefs.js ]
 
 

-\\ Google Chrome v31.0.1650.63
 

[ Datei : C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [17648 octets] - [14/12/2013 20:45:47]

AdwCleaner[R1].txt - [17709 octets] - [14/12/2013 20:53:30]

AdwCleaner[R2].txt - [1416 octets] - [14/12/2013 21:18:17]

AdwCleaner[R3].txt - [1476 octets] - [14/12/2013 21:24:38]

AdwCleaner[R4].txt - [1596 octets] - [14/12/2013 21:35:42]

AdwCleaner[R5].txt - [4743 octets] - [15/12/2013 17:35:24]

AdwCleaner[R6].txt - [1900 octets] - [15/12/2013 18:04:10]

AdwCleaner[R7].txt - [1858 octets] - [15/12/2013 19:32:39]

AdwCleaner[R8].txt - [2240 octets] - [18/12/2013 07:05:34]

AdwCleaner[R9].txt - [1979 octets] - [18/12/2013 10:56:26]

AdwCleaner[S0].txt - [17319 octets] - [14/12/2013 20:59:31]

AdwCleaner[S1].txt - [1537 octets] - [14/12/2013 21:27:31]

AdwCleaner[S2].txt - [4748 octets] - [15/12/2013 17:46:29]
 

########## EOF - C:\AdwCleaner\AdwCleaner[R9].txt - [2220 octets] ##########

--- --- ---

[/CODE]

JRT Logfile:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Home Premium x64

Ran by Wolke on 18.12.2013 at 10:55:36,39

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\sweetim

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\wajam

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0A786B8B-42ED-4861-B82E-23FD4F415524}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\Program Files (x86)\eusing free registry cleaner"

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free registry cleaner"

Successfully deleted: [Folder] "C:\Users\Wolke\AppData\Roaming\microsoft\windows\start menu\programs\free registry cleaner"
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Wolke\AppData\Roaming\mozilla\firefox\profiles\3v5oa5hm.default-1387129316960\prefs.js
 

user_pref("browser.search.defaultenginename", "Ixquick (de)");

user_pref("browser.search.selectedEngine", "Ixquick (de)");
 
 
 

~~~ Chrome
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 18.12.2013 at 11:11:27,61

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

[/CODE]

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 02

Ran by Wolke (administrator) on MY-PC on 18-12-2013 12:08:18

Running from C:\Users\Wolke\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [566184 2010-09-28] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)

HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)

HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)

HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)

HKLM-x32\...\Winlogon: [Userinit] %windows%\system32\userinit.exe, [x]

HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6541592 2013-12-14] (SUPERAntiSpyware)

HKCU\...\Policies\Explorer: [CDRAutoRun] 0

HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1

HKCU\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1

HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 0

HKCU\...\Policies\Explorer: [NoInstrumentation] 1

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

MountPoints2: E - E:\AutoRun.exe

MountPoints2: G - G:\Razor1911_Installer.exe

MountPoints2: H - H:\LaunchU3.exe -a

MountPoints2: {4a603744-ec8e-11e1-9032-4cedde54a1e5} - E:\Setup.exe

MountPoints2: {cd67f712-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f718-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f758-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {d4c29d90-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {d4c29da0-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {dfb72204-d952-11e1-bb50-88ae1dfbb2f1} - G:\LaunchU3.exe -a

HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION)

HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-07-23] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-12] (AVAST Software)

HKLM-x32\...\Run: [KeyScrambler] - C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe [508144 2013-11-14] (QFX Software Corporation)

HKU\Administrator\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKU\Administrator\...\RunOnce: [Application Restart #0] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: http=127.0.0.1:1353;https=127.0.0.1:1353

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2413} URL = 

SearchScopes: HKCU - DefaultScope {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

SearchScopes: HKCU - {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 79.141.167.14 79.141.160.23 67.221.255.31

Tcpip\..\Interfaces\{8C5E4082-505E-4DE7-855A-18FCFC537325}: [NameServer]79.141.160.23,79.141.167.14

Tcpip\..\Interfaces\{EF5DD1A8-4F56-409A-88D4-59E587C57743}: [NameServer]79.141.160.23 79.141.167.14
 

FireFox:

========

FF ProfilePath: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox

FF NewTab: about:blank

FF DefaultSearchEngine: Google DE SSL

FF SelectedSearchEngine: Google DE SSL

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=

FF NetworkProxy: "ftp", "127.0.0.1"

FF NetworkProxy: "ftp_port", 4001

FF NetworkProxy: "gopher", "127.0.0.1"

FF NetworkProxy: "gopher_port", 4001

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 4001

FF NetworkProxy: "socks", "127.0.0.1"

FF NetworkProxy: "socks_port", 4001

FF NetworkProxy: "socks_remote_dns", true

FF NetworkProxy: "ssl", "127.0.0.1"

FF NetworkProxy: "ssl_port", 4001

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo_ff.xml

FF Extension: HTTPS-Everywhere - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org

FF Extension: Flagfox - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

FF Extension: Cookie Monster - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}

FF Extension: firefox - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\firefox@ghostery.com.xpi

FF Extension: preferences - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi

FF Extension: noscript - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: Adblock Plus - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi

FF Extension: No Name - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=412349836a9c47b19aa0f16305762553&tu=10G9y00Au1C01g0&sku=&tstsId=&ver=&", "hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch"

CHR DefaultSearchKeyword: yahoo.com search

CHR DefaultSearchProvider: Yahoo

CHR DefaultSearchURL: hxxp://de.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=198484&p={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Advanced SystemCare 6 Opera Plugin) - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\np_Asc_plugin.dll (IObit)

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File

CHR Plugin: (npAPI Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2.dll No File

CHR Plugin: (npAPI Ghost Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2ghost.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Extension: (HTTPS Everywhere) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2013.10.16_0

CHR Extension: (Ultimate User Agent Switcher, URL sniffer) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljfpjnehmoiabkefmnjegmpdddgcdnpo\0.9.3.3_0

CHR Extension: (Ghostery) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.0.0_0

CHR Extension: (Google Wallet) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (NotScripts) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn\0.9.6_0

CHR Extension: (ScriptSafe) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0

CHR HKLM-x32\...\Chrome\Extension: [aiibjampmlkfkdmgnkholklaechbdanh] - C:\ProgramData\Facebook Profile Viewer\5shja.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-12] (AVAST Software)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 OpenVPNAccessClient; C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [24064 2010-08-12] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-01-14] (Crawler.com)

R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2013-04-25] (WiseCleaner.com)

R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

S2 HPSLPSVC; C:\Users\Wolke\AppData\Local\Temp\7zS0F2C\hpslpsvc64.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-12] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-12] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-12] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-12] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-12] (AVAST Software)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-12] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-12] ()

S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [722488 2000-01-01] (Conexant Systems Inc.)

R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-12-07] (EldoS Corporation)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [27456 2012-07-31] (Intel Corporation)

R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)

S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [89304 2013-12-17] (Malwarebytes Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-02-03] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)

R3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2010-08-03] (The OpenVPN Project)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-07-08] (Spotflux, Inc.)

U4 bdselfpr; 

S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]

S3 MEMSWEEP2; \??\C:\Windows\system32\E37F.tmp [x]

S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-18 12:08 - 2013-12-18 12:08 - 00025275 _____ C:\Users\Wolke\Downloads\FRST.txt

2013-12-18 12:02 - 2013-12-18 12:07 - 01929376 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-18 11:11 - 2013-12-18 11:11 - 00001875 _____ C:\Users\Wolke\Desktop\JRT.txt

2013-12-18 06:52 - 2013-12-18 11:22 - 00001893 _____ C:\Users\Wolke\Desktop\CyberGhost 5.lnk

2013-12-18 06:52 - 2013-12-18 06:59 - 00000000 ____D C:\Users\Wolke\AppData\Local\CyberGhost

2013-12-17 20:27 - 2013-12-17 20:27 - 08611992 _____ (CyberGhost S.R.L.                                           ) C:\Users\Wolke\Downloads\CGWebInstall.exe

2013-12-17 18:53 - 2013-12-17 18:53 - 00000224 _____ C:\Users\Wolke\Desktop\Tom Clancy's H.A.W.X. 2.lnk

2013-12-17 18:49 - 2013-12-17 18:51 - 00018473 _____ C:\Windows\DirectX.log

2013-12-17 18:48 - 2013-12-17 18:48 - 00000643 _____ C:\Windows\KB942288-v3.log

2013-12-17 14:38 - 2013-12-17 15:19 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-17 14:38 - 2013-12-17 14:38 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2013-12-17 12:55 - 2013-12-17 13:00 - 00000000 ____D C:\Program Files\CyberGhost VPN

2013-12-17 12:44 - 2013-12-17 12:44 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll

2013-12-17 12:44 - 2013-12-17 12:44 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2013-12-17 12:04 - 2013-12-17 15:19 - 00000000 ____D C:\Users\Wolke\Desktop\mbar

2013-12-17 12:04 - 2013-12-17 12:04 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-17 12:03 - 2013-12-17 12:04 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Wolke\Desktop\mbar-1.07.0.1008.exe

2013-12-16 21:50 - 2013-12-16 22:00 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 17:38 - 2013-12-18 09:45 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-16 17:38 - 2013-12-18 06:44 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-16 10:53 - 2013-12-16 10:53 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

2013-12-15 23:21 - 2013-12-18 11:54 - 00000000 ____D C:\FRST

2013-12-15 23:08 - 2013-12-18 11:17 - 00000728 _____ C:\Windows\setupact.log

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:07 - 2013-12-18 11:17 - 00007836 _____ C:\Windows\PFRO.log

2013-12-15 23:07 - 2013-12-15 23:08 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 21:02 - 2013-12-16 17:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 18:42 - 2013-12-09 16:14 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:58 - 2013-12-15 16:59 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:54 - 2013-12-15 16:57 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 00:50 - 2013-12-15 01:12 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:41 - 2013-06-29 05:36 - 00003994 _____ C:\Users\Wolke\Documents\vpnbook-euro1-tcp80.ovpn

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:26 - 2013-12-15 00:27 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:53 - 2013-12-18 11:18 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-14 23:53 - 2013-12-17 12:52 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:42 - 2013-12-15 00:00 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:42 - 2013-10-04 22:50 - 00509872 _____ (Ask Partner Network) C:\Users\Wolke\Documents\APNSetup.exe

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 23:21 - 2013-05-31 15:53 - 00222200 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:26 - 2013-08-29 12:07 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-12-14 22:26 - 2013-08-29 12:07 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-12-14 22:26 - 2013-08-29 12:07 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll

2013-12-14 22:25 - 2013-12-14 22:26 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-12-14 22:19 - 2013-12-14 22:43 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:45 - 2013-12-18 10:57 - 00000000 ____D C:\AdwCleaner

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 17:18 - 2013-12-14 17:21 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:18 - 2013-12-14 17:19 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-17 12:44 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 16:59 - 2013-12-14 17:14 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:29 - 2013-12-14 15:30 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 11:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-14 11:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-14 11:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-14 11:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-14 11:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-14 11:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-14 11:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-14 11:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-14 11:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-14 11:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-14 11:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-14 11:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-14 11:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-14 11:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-14 11:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-14 11:52 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-12-03 10:01 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-11 07:50 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 07:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 07:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 07:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 07:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 07:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 07:32 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 07:32 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 07:32 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 07:32 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 07:30 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 07:30 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 07:30 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 07:30 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:57 - 2013-12-04 12:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:55 - 2013-12-17 12:46 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:54 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 12:52 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-12-04 12:52 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-02 23:10 - 2013-12-02 23:10 - 00000779 _____ C:\Users\Public\Desktop\World of Tanks.lnk

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-14 18:52 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-17 12:27 - 00000000 ____D C:\ProgramData\ProductData

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:00 - 2013-12-14 18:30 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 21:47 - 2013-12-01 21:56 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:33 - 00000818 _____ C:\Users\Public\Desktop\World of Warplanes.lnk

2013-12-01 18:32 - 2013-12-01 18:33 - 08988024 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:14 - 2013-11-30 16:19 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:37 - 2013-12-18 06:45 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\Drivers\npf.sys

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe
 

==================== One Month Modified Files and Folders =======
 

2013-12-18 12:08 - 2013-12-18 12:08 - 00025275 _____ C:\Users\Wolke\Downloads\FRST.txt

2013-12-18 12:07 - 2013-12-18 12:02 - 01929376 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-18 12:00 - 2013-05-20 20:16 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-18 11:54 - 2013-12-15 23:21 - 00000000 ____D C:\FRST

2013-12-18 11:26 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-18 11:26 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-18 11:20 - 2013-10-15 09:49 - 01131342 _____ C:\Windows\WindowsUpdate.log

2013-12-18 11:20 - 2013-03-25 16:00 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-12-18 11:19 - 2013-05-20 20:16 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-18 11:19 - 2012-08-01 11:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\BitTorrent

2013-12-18 11:18 - 2013-12-14 23:53 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-18 11:18 - 2013-01-04 19:59 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Wise Care 365

2013-12-18 11:17 - 2013-12-15 23:08 - 00000728 _____ C:\Windows\setupact.log

2013-12-18 11:17 - 2013-12-15 23:07 - 00007836 _____ C:\Windows\PFRO.log

2013-12-18 11:17 - 2013-09-12 18:10 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2013-12-18 11:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-18 11:11 - 2013-12-18 11:11 - 00001875 _____ C:\Users\Wolke\Desktop\JRT.txt

2013-12-18 11:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing

2013-12-18 10:57 - 2013-12-14 20:45 - 00000000 ____D C:\AdwCleaner

2013-12-18 09:45 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-18 06:45 - 2013-11-26 14:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-12-18 06:44 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-17 19:07 - 2011-04-12 08:43 - 00700720 _____ C:\Windows\system32\perfh007.dat

2013-12-17 19:07 - 2011-04-12 08:43 - 00150326 _____ C:\Windows\system32\perfc007.dat

2013-12-17 19:07 - 2009-07-14 06:13 - 01624106 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-17 18:53 - 2013-12-17 18:53 - 00000224 _____ C:\Users\Wolke\Desktop\Tom Clancy's H.A.W.X. 2.lnk

2013-12-17 18:51 - 2013-12-17 18:49 - 00018473 _____ C:\Windows\DirectX.log

2013-12-17 18:48 - 2013-12-17 18:48 - 00000643 _____ C:\Windows\KB942288-v3.log

2013-12-17 18:33 - 2012-07-28 14:25 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-17 18:33 - 2012-07-27 16:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-12-17 15:19 - 2013-12-17 14:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-17 15:19 - 2013-12-17 12:04 - 00000000 ____D C:\Users\Wolke\Desktop\mbar

2013-12-17 14:48 - 2013-10-13 09:24 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit

2013-12-17 14:38 - 2013-12-17 14:38 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2013-12-17 12:52 - 2013-12-14 23:53 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-17 12:46 - 2013-12-04 12:55 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-17 12:44 - 2013-12-17 12:44 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll

2013-12-17 12:44 - 2013-12-17 12:44 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2013-12-17 12:44 - 2013-12-14 17:17 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-17 12:27 - 2013-12-01 22:02 - 00000000 ____D C:\ProgramData\ProductData

2013-12-17 12:04 - 2013-12-17 12:04 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-17 12:04 - 2013-12-17 12:03 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Wolke\Desktop\mbar-1.07.0.1008.exe

2013-12-17 10:46 - 2013-08-16 19:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\PrivaZer

2013-12-16 22:00 - 2013-12-16 21:50 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 20:55 - 2012-10-30 07:45 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-12-16 20:49 - 2012-08-13 17:34 - 00000000 ____D C:\Windows\Minidump

2013-12-16 20:49 - 2012-07-27 15:49 - 00287020 ____N C:\Windows\Minidump\121613-32541-01.dmp

2013-12-16 20:13 - 2013-05-21 12:28 - 00000000 ____D C:\Program Files\PeerBlock

2013-12-16 19:02 - 2013-02-03 11:30 - 00000000 ____D C:\ProgramData\Spyware Terminator

2013-12-16 18:05 - 2012-07-27 15:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\VirtualStore

2013-12-16 17:56 - 2013-12-15 21:02 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-15 23:21 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:08 - 2013-12-15 23:07 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 23:02 - 2012-07-27 15:54 - 00000000 ____D C:\Users\Wolke

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 20:48 - 2013-11-12 10:32 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-12-15 20:34 - 2013-07-07 15:25 - 00000000 ____D C:\Users\Wolke\AppData\Local\Windows Live

2013-12-15 20:33 - 2013-07-07 15:33 - 00000000 ____D C:\Windows\de

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:12 - 2012-11-20 11:31 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Winamp

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 20:02 - 2013-06-11 11:45 - 00001041 _____ C:\Users\Wolke\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 19:58 - 2012-07-27 16:48 - 00000000 ____D C:\Windows\Panther

2013-12-15 19:57 - 2013-01-22 19:23 - 00000000 ____D C:\Users\Wolke\AppData\Local\CrashDumps

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:59 - 2013-12-15 16:58 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:58 - 2013-07-17 08:45 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\DVDVideoSoft

2013-12-15 16:57 - 2013-12-15 16:54 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 15:18 - 2013-03-02 23:13 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ____D C:\ProgramData\Skype

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 01:12 - 2013-12-15 00:50 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:27 - 2013-12-15 00:26 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-15 00:00 - 2013-12-14 23:42 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:43 - 2013-12-14 22:19 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 20:59 - 2012-08-15 13:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\CheckPoint

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 18:52 - 2013-12-02 00:31 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-14 18:30 - 2013-12-01 22:00 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-14 17:21 - 2013-12-14 17:18 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:19 - 2013-12-14 17:18 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 17:14 - 2013-12-14 16:59 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:30 - 2013-12-14 15:29 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 13:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-13 13:18 - 2013-07-13 00:22 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\vlc

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 09:05 - 2013-01-21 17:58 - 00000000 ____D C:\ProgramData\iolo

2013-12-13 09:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:48 - 2013-07-19 19:29 - 00000000 ____D C:\Windows\system32\MRT

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-01-21 18:00 - 00001395 _____ C:\Users\Wolke\Desktop\System Mechanic.lnk

2013-12-13 08:44 - 2012-07-27 17:41 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-12 09:10 - 2013-05-02 10:12 - 00000402 _____ C:\Windows\Tasks\Wise Turbo Checker.job

2013-12-10 23:02 - 2013-11-12 10:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-09 16:14 - 2013-12-15 18:42 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-08 20:30 - 2013-08-14 21:00 - 00000000 ____D C:\Users\Public\Documents\My Projects

2013-12-08 19:55 - 2013-05-20 20:16 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-08 19:55 - 2013-05-20 20:16 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-07 16:30 - 2012-07-27 18:09 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-12-07 16:30 - 2012-07-27 18:09 - 00000000 ____D C:\Program Files\CCleaner

2013-12-05 10:10 - 2013-05-20 20:20 - 00002531 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:58 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:52 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-03 10:47 - 2013-01-21 18:00 - 00057584 _____ (iolo technologies, LLC) C:\Windows\system32\iolobtdfg.exe

2013-12-03 10:47 - 2013-01-21 18:00 - 00026184 _____ (iolo technologies, LLC) C:\Windows\system32\smrgdf.exe

2013-12-03 10:01 - 2013-12-13 08:46 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-03 10:01 - 2013-01-21 18:00 - 02097984 _____ (iolo technologies, LLC) C:\Windows\SysWOW64\Incinerator32.dll

2013-12-02 23:11 - 2012-08-24 09:30 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-12-02 23:10 - 2013-06-27 09:25 - 00000000 ____D C:\Games

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:10 - 2013-10-14 11:05 - 844549621 _____ C:\Users\Wolke\Downloads\Emma und Cony im Sperma Labyrinth_26539.mp4

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 18:33 - 2013-05-04 13:48 - 00012257 _____ C:\Windows\wininit.ini

2013-12-02 17:35 - 2012-07-31 13:10 - 00000000 ____D C:\ProgramData\SecTaskMan

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:02 - 2013-06-14 16:02 - 00000000 ____D C:\Program Files (x86)\IObit

2013-12-01 22:02 - 2012-08-26 15:09 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\IObit

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 22:00 - 2012-11-14 11:32 - 00000000 ____D C:\ProgramData\IObit

2013-12-01 21:56 - 2013-12-01 21:47 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:33 - 00000818 _____ C:\Users\Public\Desktop\World of Warplanes.lnk

2013-12-01 18:33 - 2013-12-01 18:32 - 08988024 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-12-01 13:34 - 2013-03-03 20:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Adobe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:19 - 2013-11-30 16:14 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-30 16:13 - 2012-07-27 18:13 - 01598386 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-30 01:56 - 2013-08-10 09:18 - 00000094 _____ C:\Users\Wolke\AppData\Roaming\WB.CFG

2013-11-30 01:56 - 2013-06-17 21:56 - 00000006 _____ C:\Users\Wolke\AppData\Roaming\WBPU-TTL.DAT

2013-11-28 21:31 - 2013-09-01 18:05 - 00000000 ____D C:\Program Files (x86)\PrivaZer

2013-11-28 21:31 - 2013-08-16 19:56 - 00001851 _____ C:\Users\Public\Desktop\PrivaZer.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-26 12:54 - 2013-12-14 11:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-14 11:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-14 11:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-14 11:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-14 11:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-14 11:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-14 11:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-14 11:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-14 11:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-14 11:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-14 11:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-14 11:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-14 11:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-14 11:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-14 11:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-14 11:52 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-14 11:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-14 11:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-14 11:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-14 11:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-14 11:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-14 11:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-14 11:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-14 11:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 08:03 - 2013-10-20 18:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\medion

2013-11-26 07:40 - 2013-12-14 11:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-14 11:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-14 11:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-23 19:26 - 2013-12-11 07:34 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 07:34 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-21 09:33 - 2013-10-31 16:40 - 00000000 ____D C:\Users\Wolke\AppData\Local\Microsoft Games

2013-11-21 08:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe

2013-11-19 03:33 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 

Some content of TEMP:

====================

C:\Users\Wolke\AppData\Local\Temp\detectionapi_rd.dll

C:\Users\Wolke\AppData\Local\Temp\detectionui_r.exe

C:\Users\Wolke\AppData\Local\Temp\directx10tests_rd.dll

C:\Users\Wolke\AppData\Local\Temp\directx11tests_rd.dll

C:\Users\Wolke\AppData\Local\Temp\directx9tests_rd.dll

C:\Users\Wolke\AppData\Local\Temp\local.dll

C:\Users\Wolke\AppData\Local\Temp\ubiBD8B.tmp.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-10 20:16
 

==================== End Of Log ============================

--- --- ---

--- --- ---

lakil

18.12.2013 12:24

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 02

Ran by Wolke (administrator) on MY-PC on 18-12-2013 12:08:18

Running from C:\Users\Wolke\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [566184 2010-09-28] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)

HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)

HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)

HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)

HKLM-x32\...\Winlogon: [Userinit] %windows%\system32\userinit.exe, [x]

HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6541592 2013-12-14] (SUPERAntiSpyware)

HKCU\...\Policies\Explorer: [CDRAutoRun] 0

HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1

HKCU\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1

HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 0

HKCU\...\Policies\Explorer: [NoInstrumentation] 1

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

MountPoints2: E - E:\AutoRun.exe

MountPoints2: G - G:\Razor1911_Installer.exe

MountPoints2: H - H:\LaunchU3.exe -a

MountPoints2: {4a603744-ec8e-11e1-9032-4cedde54a1e5} - E:\Setup.exe

MountPoints2: {cd67f712-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f718-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f758-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {d4c29d90-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {d4c29da0-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {dfb72204-d952-11e1-bb50-88ae1dfbb2f1} - G:\LaunchU3.exe -a

HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION)

HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-07-23] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-12] (AVAST Software)

HKLM-x32\...\Run: [KeyScrambler] - C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe [508144 2013-11-14] (QFX Software Corporation)

HKU\Administrator\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKU\Administrator\...\RunOnce: [Application Restart #0] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: http=127.0.0.1:1353;https=127.0.0.1:1353

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2413} URL = 

SearchScopes: HKCU - DefaultScope {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

SearchScopes: HKCU - {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 79.141.167.14 79.141.160.23 67.221.255.31

Tcpip\..\Interfaces\{8C5E4082-505E-4DE7-855A-18FCFC537325}: [NameServer]79.141.160.23,79.141.167.14

Tcpip\..\Interfaces\{EF5DD1A8-4F56-409A-88D4-59E587C57743}: [NameServer]79.141.160.23 79.141.167.14
 

FireFox:

========

FF ProfilePath: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox

FF NewTab: about:blank

FF DefaultSearchEngine: Google DE SSL

FF SelectedSearchEngine: Google DE SSL

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=

FF NetworkProxy: "ftp", "127.0.0.1"

FF NetworkProxy: "ftp_port", 4001

FF NetworkProxy: "gopher", "127.0.0.1"

FF NetworkProxy: "gopher_port", 4001

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 4001

FF NetworkProxy: "socks", "127.0.0.1"

FF NetworkProxy: "socks_port", 4001

FF NetworkProxy: "socks_remote_dns", true

FF NetworkProxy: "ssl", "127.0.0.1"

FF NetworkProxy: "ssl_port", 4001

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo_ff.xml

FF Extension: HTTPS-Everywhere - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org

FF Extension: Flagfox - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

FF Extension: Cookie Monster - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}

FF Extension: firefox - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\firefox@ghostery.com.xpi

FF Extension: preferences - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi

FF Extension: noscript - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: Adblock Plus - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: No Name - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi

FF Extension: No Name - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=412349836a9c47b19aa0f16305762553&tu=10G9y00Au1C01g0&sku=&tstsId=&ver=&", "hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch"

CHR DefaultSearchKeyword: yahoo.com search

CHR DefaultSearchProvider: Yahoo

CHR DefaultSearchURL: hxxp://de.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=198484&p={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Advanced SystemCare 6 Opera Plugin) - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\np_Asc_plugin.dll (IObit)

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File

CHR Plugin: (npAPI Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2.dll No File

CHR Plugin: (npAPI Ghost Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2ghost.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Extension: (HTTPS Everywhere) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2013.10.16_0

CHR Extension: (Ultimate User Agent Switcher, URL sniffer) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljfpjnehmoiabkefmnjegmpdddgcdnpo\0.9.3.3_0

CHR Extension: (Ghostery) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.0.0_0

CHR Extension: (Google Wallet) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (NotScripts) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn\0.9.6_0

CHR Extension: (ScriptSafe) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0

CHR HKLM-x32\...\Chrome\Extension: [aiibjampmlkfkdmgnkholklaechbdanh] - C:\ProgramData\Facebook Profile Viewer\5shja.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-12] (AVAST Software)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 OpenVPNAccessClient; C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [24064 2010-08-12] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-01-14] (Crawler.com)

R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2013-04-25] (WiseCleaner.com)

R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

S2 HPSLPSVC; C:\Users\Wolke\AppData\Local\Temp\7zS0F2C\hpslpsvc64.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-12] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-12] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-12] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-12] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-12] (AVAST Software)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-12] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-12] ()

S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [722488 2000-01-01] (Conexant Systems Inc.)

R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-12-07] (EldoS Corporation)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [27456 2012-07-31] (Intel Corporation)

R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)

S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [89304 2013-12-17] (Malwarebytes Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-02-03] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)

R3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2010-08-03] (The OpenVPN Project)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-07-08] (Spotflux, Inc.)

U4 bdselfpr; 

S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]

S3 MEMSWEEP2; \??\C:\Windows\system32\E37F.tmp [x]

S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-18 12:08 - 2013-12-18 12:08 - 00025275 _____ C:\Users\Wolke\Downloads\FRST.txt

2013-12-18 12:02 - 2013-12-18 12:07 - 01929376 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-18 11:11 - 2013-12-18 11:11 - 00001875 _____ C:\Users\Wolke\Desktop\JRT.txt

2013-12-18 06:52 - 2013-12-18 11:22 - 00001893 _____ C:\Users\Wolke\Desktop\CyberGhost 5.lnk

2013-12-18 06:52 - 2013-12-18 06:59 - 00000000 ____D C:\Users\Wolke\AppData\Local\CyberGhost

2013-12-17 20:27 - 2013-12-17 20:27 - 08611992 _____ (CyberGhost S.R.L.                                           ) C:\Users\Wolke\Downloads\CGWebInstall.exe

2013-12-17 18:53 - 2013-12-17 18:53 - 00000224 _____ C:\Users\Wolke\Desktop\Tom Clancy's H.A.W.X. 2.lnk

2013-12-17 18:49 - 2013-12-17 18:51 - 00018473 _____ C:\Windows\DirectX.log

2013-12-17 18:48 - 2013-12-17 18:48 - 00000643 _____ C:\Windows\KB942288-v3.log

2013-12-17 14:38 - 2013-12-17 15:19 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-17 14:38 - 2013-12-17 14:38 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2013-12-17 12:55 - 2013-12-17 13:00 - 00000000 ____D C:\Program Files\CyberGhost VPN

2013-12-17 12:44 - 2013-12-17 12:44 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll

2013-12-17 12:44 - 2013-12-17 12:44 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2013-12-17 12:04 - 2013-12-17 15:19 - 00000000 ____D C:\Users\Wolke\Desktop\mbar

2013-12-17 12:04 - 2013-12-17 12:04 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-17 12:03 - 2013-12-17 12:04 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Wolke\Desktop\mbar-1.07.0.1008.exe

2013-12-16 21:50 - 2013-12-16 22:00 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 17:38 - 2013-12-18 09:45 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-16 17:38 - 2013-12-18 06:44 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-16 10:53 - 2013-12-16 10:53 - 00002770 _____ C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

2013-12-15 23:21 - 2013-12-18 11:54 - 00000000 ____D C:\FRST

2013-12-15 23:08 - 2013-12-18 11:17 - 00000728 _____ C:\Windows\setupact.log

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:07 - 2013-12-18 11:17 - 00007836 _____ C:\Windows\PFRO.log

2013-12-15 23:07 - 2013-12-15 23:08 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 21:02 - 2013-12-16 17:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 18:42 - 2013-12-09 16:14 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:58 - 2013-12-15 16:59 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:54 - 2013-12-15 16:57 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 00:50 - 2013-12-15 01:12 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:41 - 2013-06-29 05:36 - 00003994 _____ C:\Users\Wolke\Documents\vpnbook-euro1-tcp80.ovpn

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:26 - 2013-12-15 00:27 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:53 - 2013-12-18 11:18 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-14 23:53 - 2013-12-17 12:52 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:42 - 2013-12-15 00:00 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:42 - 2013-10-04 22:50 - 00509872 _____ (Ask Partner Network) C:\Users\Wolke\Documents\APNSetup.exe

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 23:21 - 2013-05-31 15:53 - 00222200 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:26 - 2013-08-29 12:07 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-12-14 22:26 - 2013-08-29 12:07 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-12-14 22:26 - 2013-08-29 12:07 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll

2013-12-14 22:25 - 2013-12-14 22:26 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014

2013-12-14 22:19 - 2013-12-14 22:43 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:45 - 2013-12-18 10:57 - 00000000 ____D C:\AdwCleaner

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 17:18 - 2013-12-14 17:21 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:18 - 2013-12-14 17:19 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-17 12:44 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 16:59 - 2013-12-14 17:14 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:29 - 2013-12-14 15:30 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 11:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-14 11:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-14 11:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-14 11:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-14 11:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-14 11:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-14 11:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-14 11:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-14 11:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-14 11:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-14 11:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-14 11:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-14 11:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-14 11:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-14 11:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-14 11:52 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-12-03 10:01 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-11 07:50 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 07:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 07:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 07:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 07:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 07:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 07:32 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 07:32 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 07:32 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 07:32 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 07:30 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 07:30 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 07:30 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 07:30 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:57 - 2013-12-04 12:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:55 - 2013-12-17 12:46 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:54 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 12:52 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-12-04 12:52 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-02 23:10 - 2013-12-02 23:10 - 00000779 _____ C:\Users\Public\Desktop\World of Tanks.lnk

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-14 18:52 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-17 12:27 - 00000000 ____D C:\ProgramData\ProductData

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:00 - 2013-12-14 18:30 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 21:47 - 2013-12-01 21:56 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:33 - 00000818 _____ C:\Users\Public\Desktop\World of Warplanes.lnk

2013-12-01 18:32 - 2013-12-01 18:33 - 08988024 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:14 - 2013-11-30 16:19 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:37 - 2013-12-18 06:45 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\Drivers\npf.sys

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe
 

==================== One Month Modified Files and Folders =======
 

2013-12-18 12:08 - 2013-12-18 12:08 - 00025275 _____ C:\Users\Wolke\Downloads\FRST.txt

2013-12-18 12:07 - 2013-12-18 12:02 - 01929376 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-18 12:00 - 2013-05-20 20:16 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-18 11:54 - 2013-12-15 23:21 - 00000000 ____D C:\FRST

2013-12-18 11:26 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-18 11:26 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-18 11:20 - 2013-10-15 09:49 - 01131342 _____ C:\Windows\WindowsUpdate.log

2013-12-18 11:20 - 2013-03-25 16:00 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-12-18 11:19 - 2013-05-20 20:16 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-18 11:19 - 2012-08-01 11:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\BitTorrent

2013-12-18 11:18 - 2013-12-14 23:53 - 00000508 _____ C:\Windows\Tasks\Malwarebytes Anti-Exploit.job

2013-12-18 11:18 - 2013-01-04 19:59 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Wise Care 365

2013-12-18 11:17 - 2013-12-15 23:08 - 00000728 _____ C:\Windows\setupact.log

2013-12-18 11:17 - 2013-12-15 23:07 - 00007836 _____ C:\Windows\PFRO.log

2013-12-18 11:17 - 2013-09-12 18:10 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2013-12-18 11:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-18 11:11 - 2013-12-18 11:11 - 00001875 _____ C:\Users\Wolke\Desktop\JRT.txt

2013-12-18 11:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing

2013-12-18 10:57 - 2013-12-14 20:45 - 00000000 ____D C:\AdwCleaner

2013-12-18 09:45 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-18 06:45 - 2013-11-26 14:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-12-18 06:44 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-17 19:07 - 2011-04-12 08:43 - 00700720 _____ C:\Windows\system32\perfh007.dat

2013-12-17 19:07 - 2011-04-12 08:43 - 00150326 _____ C:\Windows\system32\perfc007.dat

2013-12-17 19:07 - 2009-07-14 06:13 - 01624106 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-17 18:53 - 2013-12-17 18:53 - 00000224 _____ C:\Users\Wolke\Desktop\Tom Clancy's H.A.W.X. 2.lnk

2013-12-17 18:51 - 2013-12-17 18:49 - 00018473 _____ C:\Windows\DirectX.log

2013-12-17 18:48 - 2013-12-17 18:48 - 00000643 _____ C:\Windows\KB942288-v3.log

2013-12-17 18:33 - 2012-07-28 14:25 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-17 18:33 - 2012-07-27 16:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-12-17 15:19 - 2013-12-17 14:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-17 15:19 - 2013-12-17 12:04 - 00000000 ____D C:\Users\Wolke\Desktop\mbar

2013-12-17 14:48 - 2013-10-13 09:24 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit

2013-12-17 14:38 - 2013-12-17 14:38 - 00117464 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2013-12-17 12:52 - 2013-12-14 23:53 - 00002998 _____ C:\Windows\System32\Tasks\Malwarebytes Anti-Exploit

2013-12-17 12:46 - 2013-12-04 12:55 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-17 12:44 - 2013-12-17 12:44 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll

2013-12-17 12:44 - 2013-12-17 12:44 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2013-12-17 12:44 - 2013-12-14 17:17 - 00000000 ____D C:\Program Files (x86)\Comodo

2013-12-17 12:27 - 2013-12-01 22:02 - 00000000 ____D C:\ProgramData\ProductData

2013-12-17 12:04 - 2013-12-17 12:04 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-17 12:04 - 2013-12-17 12:03 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Wolke\Desktop\mbar-1.07.0.1008.exe

2013-12-17 10:46 - 2013-08-16 19:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\PrivaZer

2013-12-16 22:00 - 2013-12-16 21:50 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 20:55 - 2012-10-30 07:45 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-12-16 20:49 - 2012-08-13 17:34 - 00000000 ____D C:\Windows\Minidump

2013-12-16 20:49 - 2012-07-27 15:49 - 00287020 ____N C:\Windows\Minidump\121613-32541-01.dmp

2013-12-16 20:13 - 2013-05-21 12:28 - 00000000 ____D C:\Program Files\PeerBlock

2013-12-16 19:02 - 2013-02-03 11:30 - 00000000 ____D C:\ProgramData\Spyware Terminator

2013-12-16 18:05 - 2012-07-27 15:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\VirtualStore

2013-12-16 17:56 - 2013-12-15 21:02 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-15 23:21 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default

2013-12-15 23:08 - 2013-12-15 23:08 - 00000000 _____ C:\Windows\setuperr.log

2013-12-15 23:08 - 2013-12-15 23:07 - 00349544 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 23:02 - 2012-07-27 15:54 - 00000000 ____D C:\Users\Wolke

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:57 - 2013-12-15 22:57 - 00050477 _____ C:\Users\Wolke\Desktop\Defogger.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 21:02 - 2013-12-15 21:02 - 00092120 _____ C:\Users\Wolke\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-15 20:48 - 2013-11-12 10:32 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-12-15 20:34 - 2013-07-07 15:25 - 00000000 ____D C:\Users\Wolke\AppData\Local\Windows Live

2013-12-15 20:33 - 2013-07-07 15:33 - 00000000 ____D C:\Windows\de

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:12 - 2012-11-20 11:31 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Winamp

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 20:02 - 2013-06-11 11:45 - 00001041 _____ C:\Users\Wolke\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 19:58 - 2012-07-27 16:48 - 00000000 ____D C:\Windows\Panther

2013-12-15 19:57 - 2013-01-22 19:23 - 00000000 ____D C:\Users\Wolke\AppData\Local\CrashDumps

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:59 - 2013-12-15 16:58 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:58 - 2013-07-17 08:45 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\DVDVideoSoft

2013-12-15 16:57 - 2013-12-15 16:54 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 15:18 - 2013-03-02 23:13 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ____D C:\ProgramData\Skype

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\Wolke\Documents\hosts.txt

2013-12-15 01:12 - 2013-12-15 00:50 - 00000000 ____D C:\Users\Wolke\Desktop\VPN

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\Wolke\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:27 - 2013-12-15 00:26 - 16289280 _____ C:\Users\Wolke\Downloads\openvpn-client.msi

2013-12-15 00:00 - 2013-12-14 23:42 - 00000000 ____D C:\Program Files (x86)\HideIPEasy

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:26 - 2013-12-14 23:26 - 02527496 _____ (Abine Inc                                                   ) C:\Users\Wolke\Downloads\dntp-cnet-ie.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 22:57 - 2013-12-14 22:57 - 00003408 ____N C:\bootsqm.dat

2013-12-14 22:43 - 2013-12-14 22:19 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 20:59 - 2012-08-15 13:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\CheckPoint

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:44 - 2013-12-14 20:44 - 01226802 _____ C:\Users\Wolke\Desktop\adwcleaner.exe

2013-12-14 18:52 - 2013-12-02 00:31 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-14 18:30 - 2013-12-01 22:00 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-14 17:21 - 2013-12-14 17:18 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:19 - 2013-12-14 17:18 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 17:14 - 2013-12-14 16:59 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:30 - 2013-12-14 15:29 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 13:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-13 13:18 - 2013-07-13 00:22 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\vlc

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 09:05 - 2013-01-21 17:58 - 00000000 ____D C:\ProgramData\iolo

2013-12-13 09:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:48 - 2013-07-19 19:29 - 00000000 ____D C:\Windows\system32\MRT

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-01-21 18:00 - 00001395 _____ C:\Users\Wolke\Desktop\System Mechanic.lnk

2013-12-13 08:44 - 2012-07-27 17:41 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-12 09:10 - 2013-05-02 10:12 - 00000402 _____ C:\Windows\Tasks\Wise Turbo Checker.job

2013-12-10 23:02 - 2013-11-12 10:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-09 16:14 - 2013-12-15 18:42 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-08 20:30 - 2013-08-14 21:00 - 00000000 ____D C:\Users\Public\Documents\My Projects

2013-12-08 19:55 - 2013-05-20 20:16 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-08 19:55 - 2013-05-20 20:16 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-07 16:30 - 2012-07-27 18:09 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-12-07 16:30 - 2012-07-27 18:09 - 00000000 ____D C:\Program Files\CCleaner

2013-12-05 10:10 - 2013-05-20 20:20 - 00002531 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:58 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:52 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-03 10:47 - 2013-01-21 18:00 - 00057584 _____ (iolo technologies, LLC) C:\Windows\system32\iolobtdfg.exe

2013-12-03 10:47 - 2013-01-21 18:00 - 00026184 _____ (iolo technologies, LLC) C:\Windows\system32\smrgdf.exe

2013-12-03 10:01 - 2013-12-13 08:46 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-03 10:01 - 2013-01-21 18:00 - 02097984 _____ (iolo technologies, LLC) C:\Windows\SysWOW64\Incinerator32.dll

2013-12-02 23:11 - 2012-08-24 09:30 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-12-02 23:10 - 2013-06-27 09:25 - 00000000 ____D C:\Games

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:10 - 2013-10-14 11:05 - 844549621 _____ C:\Users\Wolke\Downloads\Emma und Cony im Sperma Labyrinth_26539.mp4

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 18:33 - 2013-05-04 13:48 - 00012257 _____ C:\Windows\wininit.ini

2013-12-02 17:35 - 2012-07-31 13:10 - 00000000 ____D C:\ProgramData\SecTaskMan

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:02 - 2013-06-14 16:02 - 00000000 ____D C:\Program Files (x86)\IObit

2013-12-01 22:02 - 2012-08-26 15:09 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\IObit

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 22:00 - 2012-11-14 11:32 - 00000000 ____D C:\ProgramData\IObit

2013-12-01 21:56 - 2013-12-01 21:47 - 34466768 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:33 - 00000818 _____ C:\Users\Public\Desktop\World of Warplanes.lnk

2013-12-01 18:33 - 2013-12-01 18:32 - 08988024 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoWP_internet_install_eu.exe

2013-12-01 13:34 - 2013-03-03 20:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Adobe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\Wolke\Downloads\edit.wmv

2013-11-30 16:39 - 2013-11-30 16:39 - 00985600 _____ C:\Users\Wolke\Downloads\MicrosoftFixit50123.msi

2013-11-30 16:19 - 2013-11-30 16:14 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-30 16:13 - 2012-07-27 18:13 - 01598386 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-30 01:56 - 2013-08-10 09:18 - 00000094 _____ C:\Users\Wolke\AppData\Roaming\WB.CFG

2013-11-30 01:56 - 2013-06-17 21:56 - 00000006 _____ C:\Users\Wolke\AppData\Roaming\WBPU-TTL.DAT

2013-11-28 21:31 - 2013-09-01 18:05 - 00000000 ____D C:\Program Files (x86)\PrivaZer

2013-11-28 21:31 - 2013-08-16 19:56 - 00001851 _____ C:\Users\Public\Desktop\PrivaZer.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-26 12:54 - 2013-12-14 11:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-14 11:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-14 11:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-14 11:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-14 11:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-14 11:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-14 11:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-14 11:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-14 11:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-14 11:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-14 11:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-14 11:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-14 11:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-14 11:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-14 11:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-14 11:52 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-14 11:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-14 11:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-14 11:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-14 11:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-14 11:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-14 11:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-14 11:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-14 11:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 08:03 - 2013-10-20 18:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\medion

2013-11-26 07:40 - 2013-12-14 11:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-14 11:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-14 11:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-23 19:26 - 2013-12-11 07:34 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 07:34 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-21 09:33 - 2013-10-31 16:40 - 00000000 ____D C:\Users\Wolke\AppData\Local\Microsoft Games

2013-11-21 08:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-11-20 21:39 - 2013-11-20 21:39 - 00347304 _____ (Microsoft Corporation) C:\Users\Wolke\Downloads\MicrosoftFixit.WinSecurity.Run.exe

2013-11-19 03:33 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 

Some content of TEMP:

====================

C:\Users\Wolke\AppData\Local\Temp\detectionapi_rd.dll

C:\Users\Wolke\AppData\Local\Temp\detectionui_r.exe

C:\Users\Wolke\AppData\Local\Temp\directx10tests_rd.dll

C:\Users\Wolke\AppData\Local\Temp\directx11tests_rd.dll

C:\Users\Wolke\AppData\Local\Temp\directx9tests_rd.dll

C:\Users\Wolke\AppData\Local\Temp\local.dll

C:\Users\Wolke\AppData\Local\Temp\ubiBD8B.tmp.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-10 20:16
 

==================== End Of Log ============================

--- --- ---

[/CODE]

cosinus

18.12.2013 13:44

Du hast 2x dasselbe Log gepostet. Bitte die neue additions.txt nachreichen

lakil

18.12.2013 14:49

Code:



==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-04-14 22:31 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {07E0090C-042A-4FF5-A123-9D28761DDC37} - System32\Tasks\{4259E698-0EAE-4388-B42C-86F91FF49F20} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {0F272DD7-5149-4663-A06D-01D62BFC046F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {286D0DDA-0C1D-42E8-A262-49CDA84A3ED4} - System32\Tasks\Pointstone\System Cleaner\Startup Dialog => C:\Program Files (x86)\Pointstone\System Cleaner 7\Helper.exe

Task: {2BF90F22-2435-4F5D-93F6-629C720F25FE} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

Task: {403A2650-A617-49E0-B410-CABEA9E347DD} - System32\Tasks\{996830C2-66C4-4C0C-BB9D-C43C5FEC202D} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {537C03F3-BB91-4D75-94A3-596785E3D9CA} - System32\Tasks\{944B9192-41AB-4674-9384-5EEFA0886B8A} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {5C5DF0FC-4C4C-44DA-A0A6-F37CB80CFA10} - System32\Tasks\{81607F8B-DCE4-401E-9A39-A64D15BB2225} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {67607FD3-61CD-4122-B49D-42E738C3002E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3583547410-2317155067-1929240655-1000

Task: {677C707B-1A32-48F5-B49C-9BE32D860E7A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)

Task: {6C43EEA9-587F-47BD-9326-1A8621B029EC} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)

Task: {789AF10D-80DA-47C7-A019-473DDB792733} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-06-03] (TOSHIBA CORPORATION)

Task: {8C097928-E444-430E-AFBC-D84A47246952} - System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {9A2A51EA-B167-422D-BE24-9422C74727FE} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe [2013-12-03] (iolo technologies, LLC)

Task: {A3D1F86F-2BDC-4248-9E8D-4DF5F3F80926} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {A8287ACD-892E-435D-A994-B0D8C9D7E6D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {C52EB4D8-7E5A-4D10-96A3-F88CD05B9BC3} - \DSite No Task File

Task: {C8E99B63-0C76-4075-95A8-87FBAFC776F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-12] (AVAST Software)

Task: {CA7EE6E1-03CC-4CEB-9DA6-A15A6D86BF4C} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-08-22] (WiseCleaner.COM)

Task: {D916743D-7F76-4272-87D5-9A2F95E7E7AF} - System32\Tasks\Malwarebytes Anti-Exploit => C:\Program Files\Malwarebytes Anti-Exploit\mbae-loader.exe

Task: {DADF2B40-7B1A-41AF-9894-84DF1A5BFF43} - System32\Tasks\{4A91DEF5-6223-4882-BB49-04163FC708D8} => C:\Program Files (x86)\Activision\Transformers Fall of Cybertron\Binaries\TFOC.exe

Task: {DC699450-1128-4B8C-BA85-791F296ED439} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {E233ED1D-20C3-44F8-AB2C-817155153D21} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {E4AFDA1A-E879-4A62-AE69-A1D38D76A5B7} - System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {E57F50A2-05DA-40A2-9346-3F8B59125288} - System32\Tasks\ASC7_SkipUac_Wolke => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2013-11-18] (IObit)

Task: {F31FFD37-7725-4B7B-BC4A-C4B7E0336100} - System32\Tasks\{1A8566DC-26EF-4235-B528-B092A5B1AAFF} => Chrome.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?source=lightinstaller&amp;page=tsInstall

Task: {FF81C936-9663-43C9-8D74-F53A1C1592A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Malwarebytes Anti-Exploit.job => C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-10-14 20:38 - 2012-09-07 15:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll

2013-11-01 08:50 - 2013-11-01 08:50 - 03525687 _____ () C:\Program Files (x86)\PrivaZer\PrivaMenu3.dll

2010-04-07 15:07 - 2010-04-07 15:07 - 09468728 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

2009-11-03 12:26 - 2009-11-03 12:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll

2012-07-27 16:50 - 2009-06-22 13:40 - 00022328 _____ () C:\Program Files\TOSHIBA CORPORATION\Toshiba Assist\NotifyX.dll

2009-03-12 18:08 - 2009-03-12 18:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll

2010-04-06 13:53 - 2010-04-06 13:53 - 00578936 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll

2010-02-05 16:44 - 2010-02-05 16:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

2013-12-01 22:00 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll

2013-12-18 11:20 - 2013-12-18 10:45 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13121800\algo.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00028160 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\servicemanager.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pywintypes26.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00041472 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32service.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00096256 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32api.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00153088 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pyexpat.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00040448 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_socket.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00645120 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ssl.pyd

2010-03-16 13:05 - 2010-03-16 13:05 - 00020480 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\zope.interface._zope_interface_coptimizations.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00311808 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_hashlib.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00073728 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ctypes.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00011776 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\select.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00010752 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.rand.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00051200 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.crypto.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00039936 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.SSL.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00036352 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32process.pyd

2010-05-05 13:43 - 2010-05-05 13:43 - 00008192 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\twisted.protocols._c_urlarg.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32security.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00017920 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32event.pyd

2009-07-06 04:16 - 2009-07-06 04:16 - 00111104 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32file.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00024064 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32pipe.pyd

2013-07-16 21:20 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2013-07-16 21:20 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2013-07-16 21:20 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2013-11-12 10:09 - 2013-11-12 10:09 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-11-29 20:01 - 2013-11-29 20:01 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\c928e05ad4d57c6ce294ae68e8598b0f\PSIClient.ni.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00524288 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgCore.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00139264 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgBluetooth.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00065536 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDialup.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgUtil.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00090112 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgPorts.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00106496 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDatabase.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00143360 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDetection.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00053248 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDriverInstall.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 06057984 ____N () C:\Program Files (x86)\Verbindungsassistent\VerbindungsassistentGer.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGSMSPCClient.Dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDebugs.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 00016384 ____N () C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent_WTGSMSPCClientGer.dll

2013-11-26 14:45 - 2009-03-03 12:42 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDriverInstallX.Dll

2013-12-10 19:56 - 2013-12-10 19:56 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom 802.11n-Netzwerkadapter

Description: Broadcom 802.11n-Netzwerkadapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: BCM43XX

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/18/2013 02:21:50 PM) (Source: Application Hang) (User: )

Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 18c8
 

Startzeit: 01cefbf3fbbf7d8f
 

Endzeit: 16
 

Anwendungspfad: C:\Users\Wolke\Desktop\FRST64.exe
 

Berichts-ID: 500dddcb-67e7-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:58:07 AM) (Source: Application Hang) (User: )

Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 10c0
 

Startzeit: 01cefbdfee1e6a02
 

Endzeit: 32
 

Anwendungspfad: C:\Users\Wolke\Desktop\FRST64.exe
 

Berichts-ID: 420ff494-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:57:09 AM) (Source: Application Hang) (User: )

Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1728
 

Startzeit: 01cefbdf89c6ff2c
 

Endzeit: 0
 

Anwendungspfad: C:\Users\Wolke\Desktop\FRST64.exe
 

Berichts-ID: 1d3f60d4-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:17:51 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (12/18/2013 11:19:59 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/18/2013 11:17:40 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (12/18/2013 11:16:05 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst TOSHIBA eco Utility Service erreicht.
 

Error: (12/18/2013 11:14:11 AM) (Source: Service Control Manager) (User: )

Description: Dienst "Advanced SystemCare Service 7" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (12/18/2013 02:21:50 PM) (Source: Application Hang)(User: )

Description: FRST64.exe3.3.8.118c801cefbf3fbbf7d8f16C:\Users\Wolke\Desktop\FRST64.exe500dddcb-67e7-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:58:07 AM) (Source: Application Hang)(User: )

Description: FRST64.exe3.3.8.110c001cefbdfee1e6a0232C:\Users\Wolke\Desktop\FRST64.exe420ff494-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:57:09 AM) (Source: Application Hang)(User: )

Description: FRST64.exe3.3.8.1172801cefbdf89c6ff2c0C:\Users\Wolke\Desktop\FRST64.exe1d3f60d4-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:17:51 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 55%

Total physical RAM: 3954.67 MB

Available physical RAM: 1747.56 MB

Total Pagefile: 4153.85 MB

Available Pagefile: 1473.3 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:297.99 GB) (Free:154.47 GB) NTFS

Drive e: (MEDION) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 40D49AEE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

cosinus

18.12.2013 15:18

Das Log ist leider unvollständig. :(

lakil

18.12.2013 15:25

Soll ich aus die FRST.txt datei posten?

Ich glaub konkret einem geholfen kann hier nicht...

cosinus

18.12.2013 15:33

Ist heute irgendwie der Tag des Nichtlesens :confused:
Irgendwie liest heute keiner meiner "Patienten" mehr die Anleitungen richtig :balla:

Du sollst die additions.txt vollständig posten! Was bitte hat das mit der FRST.txt zu tun? Das sind zwei verschiedene Textdateien!

:crazy:

lakil

18.12.2013 15:40

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-12-2013 03

Ran by Wolke at 2013-12-18 14:35:26

Running from C:\Users\Wolke\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)

Advanced SystemCare 7 (x32 Version: 7.0.6)

AMD Accelerated Video Transcoding (Version: 13.20.100.30723)

AMD Catalyst Control Center (x32 Version: 2013.0723.1944.33607)

AMD Catalyst Install Manager (Version: 8.0.915.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.80723.2017)

AMD Wireless Display v3.0 (Version: 1.0.0.13)

avast! Free Antivirus (x32 Version: 9.0.2008)

Bing-Desktop (x32 Version: 1.3.171.0)

BitTorrent (HKCU Version: 7.8.2.30332)

Broadcom 802.11 Network Adapter (Version: 5.60.48.35)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center InstallProxy (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center Localization All (x32 Version: 2013.0723.1944.33607)

CCC Help Chinese Standard (x32 Version: 2013.0723.1943.33607)

CCC Help Chinese Traditional (x32 Version: 2013.0723.1943.33607)

CCC Help Czech (x32 Version: 2013.0723.1943.33607)

CCC Help Danish (x32 Version: 2013.0723.1943.33607)

CCC Help Dutch (x32 Version: 2013.0723.1943.33607)

CCC Help English (x32 Version: 2013.0723.1943.33607)

CCC Help Finnish (x32 Version: 2013.0723.1943.33607)

CCC Help French (x32 Version: 2013.0723.1943.33607)

CCC Help German (x32 Version: 2013.0723.1943.33607)

CCC Help Greek (x32 Version: 2013.0723.1943.33607)

CCC Help Hungarian (x32 Version: 2013.0723.1943.33607)

CCC Help Italian (x32 Version: 2013.0723.1943.33607)

CCC Help Japanese (x32 Version: 2013.0723.1943.33607)

CCC Help Korean (x32 Version: 2013.0723.1943.33607)

CCC Help Norwegian (x32 Version: 2013.0723.1943.33607)

CCC Help Polish (x32 Version: 2013.0723.1943.33607)

CCC Help Portuguese (x32 Version: 2013.0723.1943.33607)

CCC Help Russian (x32 Version: 2013.0723.1943.33607)

CCC Help Spanish (x32 Version: 2013.0723.1943.33607)

CCC Help Swedish (x32 Version: 2013.0723.1943.33607)

CCC Help Thai (x32 Version: 2013.0723.1943.33607)

CCC Help Turkish (x32 Version: 2013.0723.1943.33607)

ccc-utility64 (Version: 2013.0723.1944.33607)

CCleaner (Version: 4.08)

Conexant Audio Driver For AMD HDMI/DP Codec (Version: 4.98.32.50)

DAEMON Tools Lite (x32 Version: 4.47.1.0333)

Do Not Track Me Add-on 2.2.9.1112 (x32 Version: 2.2.9.1112)

Eusing Free Registry Cleaner (x32)

Free YouTube to MP3 Converter version 3.12.17.1127 (x32 Version: 3.12.17.1127)

Google Chrome (x32 Version: 31.0.1650.63)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.22.3)

Hide IP Easy (x32 Version: 5.3.1.2)

HydraVision (x32 Version: 4.2.252.0)

Intel(R) Control Center (x32 Version: 1.2.1.1008)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)

Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001)

Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002)

iolo technologies' System Mechanic (x32 Version: 12.5.0)

Java 7 Update 45 (x32 Version: 7.0.450)

Java Auto Updater (x32 Version: 2.1.9.8)

KeyScrambler (x32 Version: 3.3.0.0)

K-Lite Mega Codec Pack 3.9.5 (x32 Version: 3.9.5)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)

Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)

Mozilla Maintenance Service (x32 Version: 26.0)

MSVCRT Redists (Version: 1.0)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

neroxml (x32 Version: 1.0.0)

NVIDIA PhysX (x32 Version: 9.10.0513)

OpenAL (x32)

OpenVPN Client (x32 Version: 1.5.6)

Opera 12.16 (Version: 12.16.1860)

PeerBlock 1.1 (r518) (Version: 1.1.0.518)

Pidgin (x32 Version: 2.10.7)

Pinnacle Video Treiber (Version: 12.1.0.030)

PrivaZer (x32 Version: 2.10.0.0)

Project64 1.6 (x32 Version: 1.6)

Realtek Ethernet Controller Driver (x32 Version: 7.47.714.2011)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6687)

Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30111)

Secure Eraser (x32 Version: 4.2.0.1)

Simple Adblock (x32 Version: 1.1.5)

Skype™ 6.11 (x32 Version: 6.11.102)

Sophos Virus Removal Tool (x32 Version: 2.2)

Spybot - Search & Destroy (x32 Version: 2.1.19)

Spyware Terminator 2012 (x32 Version: 3.0.0.80)

SUPERAntiSpyware (Version: 5.7.1010)

Synaptics Pointing Device Driver (Version: 15.0.8.1)

Tinypic 3.18 (x32 Version: Tinypic 3.18)

Toshiba Assist (x32 Version: 3.00.11)

TOSHIBA Bulletin Board (Version: 1.6.07.64)

TOSHIBA Bulletin Board (x32 Version: 1.6.07.64)

TOSHIBA ConfigFree (x32 Version: 8.0.35)

TOSHIBA eco Utility (Version: 1.2.11.64)

TOSHIBA eco Utility (x32 Version: 1.2.11.64)

TOSHIBA Flash Cards Support Utility (x32 Version: 1.63.0.11C)

TOSHIBA HDD/SSD Alert (Version: 3.1.64.6)

TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.6)

TOSHIBA PC Health Monitor (Version: 1.6.0.64)

TOSHIBA Places Icon Utility (x32 Version: 1.1.1.4)

TOSHIBA ReelTime (Version: 1.6.06.64)

TOSHIBA ReelTime (x32 Version: 1.6.06.64)

TOSHIBA Service Station (x32 Version: 2.2.9)

TOSHIBA TEMPRO (x32 Version: 3.35)

TOSHIBA Value Added Package (Version: 1.3.19.64)

TOSHIBA Value Added Package (x32 Version: 1.3.19.64)

TOSHIBA Web Camera Application (x32 Version: 1.1.1.15)

Ubisoft Game Launcher (x32 Version: 1.0.0.0)

Utility Common Driver (x32 Version: 1.0.52.2C)

Vegas Pro 12.0 (64-bit) (Version: 12.0.670)

Verbindungsassistent (x32 Version: 2.1)

Winamp (x32 Version: 5.63 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Doctor 2.7.3 (x32)

Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

WinRAR 4.20 (64-Bit) (Version: 4.20.0)

Wise Care 365 version 2.87 (x32 Version: 2.87)

World of Tanks (x32)

World of Warplanes (x32)

XMedia Recode Version 3.1.4.5 (x32 Version: 3.1.4.5)

xp-AntiSpy 3.98-2 (x32)
 

==================== Restore Points  =========================
 

14-12-2013 23:31:41 Installed OpenVPN Client

15-12-2013 00:12:06 Removed HidedMyRealIP-demo

15-12-2013 18:25:57 Removed Adobe Reader XI (11.0.05) - Deutsch.

17-12-2013 12:11:51 Removed GeekBuddy.
 
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-04-14 22:31 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {07E0090C-042A-4FF5-A123-9D28761DDC37} - System32\Tasks\{4259E698-0EAE-4388-B42C-86F91FF49F20} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {0F272DD7-5149-4663-A06D-01D62BFC046F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {286D0DDA-0C1D-42E8-A262-49CDA84A3ED4} - System32\Tasks\Pointstone\System Cleaner\Startup Dialog => C:\Program Files (x86)\Pointstone\System Cleaner 7\Helper.exe

Task: {2BF90F22-2435-4F5D-93F6-629C720F25FE} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

Task: {403A2650-A617-49E0-B410-CABEA9E347DD} - System32\Tasks\{996830C2-66C4-4C0C-BB9D-C43C5FEC202D} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {537C03F3-BB91-4D75-94A3-596785E3D9CA} - System32\Tasks\{944B9192-41AB-4674-9384-5EEFA0886B8A} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {5C5DF0FC-4C4C-44DA-A0A6-F37CB80CFA10} - System32\Tasks\{81607F8B-DCE4-401E-9A39-A64D15BB2225} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {67607FD3-61CD-4122-B49D-42E738C3002E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3583547410-2317155067-1929240655-1000

Task: {677C707B-1A32-48F5-B49C-9BE32D860E7A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)

Task: {6C43EEA9-587F-47BD-9326-1A8621B029EC} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)

Task: {789AF10D-80DA-47C7-A019-473DDB792733} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-06-03] (TOSHIBA CORPORATION)

Task: {8C097928-E444-430E-AFBC-D84A47246952} - System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {9A2A51EA-B167-422D-BE24-9422C74727FE} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe [2013-12-03] (iolo technologies, LLC)

Task: {A3D1F86F-2BDC-4248-9E8D-4DF5F3F80926} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {A8287ACD-892E-435D-A994-B0D8C9D7E6D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {C52EB4D8-7E5A-4D10-96A3-F88CD05B9BC3} - \DSite No Task File

Task: {C8E99B63-0C76-4075-95A8-87FBAFC776F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-12] (AVAST Software)

Task: {CA7EE6E1-03CC-4CEB-9DA6-A15A6D86BF4C} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-08-22] (WiseCleaner.COM)

Task: {D916743D-7F76-4272-87D5-9A2F95E7E7AF} - System32\Tasks\Malwarebytes Anti-Exploit => C:\Program Files\Malwarebytes Anti-Exploit\mbae-loader.exe

Task: {DADF2B40-7B1A-41AF-9894-84DF1A5BFF43} - System32\Tasks\{4A91DEF5-6223-4882-BB49-04163FC708D8} => C:\Program Files (x86)\Activision\Transformers Fall of Cybertron\Binaries\TFOC.exe

Task: {DC699450-1128-4B8C-BA85-791F296ED439} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {E233ED1D-20C3-44F8-AB2C-817155153D21} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {E4AFDA1A-E879-4A62-AE69-A1D38D76A5B7} - System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {E57F50A2-05DA-40A2-9346-3F8B59125288} - System32\Tasks\ASC7_SkipUac_Wolke => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2013-11-18] (IObit)

Task: {F31FFD37-7725-4B7B-BC4A-C4B7E0336100} - System32\Tasks\{1A8566DC-26EF-4235-B528-B092A5B1AAFF} => Chrome.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?source=lightinstaller&amp;page=tsInstall

Task: {FF81C936-9663-43C9-8D74-F53A1C1592A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\Malwarebytes Anti-Exploit.job => C:\Program Files\Malwarebytes Anti-Exploit\mbae.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-10-14 20:38 - 2012-09-07 15:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll

2013-11-01 08:50 - 2013-11-01 08:50 - 03525687 _____ () C:\Program Files (x86)\PrivaZer\PrivaMenu3.dll

2010-04-07 15:07 - 2010-04-07 15:07 - 09468728 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

2009-11-03 12:26 - 2009-11-03 12:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll

2012-07-27 16:50 - 2009-06-22 13:40 - 00022328 _____ () C:\Program Files\TOSHIBA CORPORATION\Toshiba Assist\NotifyX.dll

2009-03-12 18:08 - 2009-03-12 18:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll

2010-04-06 13:53 - 2010-04-06 13:53 - 00578936 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll

2010-02-05 16:44 - 2010-02-05 16:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

2013-12-01 22:00 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll

2013-12-18 11:20 - 2013-12-18 10:45 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13121800\algo.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00028160 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\servicemanager.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pywintypes26.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00041472 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32service.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00096256 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32api.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00153088 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pyexpat.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00040448 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_socket.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00645120 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ssl.pyd

2010-03-16 13:05 - 2010-03-16 13:05 - 00020480 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\zope.interface._zope_interface_coptimizations.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00311808 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_hashlib.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00073728 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ctypes.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00011776 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\select.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00010752 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.rand.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00051200 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.crypto.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00039936 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.SSL.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00036352 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32process.pyd

2010-05-05 13:43 - 2010-05-05 13:43 - 00008192 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\twisted.protocols._c_urlarg.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32security.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00017920 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32event.pyd

2009-07-06 04:16 - 2009-07-06 04:16 - 00111104 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32file.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00024064 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32pipe.pyd

2013-07-16 21:20 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2013-07-16 21:20 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2013-07-16 21:20 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2013-11-12 10:09 - 2013-11-12 10:09 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-11-29 20:01 - 2013-11-29 20:01 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\c928e05ad4d57c6ce294ae68e8598b0f\PSIClient.ni.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00524288 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgCore.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00139264 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgBluetooth.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00065536 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDialup.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgUtil.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00090112 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgPorts.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00106496 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDatabase.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00143360 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDetection.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00053248 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDriverInstall.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 06057984 ____N () C:\Program Files (x86)\Verbindungsassistent\VerbindungsassistentGer.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGSMSPCClient.Dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDebugs.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 00016384 ____N () C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent_WTGSMSPCClientGer.dll

2013-11-26 14:45 - 2009-03-03 12:42 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDriverInstallX.Dll

2013-12-10 19:56 - 2013-12-10 19:56 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom 802.11n-Netzwerkadapter

Description: Broadcom 802.11n-Netzwerkadapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: BCM43XX

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/18/2013 02:21:50 PM) (Source: Application Hang) (User: )

Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 18c8
 

Startzeit: 01cefbf3fbbf7d8f
 

Endzeit: 16
 

Anwendungspfad: C:\Users\Wolke\Desktop\FRST64.exe
 

Berichts-ID: 500dddcb-67e7-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:58:07 AM) (Source: Application Hang) (User: )

Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 10c0
 

Startzeit: 01cefbdfee1e6a02
 

Endzeit: 32
 

Anwendungspfad: C:\Users\Wolke\Desktop\FRST64.exe
 

Berichts-ID: 420ff494-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:57:09 AM) (Source: Application Hang) (User: )

Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1728
 

Startzeit: 01cefbdf89c6ff2c
 

Endzeit: 0
 

Anwendungspfad: C:\Users\Wolke\Desktop\FRST64.exe
 

Berichts-ID: 1d3f60d4-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:17:51 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (12/18/2013 11:19:59 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/18/2013 11:17:40 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (12/18/2013 11:16:05 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst TOSHIBA eco Utility Service erreicht.
 

Error: (12/18/2013 11:14:11 AM) (Source: Service Control Manager) (User: )

Description: Dienst "Advanced SystemCare Service 7" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (12/18/2013 02:21:50 PM) (Source: Application Hang)(User: )

Description: FRST64.exe3.3.8.118c801cefbf3fbbf7d8f16C:\Users\Wolke\Desktop\FRST64.exe500dddcb-67e7-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:58:07 AM) (Source: Application Hang)(User: )

Description: FRST64.exe3.3.8.110c001cefbdfee1e6a0232C:\Users\Wolke\Desktop\FRST64.exe420ff494-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:57:09 AM) (Source: Application Hang)(User: )

Description: FRST64.exe3.3.8.1172801cefbdf89c6ff2c0C:\Users\Wolke\Desktop\FRST64.exe1d3f60d4-67d3-11e3-ac6e-88ae1dfbb2f1
 

Error: (12/18/2013 11:17:51 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 55%

Total physical RAM: 3954.67 MB

Available physical RAM: 1747.56 MB

Total Pagefile: 4153.85 MB

Available Pagefile: 1473.3 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:297.99 GB) (Free:154.47 GB) NTFS

Drive e: (MEDION) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 40D49AEE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

cosinus

18.12.2013 16:13

Zitat:

C:\Program Files (x86)\Pointstone\System Cleaner 7\Helper.exe
C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe

Wozu brauchst du all diese recht fragwürdigen Programme? :wtf:

lakil

18.12.2013 16:27

Zitat:

Zitat von cosinus (Beitrag 1215629)

Wozu brauchst du all diese recht fragwürdigen Programme? :wtf:

1.sind das keine fragwürdgen Programme wenn du mal bissel nachforscht.
2.wollte ich wissen wie ich endlich diesen yahoo hijacker und andere von meinem system entferne.
:daumenhoc

cosinus

18.12.2013 16:59

Zitat:

1.sind das keine fragwürdgen Programme wenn du mal bissel nachforscht.

Naja. Im Prinzip ist jedes angeblich Wunder-Tuning-Programm allerfeinstes Schlangenöl. Und ich frage mich ernsthaft was du gleich mit dieser Anzahl an Programmen dieser Art auf deinem Rechner willst. Aber naja, es gibt viele die meinen viel hilft viel und sich dann fragen warum ihr System "kaputtoptimiert" wurde :rofl:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ProxyServer: http=127.0.0.1:1353;https=127.0.0.1:1353

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

FF Homepage: http://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

lakil

18.12.2013 17:16

Code:



Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-12-2013 03

Ran by Wolke at 2013-12-18 17:12:10 Run:1

Running from C:\Users\Wolke\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

ProxyServer: http=127.0.0.1:1353;https=127.0.0.1:1353

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

*****************
 

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.

HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.

Firefox homepage deleted successfully.
 

==== End of Fixlog ====

cosinus

18.12.2013 17:17

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

lakil

18.12.2013 18:57

Lach naja alleine kann man von sich aus nicht optimieren zumindest ich nicht du vielleicht ja :) da braucht man schon ein werkzeug dafür.
Frag mich was diese hartnäckigen einträge vcerursacht hatte ich einen trojaner an Board?
Das selbe problem habe ich mit Chrome und IE11. Habe sie gerde geöfnet und hatte in Chrome Zone Alarm start Page und zusätzlich Yahoo spigot.
Im IE explorer hatte ich sofort Yahoo als start Seite.
Sorry das ich dich damit belästige...
Ob das jetzt alles klappen wird..hmm
habe eine langsame verbindung von 56kbit/s :(
Dadraus wird momentan nix werds wieder versuchehn wenn ich mehr highspeed volumen auflade.
Euer Support hier ist echt gut danke das ihr euch die mühe macht sehr nett.
:taenzer:

Zitat:

Zitat von lakil (Beitrag 1215678)

Sehr nett von Euch
Macht weiter so!

cosinus

18.12.2013 23:27

Zitat:

Lach naja alleine kann man von sich aus nicht optimieren

Mehr als TEMP zu leeren braucht man nicht, ansonsten mal den Rechner sauberhalten und nicht jeden Müll der einem in die Finger kommt anklicken/installieren.
Wer Tuningprogramme an der Reg rumschrauben lässt muss sich über ein spinnendes System irgendwann nicht wundern.

lakil

19.12.2013 10:33

Zitat:

Zitat von cosinus (Beitrag 1215834)

Wer Tuningprogramme an der Reg rumschrauben lässt muss sich über ein spinnendes System irgendwann nicht wundern

Das mag wohl stimmen,aber die browser hijacker verstecken sich auch in legaler software und werden auch mal ohne zustimmung des users installiert.
Aber wenn man einmal das system infiziert hat da geht glaub ich nur eine frische neu instalation des betriebs systems um sich von sowas zu befreien. :(

cosinus

19.12.2013 10:43

Zitat:

Das mag wohl stimmen,aber die browser hijacker verstecken sich auch in legaler software und werden auch mal ohne zustimmung des users installiert.

Was hat das mit Tuning zu tun??! Garnix!
Browserhijacker entfernen bedeutet Malware entfernen, das ist etwas völlig anderes als die Programme wie TuneUp und Konsorten von sich behaupten!

Zitat:

Aber wenn man einmal das system infiziert hat da geht glaub ich nur eine frische neu instalation des betriebs systems um sich von sowas zu befreien.

Das ist im Prinzip korrekt. Denn nur dann hat man die Garantie alles erlegt zu haben. Man bekommt Ad-/Malware mit "unseren" Tools aber gut weg.

Was ist jetzt eigentlich mit den letzten beiden Konstrollscans?

lakil

19.12.2013 12:12

Ich werd ende des monats die letzten schritte durchführen da ich momentan eine langsame i-net geschwind. habe unzureichend ist für ein online scan.
Wie gesagt in den i-net explorern hat sich rein garnichts gemacht.Die MW home pages von Y sind immer noch im system verwurzelt und damit in den Browsern
Es bleibt abzuwarten ob sich dann noch was mit ESET online scan ändern läst bzw entfernen läst wenn ich dann den online scan ausführe.

cosinus

19.12.2013 15:34

Zitat:

habe unzureichend ist für ein online scan.

Wieso soll das zu langsam sein, glaubste etwa der Inhalt deiner Platte wird zu ESET hochgeladen?? :wtf: :rofl:

lakil

19.12.2013 19:40

Nein
Habe damit gemeint das ich die Signatur die von esset gebraucht wird nicht herunterladen kann oder bzw sehr langsam,da meine i.net geschwindigkeit langsam ist.
So is es leider.

cosinus

20.12.2013 00:39

Ok :D bitte melden wenn ready :daumenhoc

lakil

24.12.2013 22:12

Ein Scan von über 1Std. :( 93% und es nimmt kein ende....1std,30min scan

Code:



ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=2370eee2b4d62c49bdc4f1194c725146

# engine=16391

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-12-24 06:49:29

# local_time=2013-12-24 07:49:29 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 83 3666662 164620841 0 0

# compatibility_mode=3074 16777214 16 3 633522 633522 0 0

# compatibility_mode=5893 16776573 100 94 34458 139540819 0 0

# compatibility_mode=7937 16777214 28 75 21898105 29765877 0 0

# scanned=31317

# found=0

# cleaned=0

# scan_time=3603

ESETSmartInstaller@High as downloader log:

Can not read file from internet.ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=2370eee2b4d62c49bdc4f1194c725146

# engine=16394

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-12-24 09:59:55

# local_time=2013-12-24 10:59:55 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 83 3674488 164632267 0 0

# compatibility_mode=3074 16777214 16 3 641348 641348 0 0

# compatibility_mode=5893 16776573 100 94 42284 139552245 0 0

# compatibility_mode=7937 16777214 28 75 21909531 29777303 0 0

# scanned=173704

# found=0

# cleaned=0

# scan_time=6519

----------------------------
Frohe Weihnachten Cosinus!;)

cosinus

25.12.2013 00:22

MBAM?? :confused:

lakil

25.12.2013 12:40

Du kannst doch Sätze schreiben oder?

Zitat:

Zitat von cosinus (Beitrag 1219184)

MBAM?

:confused:sorry aber verstehe gerad nicht was du damit meinst "MBAM"

cosinus

25.12.2013 16:57

Und du kannst auch Postings lesen oder :D
Welches Programm solltest du denn zur Kontrolle auch noch ausführen, vor ESET? :rolleyes:
Richtig, MBAM = Malwarebytes Anti-Malware ;)

lakil

25.12.2013 20:58

Zitat:

Zitat von cosinus (Beitrag 1219330)

Welches Programm solltest du denn zur Kontrolle auch noch ausführen, vor ESET?

Das ist längst geschehen und es wurde nix gefunden.:zunge::sword2:

Zitat:

Zitat von cosinus (Beitrag 1215973)

Ad-/Malware mit "unseren" Tools aber gut weg.

Bei mir hat sich aber bis jetzt nix getan.:balla:

cosinus

25.12.2013 23:01

Joa und das Log von MBAM? So ein Log zeigt mehr als nur Fund oder kein Fund

Zitat:

Bei mir hat sich aber bis jetzt nix getan

Keine Ahnung was du jetzt schon wieder für ein Problem hast, es wurde neben MBAM auch adwcleaner und JRT ausgeführt um Junkware zu entfernen

lakil

26.12.2013 10:15

Code:



Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.12.24.04
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

 MY-PC [Administrator]
 

26.12.2013 09:06:44

mbam-log-2013-12-26 (09-06-44).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 240952

Laufzeit: 7 Minute(n), 47 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Zitat:

Zitat von cosinus (Beitrag 1219418)

Keine Ahnung was du jetzt schon wieder für ein Problem hast, es wurde neben MBAM auch adwcleaner und JRT ausgeführt um Junkware zu entfernen

Zitat:

Zitat von lakil (Beitrag 1219356)

Das ist längst geschehen und es wurde nix gefunden.:zunge::sword2:

Bei mir hat sich aber bis jetzt nix getan.

Ja das mag ja sein das Die Tools die Ihr benutzt bei manchen Leuten helfen können und ihre Arbeit gut verrichten in meinem Fall jedoch nicht.:heulen:

Ich habe Computer kenntnise und sitze nicht seit gestern an einem PC bin aber in solchen sachen ein Laie.:rolleyes:

Firefox:hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff <>läst sich nicht entfernen< (im private modus nicht vorhanden)

G Chrome:hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch <>aus dem Browser nicht zu entfernen (im private modus nicht vorhanden)

IExplorer:hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch[/U] Browser HiJacker immer als Startseite vorhanden läst sich nicht entfernen (im private modus nicht vorhanden)

cosinus

26.12.2013 17:36

Zitat:

Datenbank Version: v2013.12.24.04

Siehst, deswegen will ich immer die Logs sehen. Du hast vor dem Scan die Signaturen nicht aktualisiert. Quickscan mit aktuellen Signaturen wiederholen und ein frisches FRST Log bitte. FRST neu runterladen und nen Haken bei additions.txt setzen

lakil

26.12.2013 19:13

Zitat:

Zitat von cosinus (Beitrag 1219756)

Meinet wegen...

Code:



Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.12.26.05
 

Windows  Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

 MY-PC [Administrator]
 

26.12.2013 18:38:48

mbam-log-2013-12-26 (18-38-48).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 241067

Laufzeit: 4 Minute(n), 57 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013

Ran by  (administrator) on MY-PC on 26-12-2013 18:53:00

Running from C:\Users\\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

() C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe

(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe

(QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe

(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [566184 2010-09-28] (TOSHIBA Corporation)

HKLM\...\Run: [SmoothView] - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)

HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)

HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)

HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1489760 2010-04-06] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-23] (TOSHIBA Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)

HKLM-x32\...\Run: [KeNotify] - C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION)

HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-07-23] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-12] (AVAST Software)

HKLM-x32\...\Run: [KeyScrambler] - C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe [508144 2013-11-14] (QFX Software Corporation)

HKLM-x32\...\Winlogon: [Userinit] %windows%\system32\userinit.exe, [x]

HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE [6563096 2013-12-20] (SUPERAntiSpyware)

HKCU\...\Policies\Explorer: [CDRAutoRun] 0

HKCU\...\Policies\Explorer: [NoRecentDocsHistory] 1

HKCU\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1

HKCU\...\Policies\Explorer: [NoRecentDocsMenu] 0

HKCU\...\Policies\Explorer: [NoInstrumentation] 1

HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

MountPoints2: G - G:\Razor1911_Installer.exe

MountPoints2: H - H:\LaunchU3.exe -a

MountPoints2: {4a603744-ec8e-11e1-9032-4cedde54a1e5} - E:\Setup.exe

MountPoints2: {cd67f712-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f718-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {cd67f758-d7fa-11e1-a9e7-a5e1ea4edfa3} - F:\AutoRun.exe

MountPoints2: {d4c29d90-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {d4c29da0-d80c-11e1-96bd-4cedde37cae5} - E:\AutoRun.exe

MountPoints2: {dfb72204-d952-11e1-bb50-88ae1dfbb2f1} - G:\LaunchU3.exe -a

HKU\Administrator\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-07-23] (AMD)

HKU\Administrator\...\RunOnce: [Application Restart #0] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2413} URL = 

SearchScopes: HKCU - DefaultScope {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

SearchScopes: HKCU - {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 
 
 

FireFox:

========

FF ProfilePath: C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox

FF NewTab: about:blank

FF DefaultSearchEngine: Startpage HTTPS

FF SelectedSearchEngine: Startpage HTTPS

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=

FF NetworkProxy: "ftp", "127.0.0.1"

FF NetworkProxy: "ftp_port", 4001

FF NetworkProxy: "gopher", "127.0.0.1"

FF NetworkProxy: "gopher_port", 4001

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 4001

FF NetworkProxy: "socks", "127.0.0.1"

FF NetworkProxy: "socks_port", 4001

FF NetworkProxy: "socks_remote_dns", true

FF NetworkProxy: "ssl", "127.0.0.1"

FF NetworkProxy: "ssl_port", 4001

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de-ssl.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-encrypted-no-personalization.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---deutsch.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick-ssl-pictures---english.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-deutsch.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ssl-wikipedia-english.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https---deutsch.xml

FF SearchPlugin: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\startpage-https.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ixquick---deutsch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo_ff.xml

FF Extension: Click&amp;Clean - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\clickclean@hotcleaner.com

FF Extension: HTTPS-Everywhere - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\https-everywhere@eff.org

FF Extension: Flagfox - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

FF Extension: Cookie Monster - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{45d8ff86-d909-11db-9705-005056c00008}

FF Extension: anonymoX - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\client@anonymox.net.xpi

FF Extension: Ghostery - C:\Users\Wolke\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\firefox@ghostery.com.xpi

FF Extension: Random Agent Spoofer - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\jid1-AVgCeF1zoVzMjA@jetpack.xpi

FF Extension: UAControl - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\uacontrol@qz.tsugumi.org.xpi

FF Extension: JonDoFox - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593}.xpi

FF Extension: NoScript - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: Adblock Plus - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: BetterPrivacy - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi

FF Extension: User Agent Switcher - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi

FF Extension: ProfileSwitcher - C:\Users\W\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4}.xpi
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=412349836a9c47b19aa0f16305762553&tu=10G9y00Au1C01g0&sku=&tstsId=&ver=&", "hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch"

CHR DefaultSearchKeyword: yahoo.com search

CHR DefaultSearchProvider: Yahoo

CHR DefaultSearchURL: hxxp://de.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=198484&p={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Advanced SystemCare 6 Opera Plugin) - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\np_Asc_plugin.dll (IObit)

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File

CHR Plugin: (npAPI Plugin) - C:\Users\Wolke\AppData\Local\TNT2\2.0.0.1534\npTNT2.dll No File

CHR Plugin: (npAPI Ghost Plugin) - C:\Users\W\AppData\Local\TNT2\2.0.0.1534\npTNT2ghost.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Extension: (HTTPS Everywhere) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2013.10.16_0

CHR Extension: (Ultimate User Agent Switcher, URL sniffer) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljfpjnehmoiabkefmnjegmpdddgcdnpo\0.9.3.3_0

CHR Extension: (Ghostery) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.0.0_0

CHR Extension: (Google Wallet) - C:\Users\Wolke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (NotScripts) - C:\Users\W\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn\0.9.6_0

CHR Extension: (ScriptSafe) - C:\Users\W\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0

CHR HKLM-x32\...\Chrome\Extension: [aiibjampmlkfkdmgnkholklaechbdanh] - C:\ProgramData\Facebook Profile Viewer\5shja.crx

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-12] (AVAST Software)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 OpenVPNAccessClient; C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [24064 2010-08-12] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-01-14] (Crawler.com)

R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580232 2013-04-25] (WiseCleaner.com)

R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()

S2 HPSLPSVC; C:\Users\Wolke\AppData\Local\Temp\7zS0F2C\hpslpsvc64.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-12] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-12] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-12] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-12] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-12] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-12] (AVAST Software)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-12] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-12] ()

S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [722488 2000-01-01] (Conexant Systems Inc.)

R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-12-07] (EldoS Corporation)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [27456 2012-07-31] (Intel Corporation)

R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [222200 2013-05-31] (QFX Software Corporation)

S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [89304 2013-12-17] (Malwarebytes Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-02-03] (Windows (R) Win 7 DDK provider)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.)

R3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2010-08-03] (The OpenVPN Project)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-07-08] (Spotflux, Inc.)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

U4 bdselfpr; 

S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]

S3 MEMSWEEP2; \??\C:\Windows\system32\E37F.tmp [x]

S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]

U3 aswMBR; \??\C:\Users\Wolke\AppData\Local\Temp\aswMBR.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-26 18:53 - 2013-12-26 18:53 - 00026005 _____ C:\Users\Wo\Desktop\FRST.txt

2013-12-26 18:46 - 2013-12-26 18:50 - 01928716 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-26 12:48 - 2013-12-26 12:48 - 00001895 _____ C:\Users\W\Desktop\aswMBR.txt

2013-12-26 12:48 - 2013-12-26 12:48 - 00000512 _____ C:\Users\W\Desktop\MBR.dat

2013-12-26 12:41 - 2013-12-26 12:50 - 02900332 _____ C:\Users\W\Desktop\tweaking.com_windows_repair_aio.zip

2013-12-26 12:21 - 2013-12-26 12:30 - 04745728 _____ (AVAST Software) C:\Users\Wolke\Desktop\aswMBR.exe

2013-12-26 12:12 - 2013-12-26 12:15 - 01233962 _____ C:\Users\W\Desktop\adwcleaner.exe

2013-12-24 12:45 - 2013-12-24 12:45 - 00000056 _____ C:\Windows\setupact.log

2013-12-24 12:45 - 2013-12-24 12:45 - 00000000 _____ C:\Windows\setuperr.log

2013-12-24 12:44 - 2013-12-24 12:45 - 00349400 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-23 16:27 - 2013-12-24 12:47 - 00092120 _____ C:\Users\W\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-22 19:22 - 2013-12-22 19:21 - 00000174 _____ C:\Users\W\Downloads\mms.cfg

2013-12-22 14:39 - 2013-12-22 14:39 - 00000603 _____ C:\Users\W\Desktop\UpdateInfo.txt

2013-12-21 19:43 - 2013-12-21 19:54 - 04645232 _____ (Piriform Ltd) C:\Users\W\Downloads\ccsetup409.exe

2013-12-18 17:35 - 2013-12-18 17:35 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-18 17:27 - 2013-12-18 17:31 - 02347384 _____ (ESET) C:\Users\W\Desktop\esetsmartinstaller_deu.exe

2013-12-18 12:09 - 2013-12-18 12:09 - 00020781 _____ C:\Users\W\Downloads\Addition.txt

2013-12-18 12:08 - 2013-12-18 12:25 - 00091342 _____ C:\Users\W\Downloads\FRST.txt

2013-12-17 14:38 - 2013-12-17 15:19 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-17 12:44 - 2013-12-17 12:44 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll

2013-12-17 12:44 - 2013-12-17 12:44 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2013-12-17 12:04 - 2013-12-17 15:19 - 00000000 ____D C:\Users\Wolke\Desktop\mbar

2013-12-17 12:04 - 2013-12-17 12:04 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-17 12:03 - 2013-12-17 12:04 - 12582688 _____ (Malwarebytes Corp.) C:\Users\W\Desktop\mbar-1.07.0.1008.exe

2013-12-16 21:50 - 2013-12-16 22:00 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 17:38 - 2013-12-26 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-16 17:38 - 2013-12-26 07:24 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-16 17:38 - 2013-12-20 17:42 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-15 23:21 - 2013-12-18 11:54 - 00000000 ____D C:\FRST

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 21:02 - 2013-12-16 17:56 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\Wolke\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 18:42 - 2013-12-09 16:14 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:58 - 2013-12-15 16:59 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:54 - 2013-12-15 16:57 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Wolke\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\W\Documents\hosts.txt

2013-12-15 00:50 - 2013-12-15 01:12 - 00000000 ____D C:\Users\W\Desktop\VPN

2013-12-15 00:41 - 2013-06-29 05:36 - 00003994 _____ C:\Users\W\Documents\vpnbook-euro1-tcp80.ovpn

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\W\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\W\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\Wolke\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:26 - 2013-12-15 00:27 - 16289280 _____ C:\Users\W\Downloads\openvpn-client.msi

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\W\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\HideIPEasy

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:42 - 2013-10-04 22:50 - 00509872 _____ (Ask Partner Network) C:\Users\Wolke\Documents\APNSetup.exe

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\Wolke\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\W\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 23:21 - 2013-05-31 15:53 - 00222200 _____ (QFX Software Corporation) C:\Windows\system32\Drivers\keyscrambler.sys

2013-12-14 22:26 - 2013-08-29 12:07 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe

2013-12-14 22:26 - 2013-08-29 12:07 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll

2013-12-14 22:26 - 2013-08-29 12:07 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll

2013-12-14 22:19 - 2013-12-14 22:43 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 20:45 - 2013-12-26 12:16 - 00000000 ____D C:\AdwCleaner

2013-12-14 17:18 - 2013-12-14 17:21 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:18 - 2013-12-14 17:19 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 16:59 - 2013-12-14 17:14 - 211388240 _____ (COMODO) C:\Users\Wolke\Downloads\cfw_installer.exe

2013-12-14 15:29 - 2013-12-14 15:30 - 25563488 _____ (IObit                                                       ) C:\Users\Wolke\Downloads\imf-setup.exe

2013-12-14 11:53 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-14 11:53 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-14 11:53 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-14 11:53 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-14 11:53 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-14 11:53 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-14 11:53 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-14 11:53 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-14 11:53 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-14 11:53 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-14 11:53 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-14 11:53 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-14 11:53 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-14 11:53 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-14 11:53 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-14 11:53 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-14 11:53 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-14 11:53 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-14 11:53 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-14 11:53 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-14 11:53 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-14 11:53 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-14 11:52 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\W\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-12-03 10:01 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-13 08:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-13 08:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-11 07:50 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 07:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 07:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 07:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 07:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 07:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 07:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 07:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 07:32 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 07:32 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 07:32 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 07:32 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 07:30 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 07:30 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 07:30 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 07:30 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:57 - 2013-12-04 12:58 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:55 - 2013-12-17 12:46 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:54 - 2013-12-04 12:56 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:54 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 12:52 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-12-04 12:52 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\Wolke\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-14 18:52 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-24 12:46 - 00000000 ____D C:\ProgramData\ProductData

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:00 - 2013-12-26 12:45 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_Wolke

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 21:47 - 2013-12-01 21:56 - 34466768 _____ (IObit                                                       ) C:\Users\W\Downloads\asc-setup.exe

2013-12-01 18:32 - 2013-12-01 18:33 - 08988024 _____ (Wargaming.net                                               ) C:\Users\W\Downloads\WoWP_internet_install_eu.exe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\W\Downloads\edit.wmv

2013-11-30 16:14 - 2013-11-30 16:19 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:37 - 2013-12-26 07:25 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Verbindungsassistent

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\SysWOW64\Drivers\npf.sys

2013-11-26 13:53 - 2012-09-22 02:12 - 00035344 _____ (CACE Technologies, Inc.) C:\Windows\system32\Drivers\npf.sys

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll

2013-11-26 13:53 - 2012-08-20 01:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner
 

==================== One Month Modified Files and Folders =======
 

2013-12-26 18:53 - 2013-12-26 18:53 - 00026005 _____ C:\Users\W\Desktop\FRST.txt

2013-12-26 18:50 - 2013-12-26 18:46 - 01928716 _____ (Farbar) C:\Users\Wolke\Desktop\FRST64.exe

2013-12-26 18:00 - 2013-05-20 20:16 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-26 17:38 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job

2013-12-26 14:30 - 2013-10-15 09:49 - 01365891 _____ C:\Windows\WindowsUpdate.log

2013-12-26 14:08 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-26 14:08 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-26 12:50 - 2013-12-26 12:41 - 02900332 _____ C:\Users\W\Desktop\tweaking.com_windows_repair_aio.zip

2013-12-26 12:48 - 2013-12-26 12:48 - 00001895 _____ C:\Users\W\Desktop\aswMBR.txt

2013-12-26 12:48 - 2013-12-26 12:48 - 00000512 _____ C:\Users\W\Desktop\MBR.dat

2013-12-26 12:45 - 2013-12-01 22:00 - 00002183 _____ C:\Users\Public\Desktop\Advanced SystemCare 7.lnk

2013-12-26 12:30 - 2013-12-26 12:21 - 04745728 _____ (AVAST Software) C:\Users\Wolke\Desktop\aswMBR.exe

2013-12-26 12:16 - 2013-12-14 20:45 - 00000000 ____D C:\AdwCleaner

2013-12-26 12:15 - 2013-12-26 12:12 - 01233962 _____ C:\Users\W\Desktop\adwcleaner.exe

2013-12-26 09:00 - 2013-05-02 10:12 - 00000402 _____ C:\Windows\Tasks\Wise Turbo Checker.job

2013-12-26 08:31 - 2012-08-01 11:08 - 00000000 ____D C:\Users\W\AppData\Roaming\BitTorrent

2013-12-26 07:25 - 2013-11-26 14:37 - 00000000 ____D C:\Users\W\AppData\Roaming\Verbindungsassistent

2013-12-26 07:24 - 2013-12-16 17:38 - 00000510 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job

2013-12-25 20:00 - 2013-05-20 20:16 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-25 10:39 - 2013-03-25 16:00 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2013-12-25 05:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing

2013-12-24 20:02 - 2013-06-27 09:25 - 00000000 ____D C:\Games

2013-12-24 12:47 - 2013-12-23 16:27 - 00092120 _____ C:\Users\W\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-24 12:46 - 2013-12-01 22:02 - 00000000 ____D C:\ProgramData\ProductData

2013-12-24 12:46 - 2013-01-04 19:59 - 00000000 ____D C:\Users\W\AppData\Roaming\Wise Care 365

2013-12-24 12:45 - 2013-12-24 12:45 - 00000056 _____ C:\Windows\setupact.log

2013-12-24 12:45 - 2013-12-24 12:45 - 00000000 _____ C:\Windows\setuperr.log

2013-12-24 12:45 - 2013-12-24 12:44 - 00349400 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-24 12:45 - 2013-09-12 18:10 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2013-12-24 12:45 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-23 15:02 - 2012-11-20 11:31 - 00000000 ____D C:\Users\W\AppData\Roaming\Winamp

2013-12-23 12:34 - 2013-08-16 19:55 - 00000000 ____D C:\Users\W\AppData\Local\PrivaZer

2013-12-22 19:21 - 2013-12-22 19:22 - 00000174 _____ C:\Users\W\Downloads\mms.cfg

2013-12-22 14:39 - 2013-12-22 14:39 - 00000603 _____ C:\Users\W\Desktop\UpdateInfo.txt

2013-12-22 02:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-21 19:55 - 2012-07-27 18:09 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-12-21 19:54 - 2013-12-21 19:43 - 04645232 _____ (Piriform Ltd) C:\Users\W\Downloads\ccsetup409.exe

2013-12-21 19:54 - 2012-07-27 18:09 - 00000000 ____D C:\Program Files\CCleaner

2013-12-21 19:36 - 2013-01-22 19:23 - 00000000 ____D C:\Users\Wolke\AppData\Local\CrashDumps

2013-12-21 08:26 - 2012-08-13 17:34 - 00000000 ____D C:\Windows\Minidump

2013-12-21 07:57 - 2013-09-01 18:05 - 00000000 ____D C:\Program Files (x86)\PrivaZer

2013-12-21 07:57 - 2013-08-16 19:56 - 00001851 _____ C:\Users\Public\Desktop\PrivaZer.lnk

2013-12-20 17:42 - 2013-12-16 17:38 - 00000000 ____D C:\Program Files\SUPERAntiSpyware

2013-12-19 10:20 - 2011-04-12 08:43 - 00700720 _____ C:\Windows\system32\perfh007.dat

2013-12-19 10:20 - 2011-04-12 08:43 - 00150326 _____ C:\Windows\system32\perfc007.dat

2013-12-19 10:20 - 2009-07-14 06:13 - 01624106 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-18 17:35 - 2013-12-18 17:35 - 00000000 ____D C:\Program Files (x86)\ESET

2013-12-18 17:31 - 2013-12-18 17:27 - 02347384 _____ (ESET) C:\Users\Wolke\Desktop\esetsmartinstaller_deu.exe

2013-12-18 12:25 - 2013-12-18 12:08 - 00091342 _____ C:\Users\W\Downloads\FRST.txt

2013-12-18 12:09 - 2013-12-18 12:09 - 00020781 _____ C:\Users\W\Downloads\Addition.txt

2013-12-18 11:54 - 2013-12-15 23:21 - 00000000 ____D C:\FRST                                      

2013-12-17 18:33 - 2012-07-28 14:25 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-12-17 18:33 - 2012-07-27 16:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-12-17 15:19 - 2013-12-17 14:38 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-17 15:19 - 2013-12-17 12:04 - 00000000 ____D C:\Users\Wolke\Desktop\mbar

2013-12-17 14:48 - 2013-10-13 09:24 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit

2013-12-17 12:46 - 2013-12-04 12:55 - 00001423 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-17 12:44 - 2013-12-17 12:44 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll

2013-12-17 12:44 - 2013-12-17 12:44 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2013-12-17 12:04 - 2013-12-17 12:04 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-17 12:04 - 2013-12-17 12:03 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Wolke\Desktop\mbar-1.07.0.1008.exe

2013-12-17 10:44 - 2013-06-23 21:51 - 00000000 ____D C:\Program Files (x86)\GRID 2

2013-12-16 22:00 - 2013-12-16 21:50 - 30814600 _____ (JonDos GmbH) C:\Users\Wolke\Downloads\JonDoFox.paf.exe

2013-12-16 20:55 - 2012-10-30 07:45 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-12-16 20:13 - 2013-05-21 12:28 - 00000000 ____D C:\Program Files\PeerBlock

2013-12-16 19:02 - 2013-02-03 11:30 - 00000000 ____D C:\ProgramData\Spyware Terminator

2013-12-16 18:05 - 2012-07-27 15:55 - 00000000 ____D C:\Users\Wolke\AppData\Local\VirtualStore

2013-12-16 17:56 - 2013-12-15 21:02 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Nico Mak Computing

2013-12-16 17:38 - 2013-12-16 17:38 - 00003578 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838

2013-12-16 17:38 - 2013-12-16 17:38 - 00003504 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6

2013-12-16 17:38 - 2013-12-16 17:38 - 00001826 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\Users\W\AppData\Roaming\SUPERAntiSpyware.com

2013-12-16 17:38 - 2013-12-16 17:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com

2013-12-15 23:21 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default

2013-12-15 23:02 - 2013-12-15 23:02 - 00000020 _____ C:\Users\Wolke\defogger_reenable

2013-12-15 23:02 - 2012-07-27 15:54 - 00000000 ____D C:\Users\Wolke

2013-12-15 22:57 - 2013-12-15 22:57 - 00377856 _____ C:\Users\Wolke\Desktop\gmer_2.1.19163.exe

2013-12-15 22:28 - 2013-12-15 22:28 - 00012985 _____ C:\Users\Wolke\Desktop\my regis1.txt

2013-12-15 20:48 - 2013-11-12 10:32 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox

2013-12-15 20:34 - 2013-07-07 15:25 - 00000000 ____D C:\Users\Wolke\AppData\Local\Windows Live

2013-12-15 20:33 - 2013-07-07 15:33 - 00000000 ____D C:\Windows\de

2013-12-15 20:32 - 2013-12-15 20:32 - 00000020 _____ C:\Windows\v

2013-12-15 20:08 - 2013-12-15 20:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Eusing

2013-12-15 20:02 - 2013-12-15 20:02 - 00001041 _____ C:\Users\Administrator\Desktop\Eusing Free Registry Cleaner.lnk

2013-12-15 19:58 - 2012-07-27 16:48 - 00000000 ____D C:\Windows\Panther

2013-12-15 18:55 - 2013-12-15 18:55 - 00448512 _____ (OldTimer Tools) C:\Users\W\Downloads\TFC.exe

2013-12-15 18:51 - 2013-12-15 18:51 - 00114747 _____ C:\Users\Wolke\Downloads\NirSoft-MyUninstaller.exe

2013-12-15 16:59 - 2013-12-15 16:59 - 00001538 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk

2013-12-15 16:59 - 2013-12-15 16:59 - 00001217 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk

2013-12-15 16:59 - 2013-12-15 16:58 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-15 16:58 - 2013-07-17 08:45 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\DVDVideoSoft

2013-12-15 16:57 - 2013-12-15 16:54 - 33893112 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\W\Downloads\FreeYouTubeToMP3Converter3.12.17.1127.exe

2013-12-15 15:18 - 2013-03-02 23:13 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-12-15 15:04 - 2013-03-02 23:13 - 00000000 ____D C:\ProgramData\Skype

2013-12-15 13:35 - 2013-12-15 13:35 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ioloGovernor

2013-12-15 12:11 - 2013-12-15 12:11 - 00000869 _____ C:\Users\W\Documents\hosts.txt

2013-12-15 01:12 - 2013-12-15 00:50 - 00000000 ____D C:\Users\W\Desktop\VPN

2013-12-15 00:35 - 2013-12-15 00:35 - 00009184 _____ C:\Users\W\Downloads\VPNBook.com-OpenVPN-Euro1.zip

2013-12-15 00:35 - 2013-12-15 00:35 - 00009178 _____ C:\Users\W\Downloads\VPNBook.com-OpenVPN-Euro2.zip

2013-12-15 00:33 - 2013-12-15 00:33 - 00001356 _____ C:\Users\Public\Desktop\OpenVPN Client.lnk

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\W\AppData\Roaming\OpenVPN Technologies

2013-12-15 00:33 - 2013-12-15 00:33 - 00000000 ____D C:\Users\W\AppData\Local\OpenVPN Technologies

2013-12-15 00:32 - 2013-12-15 00:32 - 00000000 ____D C:\Program Files (x86)\OpenVPN Technologies

2013-12-15 00:27 - 2013-12-15 00:26 - 16289280 _____ C:\Users\W\Downloads\openvpn-client.msi

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\Users\W\AppData\Roaming\QFX Software

2013-12-14 23:56 - 2013-12-14 23:56 - 00000000 ____D C:\ProgramData\QFX Software

2013-12-14 23:47 - 2013-12-14 23:47 - 00000000 ____D C:\ProgramData\HideIPEasy

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Users\W\AppData\Local\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files\DoNotTrackPlus

2013-12-14 23:27 - 2013-12-14 23:27 - 00000000 ____D C:\Program Files (x86)\DoNotTrackPlus

2013-12-14 23:21 - 2013-12-14 23:21 - 01279384 _____ C:\Users\Wolke\Downloads\KeyScrambler_Setup.exe

2013-12-14 23:21 - 2013-12-14 23:21 - 00000000 ____D C:\Program Files (x86)\KeyScrambler

2013-12-14 22:43 - 2013-12-14 22:19 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2013-12-14 22:33 - 2013-06-11 17:38 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-14 22:25 - 2013-06-11 17:38 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\TuneUp Software

2013-12-14 22:07 - 2013-07-08 13:37 - 1086264402 _____ C:\Users\Wolke\Downloads\GGG.Sperma.Fuck.DVDRip.XxX.avi

2013-12-14 20:59 - 2012-08-15 13:37 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\CheckPoint

2013-12-14 20:49 - 2013-12-14 20:49 - 00000000 ____D C:\Windows\ERUNT

2013-12-14 20:48 - 2013-12-14 20:48 - 01034531 _____ (Thisisu) C:\Users\Wolke\Desktop\JRT.exe

2013-12-14 18:52 - 2013-12-02 00:31 - 00001054 _____ C:\Users\Wolke\Desktop\BitTorrent.lnk

2013-12-14 17:21 - 2013-12-14 17:18 - 00000000 ____D C:\ProgramData\COMODO

2013-12-14 17:19 - 2013-12-14 17:18 - 00000000 ____D C:\Program Files\COMODO

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\Users\Wolke\AppData\Local\Comodo

2013-12-14 17:18 - 2013-12-14 17:18 - 00000000 ____D C:\first_launch

2013-12-14 17:17 - 2013-12-14 17:17 - 00000000 ____D C:\ProgramData\Comodo Downloader

2013-12-14 17:14 - 2013-12-14 16:59 - 211388240 _____ (COMODO) C:\Users\W\Downloads\cfw_installer.exe

2013-12-14 15:30 - 2013-12-14 15:29 - 25563488 _____ (IObit                                                       ) C:\Users\W\Downloads\imf-setup.exe

2013-12-14 13:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-13 13:18 - 2013-07-13 00:22 - 00000000 ____D C:\Users\W\AppData\Roaming\vlc

2013-12-13 09:07 - 2013-12-13 09:07 - 00001427 _____ C:\Users\W\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-13 09:05 - 2013-01-21 17:58 - 00000000 ____D C:\ProgramData\iolo

2013-12-13 09:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-13 08:57 - 2013-12-13 08:57 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 08:57 - 2013-12-13 08:57 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-13 08:57 - 2013-12-13 08:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-13 08:57 - 2013-12-13 08:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-13 08:57 - 2013-12-13 08:57 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 08:57 - 2013-12-13 08:57 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-13 08:48 - 2013-07-19 19:29 - 00000000 ____D C:\Windows\system32\MRT

2013-12-13 08:46 - 2013-12-13 08:46 - 00003118 _____ C:\Windows\System32\Tasks\iolo Process Governor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\Users\W\AppData\Roaming\ioloGovernor

2013-12-13 08:46 - 2013-12-13 08:46 - 00000000 ____D C:\ProgramData\ioloGovernor

2013-12-13 08:46 - 2013-01-21 18:00 - 00001395 _____ C:\Users\W\Desktop\System Mechanic.lnk

2013-12-13 08:44 - 2012-07-27 17:41 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-13 08:42 - 2013-10-13 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-10 23:02 - 2013-11-12 10:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-10 22:02 - 2013-12-10 22:02 - 00000000 ____D C:\Users\Wolke\Downloads\backups

2013-12-10 19:56 - 2013-12-10 19:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-09 16:14 - 2013-12-15 18:42 - 00138724 _____ C:\Users\Wolke\Documents\useragents.xml

2013-12-08 20:30 - 2013-08-14 21:00 - 00000000 ____D C:\Users\Public\Documents\My Projects

2013-12-08 19:55 - 2013-05-20 20:16 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-08 19:55 - 2013-05-20 20:16 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-05 10:10 - 2013-05-20 20:20 - 00002531 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-12-04 14:12 - 2013-12-04 14:12 - 00000000 _____ C:\Windows\NDSTray.INI

2013-12-04 13:33 - 2013-12-04 13:33 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\iolo

2013-12-04 13:31 - 2013-12-04 13:31 - 00000086 _____ C:\Users\Administrator\Desktop\ok.txt

2013-12-04 13:24 - 2013-12-04 13:24 - 00092120 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-04 13:24 - 2013-12-04 13:24 - 00001205 _____ C:\Users\Administrator\Desktop\Windows Media Center-Verknüpfungen.lnk

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\ATI

2013-12-04 13:01 - 2013-12-04 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\ATI

2013-12-04 12:58 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Mozilla

2013-12-04 12:57 - 2013-12-04 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Mozilla

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\AVAST Software

2013-12-04 12:56 - 2013-12-04 12:56 - 00000000 ____D C:\Users\Administrator\AppData\Local\Toshiba

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-04 12:56 - 2013-12-04 12:54 - 00000000 ___RD C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-04 12:55 - 2013-12-04 12:55 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe

2013-12-04 12:54 - 2013-12-04 12:52 - 00000000 ____D C:\Users\Administrator

2013-12-04 12:53 - 2013-12-04 12:53 - 00000306 __RSH C:\Users\Administrator\ntuser.pol

2013-12-04 12:53 - 2013-12-04 12:53 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\IObit

2013-12-04 12:52 - 2013-12-04 12:52 - 00000020 ___SH C:\Users\Administrator\ntuser.ini

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Vorlagen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Startmenü

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten

2013-12-04 12:52 - 2013-12-04 12:52 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten

2013-12-04 11:28 - 2013-12-04 11:28 - 00139375 _____ C:\Users\Wolke\Downloads\useragentswitcher.xml

2013-12-03 10:47 - 2013-01-21 18:00 - 00057584 _____ (iolo technologies, LLC) C:\Windows\system32\iolobtdfg.exe

2013-12-03 10:47 - 2013-01-21 18:00 - 00026184 _____ (iolo technologies, LLC) C:\Windows\system32\smrgdf.exe

2013-12-03 10:01 - 2013-12-13 08:46 - 02155152 _____ (iolo technologies, LLC) C:\Windows\system32\Incinerator64.dll

2013-12-03 10:01 - 2013-01-21 18:00 - 02097984 _____ (iolo technologies, LLC) C:\Windows\SysWOW64\Incinerator32.dll

2013-12-02 23:11 - 2012-08-24 09:30 - 00000000 ____D C:\Windows\SysWOW64\directx

2013-12-02 23:09 - 2013-12-02 23:09 - 09304408 _____ (Wargaming.net                                               ) C:\Users\W\Downloads\WoT_internet_install_eu.exe

2013-12-02 22:10 - 2013-10-14 11:05 - 844549621 _____ C:\Users\W\Downloads\Emma und Cony im Sperma Labyrinth_26539.mp4

2013-12-02 22:08 - 2013-12-02 22:08 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\wargaming.net

2013-12-02 18:33 - 2013-05-04 13:48 - 00012257 _____ C:\Windows\wininit.ini

2013-12-02 17:35 - 2012-07-31 13:10 - 00000000 ____D C:\ProgramData\SecTaskMan

2013-12-02 07:32 - 2013-12-02 07:32 - 00000000 _____ C:\asc_rdflag

2013-12-02 00:41 - 2013-12-02 00:41 - 00000000 ____D C:\Users\Wolke\Downloads\9

2013-12-02 00:31 - 2013-12-02 00:31 - 00000817 _____ C:\Users\Wolke\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2013-12-01 22:02 - 2013-12-01 22:02 - 00003094 _____ C:\Windows\System32\Tasks\ASC7_PerformanceMonitor

2013-12-01 22:02 - 2013-06-14 16:02 - 00000000 ____D C:\Program Files (x86)\IObit

2013-12-01 22:02 - 2012-08-26 15:09 - 00000000 ____D C:\Users\Wolke\AppData\Roaming\IObit

2013-12-01 22:00 - 2013-12-01 22:00 - 00002850 _____ C:\Windows\System32\Tasks\ASC7_SkipUac_w

2013-12-01 22:00 - 2013-12-01 22:00 - 00000000 ____D C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-01 22:00 - 2012-11-14 11:32 - 00000000 ____D C:\ProgramData\IObit

2013-12-01 21:56 - 2013-12-01 21:47 - 34466768 _____ (IObit                                                       ) C:\Users\W\Downloads\asc-setup.exe

2013-12-01 18:33 - 2013-12-01 18:32 - 08988024 _____ (Wargaming.net                                               ) C:\Users\w\Downloads\WoWP_internet_install_eu.exe

2013-12-01 13:34 - 2013-03-03 20:18 - 00000000 ____D C:\Users\W\AppData\Local\Adobe

2013-11-30 17:43 - 2013-11-30 17:43 - 06813969 _____ C:\Users\W\Downloads\edit.wmv

2013-11-30 16:19 - 2013-11-30 16:14 - 26870710 _____ (Opera Software ASA) C:\Users\Wolke\Downloads\Opera_18.0.1284.49_Setup.exe

2013-11-30 16:13 - 2012-07-27 18:13 - 01598386 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-11-30 01:56 - 2013-08-10 09:18 - 00000094 _____ C:\Users\W\AppData\Roaming\WB.CFG

2013-11-30 01:56 - 2013-06-17 21:56 - 00000006 _____ C:\Users\W\AppData\Roaming\WBPU-TTL.DAT

2013-11-26 14:45 - 2013-11-26 14:45 - 00002093 _____ C:\Users\Public\Desktop\Verbindungsassistent.lnk

2013-11-26 14:45 - 2013-11-26 14:45 - 00000000 ____D C:\Program Files (x86)\Verbindungsassistent

2013-11-26 14:44 - 2013-11-26 14:44 - 00003110 _____ C:\Windows\System32\Tasks\{118E943C-FA3E-4501-BB6A-949660E0E25C}

2013-11-26 14:36 - 2013-11-26 14:36 - 00115328 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys

2013-11-26 14:21 - 2013-11-26 14:21 - 00003062 _____ C:\Windows\System32\Tasks\{048D57CD-13B2-4A16-A1F0-1F769A64BD06}

2013-11-26 13:53 - 2013-11-26 13:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf

2013-11-26 13:52 - 2013-11-26 13:52 - 00000000 ____D C:\ProgramData\Mobile Partner

2013-11-26 12:54 - 2013-12-14 11:53 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-14 11:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-14 11:53 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-14 11:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-14 11:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-14 11:53 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-14 11:53 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-14 11:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-14 11:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-14 11:53 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-14 11:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-14 11:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-14 11:53 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-14 11:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-14 11:53 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-14 11:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-14 11:52 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-14 11:53 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-14 11:53 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-14 11:53 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-14 11:53 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-14 11:53 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-14 11:53 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-14 11:53 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-14 11:53 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 08:03 - 2013-10-20 18:33 - 00000000 ____D C:\Users\W\AppData\Roaming\medion

2013-11-26 07:40 - 2013-12-14 11:53 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-14 11:53 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-14 11:53 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-14 11:53 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-22 02:03
 

==================== End Of Log ============================

--- --- ---

--- --- ---

lakil

26.12.2013 19:24

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-12-2013

Ran by  at 2013-12-26 18:53:50

Running from C:\Users\W\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)

Advanced SystemCare 7 (x32 Version: 7.0.6)

AMD Accelerated Video Transcoding (Version: 13.20.100.30723)

AMD Catalyst Control Center (x32 Version: 2013.0723.1944.33607)

AMD Catalyst Install Manager (Version: 8.0.915.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.80723.2017)

AMD Wireless Display v3.0 (Version: 1.0.0.13)

avast! Free Antivirus (x32 Version: 9.0.2008)

Bing-Desktop (x32 Version: 1.3.171.0)

BitTorrent (HKCU Version: 7.8.2.30332)

Broadcom 802.11 Network Adapter (Version: 5.60.48.35)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center InstallProxy (x32 Version: 2013.0723.1944.33607)

Catalyst Control Center Localization All (x32 Version: 2013.0723.1944.33607)

CCC Help Chinese Standard (x32 Version: 2013.0723.1943.33607)

CCC Help Chinese Traditional (x32 Version: 2013.0723.1943.33607)

CCC Help Czech (x32 Version: 2013.0723.1943.33607)

CCC Help Danish (x32 Version: 2013.0723.1943.33607)

CCC Help Dutch (x32 Version: 2013.0723.1943.33607)

CCC Help English (x32 Version: 2013.0723.1943.33607)

CCC Help Finnish (x32 Version: 2013.0723.1943.33607)

CCC Help French (x32 Version: 2013.0723.1943.33607)

CCC Help German (x32 Version: 2013.0723.1943.33607)

CCC Help Greek (x32 Version: 2013.0723.1943.33607)

CCC Help Hungarian (x32 Version: 2013.0723.1943.33607)

CCC Help Italian (x32 Version: 2013.0723.1943.33607)

CCC Help Japanese (x32 Version: 2013.0723.1943.33607)

CCC Help Korean (x32 Version: 2013.0723.1943.33607)

CCC Help Norwegian (x32 Version: 2013.0723.1943.33607)

CCC Help Polish (x32 Version: 2013.0723.1943.33607)

CCC Help Portuguese (x32 Version: 2013.0723.1943.33607)

CCC Help Russian (x32 Version: 2013.0723.1943.33607)

CCC Help Spanish (x32 Version: 2013.0723.1943.33607)

CCC Help Swedish (x32 Version: 2013.0723.1943.33607)

CCC Help Thai (x32 Version: 2013.0723.1943.33607)

CCC Help Turkish (x32 Version: 2013.0723.1943.33607)

ccc-utility64 (Version: 2013.0723.1944.33607)

CCleaner (Version: 4.09)

Conexant Audio Driver For AMD HDMI/DP Codec (Version: 4.98.32.50)

DAEMON Tools Lite (x32 Version: 4.47.1.0333)

Do Not Track Me Add-on 2.2.9.1112 (x32 Version: 2.2.9.1112)

ESET Online Scanner v3 (x32)

Free YouTube to MP3 Converter version 3.12.17.1127 (x32 Version: 3.12.17.1127)

Google Chrome (x32 Version: 31.0.1650.63)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.22.3)

HydraVision (x32 Version: 4.2.252.0)

Intel(R) Control Center (x32 Version: 1.2.1.1008)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)

Intel(R) Rapid Storage Technology (x32 Version: 11.5.2.1001)

Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002)

iolo technologies' System Mechanic (x32 Version: 12.5.0)

Java 7 Update 45 (x32 Version: 7.0.450)

Java Auto Updater (x32 Version: 2.1.9.8)

KeyScrambler (x32 Version: 3.3.0.0)

K-Lite Mega Codec Pack 3.9.5 (x32 Version: 3.9.5)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)

Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)

Mozilla Maintenance Service (x32 Version: 26.0)

MSVCRT Redists (Version: 1.0)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

neroxml (x32 Version: 1.0.0)

NVIDIA PhysX (x32 Version: 9.10.0513)

OpenAL (x32)

OpenVPN Client (x32 Version: 1.5.6)

Opera 12.16 (Version: 12.16.1860)

PeerBlock 1.1 (r518) (Version: 1.1.0.518)

Pidgin (x32 Version: 2.10.7)

Pinnacle Video Treiber (Version: 12.1.0.030)

PrivaZer (x32 Version: 2.12.0.0)

Project64 1.6 (x32 Version: 1.6)

Realtek Ethernet Controller Driver (x32 Version: 7.47.714.2011)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6687)

Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30111)

Secure Eraser (x32 Version: 4.2.0.1)

Simple Adblock (x32 Version: 1.1.5)

Sophos Virus Removal Tool (x32 Version: 2.2)

Spybot - Search & Destroy (x32 Version: 2.1.19)

Spyware Terminator 2012 (x32 Version: 3.0.0.80)

SUPERAntiSpyware (Version: 5.7.1010)

Synaptics Pointing Device Driver (Version: 15.0.8.1)

Tinypic 3.18 (x32 Version: Tinypic 3.18)

Tom Clancy's H.A.W.X. 2 (x32 Version: 1.0.0)

Toshiba Assist (x32 Version: 3.00.11)

TOSHIBA Bulletin Board (Version: 1.6.07.64)

TOSHIBA Bulletin Board (x32 Version: 1.6.07.64)

TOSHIBA ConfigFree (x32 Version: 8.0.35)

TOSHIBA eco Utility (Version: 1.2.11.64)

TOSHIBA eco Utility (x32 Version: 1.2.11.64)

TOSHIBA Flash Cards Support Utility (x32 Version: 1.63.0.11C)

TOSHIBA HDD/SSD Alert (Version: 3.1.64.6)

TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.6)

TOSHIBA PC Health Monitor (Version: 1.6.0.64)

TOSHIBA Places Icon Utility (x32 Version: 1.1.1.4)

TOSHIBA ReelTime (Version: 1.6.06.64)

TOSHIBA ReelTime (x32 Version: 1.6.06.64)

TOSHIBA Service Station (x32 Version: 2.2.9)

TOSHIBA TEMPRO (x32 Version: 3.35)

TOSHIBA Value Added Package (Version: 1.3.19.64)

TOSHIBA Value Added Package (x32 Version: 1.3.19.64)

TOSHIBA Web Camera Application (x32 Version: 1.1.1.15)

Ubisoft Game Launcher (x32 Version: 1.0.0.0)

Verbindungsassistent (x32 Version: 2.1)

Winamp (x32 Version: 5.63 )

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)

Windows Doctor 2.7.3 (x32)

Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

WinRAR 4.20 (64-Bit) (Version: 4.20.0)

Wise Care 365 version 2.87 (x32 Version: 2.87)

XMedia Recode Version 3.1.4.5 (x32 Version: 3.1.4.5)

xp-AntiSpy 3.98-2 (x32)
 

==================== Restore Points  =========================
 

17-12-2013 12:11:51 Removed GeekBuddy.

17-12-2013 17:33:02 Installiert Tom Clancy's H.A.W.X. 2

20-12-2013 07:32:52 Windows Update

22-12-2013 12:01:46 Installed Microsoft Fix it 50195

24-12-2013 10:14:26 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-04-14 22:31 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {07E0090C-042A-4FF5-A123-9D28761DDC37} - System32\Tasks\{4259E698-0EAE-4388-B42C-86F91FF49F20} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {0F272DD7-5149-4663-A06D-01D62BFC046F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {286D0DDA-0C1D-42E8-A262-49CDA84A3ED4} - System32\Tasks\Pointstone\System Cleaner\Startup Dialog => C:\Program Files (x86)\Pointstone\System Cleaner 7\Helper.exe

Task: {2BF90F22-2435-4F5D-93F6-629C720F25FE} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

Task: {403A2650-A617-49E0-B410-CABEA9E347DD} - System32\Tasks\{996830C2-66C4-4C0C-BB9D-C43C5FEC202D} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {537C03F3-BB91-4D75-94A3-596785E3D9CA} - System32\Tasks\{944B9192-41AB-4674-9384-5EEFA0886B8A} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {5C5DF0FC-4C4C-44DA-A0A6-F37CB80CFA10} - System32\Tasks\{81607F8B-DCE4-401E-9A39-A64D15BB2225} => C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent.exe [2009-03-03] (WebToGo Mobile Internet GmbH)

Task: {67607FD3-61CD-4122-B49D-42E738C3002E} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3583547410-2317155067-1929240655-1000

Task: {677C707B-1A32-48F5-B49C-9BE32D860E7A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)

Task: {6C43EEA9-587F-47BD-9326-1A8621B029EC} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)

Task: {789AF10D-80DA-47C7-A019-473DDB792733} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-06-03] (TOSHIBA CORPORATION)

Task: {8C097928-E444-430E-AFBC-D84A47246952} - System32\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {9A2A51EA-B167-422D-BE24-9422C74727FE} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe [2013-12-03] (iolo technologies, LLC)

Task: {A3D1F86F-2BDC-4248-9E8D-4DF5F3F80926} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {A8287ACD-892E-435D-A994-B0D8C9D7E6D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {C52EB4D8-7E5A-4D10-96A3-F88CD05B9BC3} - \DSite No Task File

Task: {C8E99B63-0C76-4075-95A8-87FBAFC776F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-12] (AVAST Software)

Task: {CA7EE6E1-03CC-4CEB-9DA6-A15A6D86BF4C} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2013-08-22] (WiseCleaner.COM)

Task: {DADF2B40-7B1A-41AF-9894-84DF1A5BFF43} - System32\Tasks\{4A91DEF5-6223-4882-BB49-04163FC708D8} => C:\Program Files (x86)\Activision\Transformers Fall of Cybertron\Binaries\TFOC.exe

Task: {DC699450-1128-4B8C-BA85-791F296ED439} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-20] (Google Inc.)

Task: {E233ED1D-20C3-44F8-AB2C-817155153D21} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {E4AFDA1A-E879-4A62-AE69-A1D38D76A5B7} - System32\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)

Task: {E57F50A2-05DA-40A2-9346-3F8B59125288} - System32\Tasks\ASC7_SkipUac_Wolke => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2013-11-18] (IObit)

Task: {F31FFD37-7725-4B7B-BC4A-C4B7E0336100} - System32\Tasks\{1A8566DC-26EF-4235-B528-B092A5B1AAFF} => Chrome.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?source=lightinstaller&amp;page=tsInstall

Task: {FF81C936-9663-43C9-8D74-F53A1C1592A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 27e5c1c9-c270-4fe0-a889-01ddba0e89e6.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 7d70b084-ee2f-40dd-a399-febbe0c48838.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-10-14 20:38 - 2012-09-07 15:57 - 00559424 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll

2013-11-01 08:50 - 2013-11-01 08:50 - 03525687 _____ () C:\Program Files (x86)\PrivaZer\PrivaMenu3.dll

2010-04-07 15:07 - 2010-04-07 15:07 - 09468728 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

2009-11-03 12:26 - 2009-11-03 12:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll

2010-03-03 13:15 - 2010-03-03 13:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll

2012-07-27 16:50 - 2009-06-22 13:40 - 00022328 _____ () C:\Program Files\TOSHIBA CORPORATION\Toshiba Assist\NotifyX.dll

2009-03-12 18:08 - 2009-03-12 18:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll

2010-04-06 13:53 - 2010-04-06 13:53 - 00578936 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll

2010-02-05 16:44 - 2010-02-05 16:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll

2013-12-01 22:00 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll

2013-12-26 11:26 - 2013-12-26 10:19 - 02153984 _____ () C:\Program Files\AVAST Software\Avast\defs\13122600\algo.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00028160 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\servicemanager.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pywintypes26.dll

2009-07-05 06:35 - 2009-07-05 06:35 - 00041472 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32service.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00096256 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32api.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00153088 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\pyexpat.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00040448 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_socket.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00645120 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ssl.pyd

2010-03-16 13:05 - 2010-03-16 13:05 - 00020480 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\zope.interface._zope_interface_coptimizations.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00311808 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_hashlib.pyd

2009-10-26 09:25 - 2009-10-26 09:25 - 00073728 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\_ctypes.pyd

2009-10-26 09:27 - 2009-10-26 09:27 - 00011776 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\select.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00010752 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.rand.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00051200 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.crypto.pyd

2010-05-05 13:44 - 2010-05-05 13:44 - 00039936 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\OpenSSL.SSL.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00036352 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32process.pyd

2010-05-05 13:43 - 2010-05-05 13:43 - 00008192 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\twisted.protocols._c_urlarg.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32security.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00017920 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32event.pyd

2009-07-06 04:16 - 2009-07-06 04:16 - 00111104 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32file.pyd

2009-07-05 06:35 - 2009-07-05 06:35 - 00024064 _____ () C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\win32pipe.pyd

2013-11-12 10:09 - 2013-11-12 10:09 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2013-07-16 21:20 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2013-07-16 21:20 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2013-07-16 21:20 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2013-07-16 21:20 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2013-11-29 20:01 - 2013-11-29 20:01 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\c928e05ad4d57c6ce294ae68e8598b0f\PSIClient.ni.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00524288 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgCore.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00139264 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgBluetooth.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00065536 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDialup.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgUtil.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00090112 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgPorts.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00106496 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDatabase.dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00143360 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDetection.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00053248 ____N () C:\Program Files (x86)\Verbindungsassistent\WtgDriverInstall.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 06057984 ____N () C:\Program Files (x86)\Verbindungsassistent\VerbindungsassistentGer.dll

2013-11-26 14:45 - 2009-03-03 12:40 - 00204800 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGSMSPCClient.Dll

2013-11-26 14:45 - 2009-03-03 12:39 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDebugs.dll

2013-11-26 14:45 - 2009-03-03 12:43 - 00016384 ____N () C:\Program Files (x86)\Verbindungsassistent\Verbindungsassistent_WTGSMSPCClientGer.dll

2013-11-26 14:45 - 2009-03-03 12:42 - 00024576 ____N () C:\Program Files (x86)\Verbindungsassistent\WTGDriverInstallX.Dll

2013-12-17 12:55 - 2011-12-15 20:29 - 00090112 _____ () C:\Program Files\\OpenVPN\lzo2.dll

2013-12-10 19:56 - 2013-12-10 19:56 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:430C6D84

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 

Name: Broadcom 802.11n-Netzwerkadapter

Description: Broadcom 802.11n-Netzwerkadapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: BCM43XX

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/26/2013 02:42:49 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/26/2013 00:51:25 PM) (Source: VSS) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040154, Klasse nicht registriert

.
 
 

Vorgang:

   VSS-Server wird instanziiert
 

Error: (12/26/2013 00:51:25 PM) (Source: VSS) (User: )

Description: Fehler im Volumenschattenkopie-Dienst: Eine vom Volumenschattenkopie-Dienst benötigte kritische Komponente ist nicht registriert.

Dies kann geschehen, wenn bei der Windows-Installation oder bei der Installation eines Schattenkopieanbieters ein Fehler aufgetreten ist.

Der von CoCreateInstance für die Klasse mit CLSID "{e579ab5f-1cc4-44b4-bed9-de0991ff0623}" und dem Namen "IVssCoordinatorEx2" zurückgegebene Fehler ist [0x80040154, Klasse nicht registriert

].
 
 

Vorgang:

   VSS-Server wird instanziiert
 

Error: (12/24/2013 10:09:50 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/24/2013 09:00:02 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/24/2013 08:59:59 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/24/2013 08:59:58 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/24/2013 07:50:10 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/24/2013 07:50:05 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/24/2013 07:50:03 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (12/24/2013 00:49:02 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (12/24/2013 00:46:16 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (12/24/2013 00:46:15 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/24/2013 00:46:15 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
 
 

Microsoft Office Sessions:

=========================

Error: (12/26/2013 02:42:49 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
 

Error: (12/26/2013 00:51:25 PM) (Source: VSS)(User: )

Description: CoCreateInstance0x80040154, Klasse nicht registriert
 
 

Vorgang:

   VSS-Server wird instanziiert
 

Error: (12/26/2013 00:51:25 PM) (Source: VSS)(User: )

Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x80040154, Klasse nicht registriert
 
 

Vorgang:

   VSS-Server wird instanziiert
 

Error: (12/24/2013 10:09:50 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (12/24/2013 09:00:02 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\W\Desktop\esetsmartinstaller_deu.exe
 

Error: (12/24/2013 08:59:59 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\W\Desktop\esetsmartinstaller_deu.exe
 

Error: (12/24/2013 08:59:58 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\W\Desktop\esetsmartinstaller_deu.exe
 

Error: (12/24/2013 07:50:10 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\W\Desktop\esetsmartinstaller_deu.exe
 

Error: (12/24/2013 07:50:05 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\W\Desktop\esetsmartinstaller_deu.exe
 

Error: (12/24/2013 07:50:03 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\W\Desktop\esetsmartinstaller_deu.exe
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 59%

Total physical RAM: 3954.67 MB

Available physical RAM: 1616.14 MB

Total Pagefile: 6178.09 MB

Available Pagefile: 1533 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:297.99 GB) (Free:173.73 GB) NTFS

Drive e: (MEDION) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 40D49AEE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

cosinus

26.12.2013 20:39

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2413} URL = 

SearchScopes: HKCU - DefaultScope {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

SearchScopes: HKCU - {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = http://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

lakil

26.12.2013 21:32

Zitat:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Gerne ....aber Fixlog.txt läst sich nicht abspeichern auf dem Desktop....
Hm vielleicht weil schon ein Fixlog.txt vorhanden ist??

cosinus

26.12.2013 22:27

Sinnigerweise die alte fixlog.txt überschreiben? :(

lakil

26.12.2013 22:53

ja ok werds versuchen

-Habe die alte Datei Fixlog überschrieben...

-FSRT64 ausgeführt

Fehler Meldung:No Fixlog found.Fixlist schould be.....same directory as tool....

Beide Dateien befinden sich auf dem Desktop...

cosinus

26.12.2013 23:15

Sollte natürlich fixlist.txt heißen und nicht fixlog.txt

lakil

27.12.2013 00:11

Zitat:

-FSRT64 ausgeführt

Fehler Meldung:No Fixlog found.Fixlog schould be.....same directory as FRST tool....

Beide Dateien befinden sich auf dem Desktop...

Und eine ahnung warum diese aktion nicht ausgeführt werden kann?

cosinus

27.12.2013 01:37

Tja ich glaub du machst da einiges falsch :D

lakil

27.12.2013 07:46

Lach...ok und was bitte?:(

cosinus

27.12.2013 16:15

Du setzt die Anleitung nicht 1:1 um ;)

lakil

27.12.2013 19:07

Zitat:

Zitat von cosinus (Beitrag 1220141)

Du setzt die Anleitung nicht 1:1 um ;)

Zitat:

Zitat von cosinus (Beitrag 1220141)

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Fix Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Genau so wie es da oben steht.
Ich glaub es ist eher so das du die Anleitung nicht zu 1:1 formulierst:wtf:

cosinus

28.12.2013 15:52

Zitat:

Zitat von lakil (Beitrag 1220263)

Genau so wie es da oben steht.
Ich glaub es ist eher so das du die Anleitung nicht zu 1:1 formulierst:wtf:

LOL :rofl:
Komischerweise klappt die Umsetzung der Anleitung bei allen anderen hier auch, also bitte nochmal sorgfältiger lesen und arbeiten :D

lakil

29.12.2013 06:54

Zitat:

Zitat von cosinus (Beitrag 1220579)

LOL :rofl:
Komischerweise klappt die Umsetzung der Anleitung bei allen anderen hier auch, also bitte nochmal sorgfältiger lesen und arbeiten :D

Wie schon gesagt erscheint die fehlermeldung:

Fehler Meldung:No Fixlog found.Fixlog schould be.....same directory as FRST tool....

Beide Dateien befinden sich auf dem desktop...Hallo! Deutlicher gehts kaum oder?
Bei mir funtktioniert dieser schritt nicht...warum..?`weiss ich auch nicht....
Habe FRST64 neu herunter geladen...klappt aber nicht
Soll ich das Fixlog komplett löschen und dann neu erstellen?Headbang

Wenn Sie mir jetzt nicht weiter helfen wollen können wir das hiermit auch beenden meinetwegen.

cosinus

29.12.2013 21:06

Zitat:

Beide Dateien befinden sich auf dem desktop...Hallo! Deutlicher gehts kaum oder?
Bei mir funtktioniert dieser schritt nicht...warum..?`weiss ich auch nicht....

Dateinamen falsch geschrieben. Was anderes kann's einfach nicht sein, wenn er die Datei nicht findet und du sicher bist, dass die Textdatei im selben Verzeichnis liegt wie die FRST.exe (beide sollten auf dem Desktop sein)

lakil

30.12.2013 06:00

Zitat:

Zitat von cosinus (Beitrag 1221380)

es is aber was anderes habe genau nach der Anweisung gehandelt...
Die datei überschrieben als Fixlist.txt
Auf dem desktop heisst die Datei Fixlog.
Daran liegt es nicht....es heisst ja das die beiden Dateien Fixlog und FRST64 angeblich beide nicht auf dem Desktop sind was jedoch falsch ist.:nono:

cosinus

30.12.2013 11:09

Sry keine Ahung was du da treibst...lösch einfach alle Dateien und mach es nochmal

lakil

30.12.2013 11:36

Okey...lach
Jetzt hab ichs...

Code:



result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-12-2013 01

Ran by Wolke at 2013-12-30 11:30:15 Run:2

Running from C:\Users\W\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie

SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2413} URL = 

SearchScopes: HKCU - DefaultScope {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

SearchScopes: HKCU - {5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}

FF Homepage: hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff

FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=

*****************
 

HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} => Key deleted successfully.

HKCR\CLSID\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9} => Key not found.

Firefox homepage deleted successfully.

Firefox Keyword.URL deleted successfully.
 

==== End of Fixlog ====

cosinus

30.12.2013 11:41

Geht doch :applaus: :applaus:

Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

lakil

30.12.2013 11:44

Nein is es leider nicht :(
Dieser schritt hat nix gebracht.....
Nach wie vor erscheinen diese Seiten in allen 3 ie explorern :(

Ich habe vorbeugende masnahmen schon gertroffen gehabt mit Cookie Monster und Noscript kenn mich damit auch aus aber habe natürlich keine erweitertes wissen darüber.
Solche sacchen passieren eher beim download verschiedener programme meiner meinung nach..........

hmm

cosinus

30.12.2013 12:54

Zitat:

in allen 3 ie explorern

Was bitte sind alle "3 ie explorern"
Du kannst nur einen Internet Explorer installiert und nicht drei verschiedene Versionen aufeinmal.

Führ auch mal den Shortcut Cleaner aus

Downloade dir bitte Shortcut Cleaner (by Grinler) auf deinen Desktop.

Starte die sc-cleaner.exe mit einem Doppelclick.
Bestätige die Meldung Shortcut Cleaner Finished am Ende des Suchlaufs mit Ok.
Eine Logdatei wird sich öffnen (sc-cleaner.txt).
Poste den Inhalt mit deiner nächsten Antwort.

lakil

30.12.2013 17:47

Ich meinte natürlich Internet explorer allgemein Fire/Chrome/IExp.

Code:

Shortcut Cleaner 1.2.6 by Lawrence Abrams (Grinler)

hxxp://www.bleepingcomputer.com/

Copyright 2008-2013 BleepingComputer.com

More Information about Shortcut Cleaner can be found at this link:

 hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/
 

Windows Version: Windows  Home Service Pack 1

Program started at: 12/30/2013 05:45:56 PM.
 

Scanning for registry hijacks:
 

 * No issues found in the Registry.
 

Searching for Hijacked Shortcuts:
 

Searching C:\Users\W\AppData\Roaming\Microsoft\Windows\Start Menu\
 

Searching C:\ProgramData\Microsoft\Windows\Start Menu\
 

Searching C:\Users\W\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\
 

Searching C:\Users\Public\Desktop\
 

Searching C:\Users\W\Desktop
 
 

0 bad shortcuts found.
 

Program finished at: 12/30/2013 05:46:00 PM

Execution time: 0 hours(s), 0 minute(s), and 3 seconds(s)

cosinus

30.12.2013 18:26

Auch der Shorrtcutcleaner hat nixhts gefunden. Das restliche was mit FRST sichtbar war gefixt.
Was bitte wird jetzt GENAU noch geöffnet?

lakil

30.12.2013 18:52

Zitat:

Zitat von cosinus (Beitrag 1221943)

Was bitte wird jetzt GENAU noch geöffnet?

Was geöffnet wird?
Der Kühlschrank?:rolleyes:

cosinus

30.12.2013 18:54

Gut, also brauchste keine Hilfe mehr.

lakil

30.12.2013 18:59

Eig schon..aber wir kommen halt nicht weiter mit dem werkzeug was wie einsetzen....
Das Problem besteht weiterhin....
Finds aber total nett von euch das ihr den leuten im rahmen eurer möglichkeiten hilft....

cosinus

30.12.2013 19:03

Zitat:

Das Problem besteht weiterhin....

Was soll das...ich hab dich vorhin gebeten EXAKT mitzuteilen welche Seiten genau sich noch ungewollt öffnen und du kommst einfach mit einem "Problem besteht noch"....sowas nervt :twak:

lakil

30.12.2013 20:29

Zitat:

Was soll das...ich hab dich vorhin gebeten EXAKT mitzuteilen welche Seiten genau sich noch ungewollt öffnen und du kommst einfach mit einem "Problem besteht noch"....sowas nervt

Das hier ist immernoch vorhanden. :confused:
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Firefox:hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ff <>läst sich nicht entfernen< (im private modus nicht vorhanden)

G Chrome:hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch <>aus dem Browser nicht zu entfernen (im private modus nicht vorhanden)

IExplorer:hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ch[/U] Browser HiJacker immer als Startseite vorhanden läst sich nicht entfernen (im private modus nicht vorhanden)[/QUOTE]

cosinus

30.12.2013 20:38

Und genau den Mist hatten wir mit FRST entfernt. Naja. :balla:

Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code:

:filefind *spigot* :folderfind *spigot* :regfind spigot
Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

lakil

30.12.2013 20:39

[QUOTE=cosinus;1221728]Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.[QUOTE]

Es wär schön so eine Anleitung auch ma in Deutscher sprache lesen zu können.:lach:

cosinus

30.12.2013 20:40

Zitat:

Zitat von lakil (Beitrag 1222025)

Es wär schön so eine Anleitung auch ma in Deutscher sprache lesen zu können.:lach:

Sagma, haste gesoffen oder was ist los? :wtf:

lakil

30.12.2013 20:50

Code:



SystemLook 30.07.11 by jpshortstuff

Log created at 20:42 on 30/12/2013 by Wolke

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*spigot*"

No files found.
 

========== folderfind ==========
 

Searching for "*spigot*"

No folders found.
 

========== regfind ==========
 

Searching for "spigot"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B66CF356D744245B0C8EDE24AC03DC]

"00000000000000000000000000000000"="C:\Program Files (x86)\Common Files\Spigot\GC\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62F013B2CCF0DEE4EB7CB83D7A21280C]

"00000000000000000000000000000000"="C:\Program Files (x86)\Common Files\Spigot\GC\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8740C21CF79D2514E94A247F4DEFE091]

"00000000000000000000000000000000"="C:\Program Files (x86)\Common Files\Spigot\GC\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E83F13912F1FBF64390A163E8464B6C7]

"00000000000000000000000000000000"="C:\Program Files (x86)\Common Files\Spigot\GC\"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"
 

-= EOF =-

Zitat:

Zitat von cosinus (Beitrag 1222027)

Sagma, haste gesoffen oder was ist los? :wtf:

Nein nur falsch formuliert..
Ich meine die Webseite die die Anleitung zum update der host files zu verfügung stellt das sie in deutscher Sprache verständlicher für mich wäre.:daumenhoc

cosinus

30.12.2013 21:09

Ach du meinst MVPS Seite , ich dachte erst erst meine Postings :lach:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files (x86)\Common Files\Spigot

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /v "OSDFileURL" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B66CF356D744245B0C8EDE24AC03DC" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62F013B2CCF0DEE4EB7CB83D7A21280C" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8740C21CF79D2514E94A247F4DEFE091" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E83F13912F1FBF64390A163E8464B6C7" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /f

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

lakil

30.12.2013 21:28

Code:



Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-12-2013 01

Ran by  at 2013-12-30 21:16:07 Run:3

Running from C:\Users\W\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

C:\Program Files (x86)\Common Files\Spigot

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /v "OSDFileURL" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B66CF356D744245B0C8EDE24AC03DC" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62F013B2CCF0DEE4EB7CB83D7A21280C" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8740C21CF79D2514E94A247F4DEFE091" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E83F13912F1FBF64390A163E8464B6C7" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /f

         

*****************
 

"C:\Program Files (x86)\Common Files\Spigot" => File/Directory not found.
 

========= reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /v "OSDFileURL" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B66CF356D744245B0C8EDE24AC03DC" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========

cosinus

30.12.2013 21:35

Und nochma nach spigot suchen

Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code:

:filefind *spigot* :folderfind *spigot* :regfind spigot
Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

lakil

30.12.2013 21:41

Muss das erneut heruntergeladen werden das System Look?

Code:

SystemLook 30.07.11 by jpshortstuff

Log created at 21:38 on 30/12/2013 by 

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*spigot*"

No files found.
 

========== folderfind ==========
 

Searching for "*spigot*"

No folders found.
 

========== regfind ==========
 

Searching for "spigot"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"
 

-= EOF =-

cosinus

30.12.2013 21:59

Hab ich mir schon fast gedacht. Du hast meinen Text zum Fixen nicht komplett kopiert.
Mach den Fix bitte richtig!

lakil

30.12.2013 22:35

Zitat:

Zitat von cosinus (Beitrag 1222069)

Hab ich mir schon fast gedacht. Du hast meinen Text zum Fixen nicht komplett kopiert.
Mach den Fix bitte richtig!

Der Text ist richtig wen du genau hinschaust-EOF- nur habe ich eine erneute Fixlog Datei nicht erstellt.
Soll ich das jetzt erneut durchführen und mit FRST tool fixen?

cosinus

30.12.2013 22:38

Das ist doch wieder Blödsinn...du hast den Text nicht komplett kopiert!
Sonst hätte FRST auch die anderen Einträge gefixt die mit systemlook ja wieder gerunden wurden

lakil

30.12.2013 22:51

Zitat:

Zitat von cosinus (Beitrag 1222085)

Das ist doch wieder Blödsinn...du hast den Text nicht komplett kopiert!
Sonst hätte FRST auch die anderen Einträge gefixt die mit systemlook ja wieder gerunden wurden

Ich kann dir zu 100% versichern das ich den ganzent text in die Fixlist.txt datei koopiert habe.
So und nun sind wir bei dem eigentlichem Problem
Die einträge die übrig geblieben sind können nicht entfernt werden zumindest nicht mit FRST.
Also ich weiss was ich tue.
Und wenn du zürück auf die logs schaust dann wirste sehen das die logs komplett übertragen wurden.:headbang:

cosinus

30.12.2013 22:54

Zitat:

Ich kann dir zu 100% versichern das ich den ganzent text in die Fixlist.txt datei koopiert habe.

Mach den Fix einfach nochmal. Neue Dateien erstellen

lakil

30.12.2013 23:00

Code:

SystemLook 30.07.11 by jpshortstuff

Log created at 22:59 on 30/12/2013 by 

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*spigot*"

No files found.
 

========== folderfind ==========
 

Searching for "*spigot*"

No folders found.
 

========== regfind ==========
 

Searching for "spigot"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"
 

-= EOF =-

cosinus

30.12.2013 23:04

Den Fix bitte....nicht die Suche mit systemlook

lakil

30.12.2013 23:06

Code:



Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-12-2013 01

Ran by Wolke at 2013-12-30 23:04:40 Run:4

Running from C:\Users\d\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

SystemLook 30.07.11 by jpshortstuff

Log created at 22:59 on 30/12/2013 by 

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*spigot*"

No files found.
 

========== folderfind ==========
 

Searching for "*spigot*"

No folders found.
 

========== regfind ==========
 

Searching for "spigot"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://de.search.yahoo.com/?type=198484&fr=spigot-yhp-ie"

[HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}]

"OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml"
 

-= EOF =-

*****************
 
 

========================= "OSDFileURL"="file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml" ========================
 

""OSDFileURL"="///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml" not found.

====== End Of File: ======

cosinus

31.12.2013 15:47

Was machst du denn da schon wieder? :wtf:
Du kannst doch nicht den Text der für sysemlook bestimmt ist bei FRST einfügen!

Diesen Fix sollst du nochmal machen!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files (x86)\Common Files\Spigot

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /v "OSDFileURL" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B66CF356D744245B0C8EDE24AC03DC" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62F013B2CCF0DEE4EB7CB83D7A21280C" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8740C21CF79D2514E94A247F4DEFE091" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E83F13912F1FBF64390A163E8464B6C7" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /f

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

lakil

31.12.2013 16:00

Code:



Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-12-2013 01

Ran by Wolke at 2013-12-31 15:59:18 Run:5

Running from C:\Users\admin\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

C:\Program Files (x86)\Common Files\Spigot

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /v "OSDFileURL" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B66CF356D744245B0C8EDE24AC03DC" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62F013B2CCF0DEE4EB7CB83D7A21280C" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8740C21CF79D2514E94A247F4DEFE091" /f

reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E83F13912F1FBF64390A163E8464B6C7" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f

reg: reg delete "HKEY_USERS\S-1-5-21-3583547410-2317155067-1929240655-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /f

*****************
 

"C:\Program Files (x86)\Common Files\Spigot" => File/Directory not found.
 

========= reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5DAA9480-0CE9-4C6A-8044-5D63972C8BD9}" /v "OSDFileURL" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B66CF356D744245B0C8EDE24AC03DC" /f =========
 

FEHLER: Der angegebene Registrierungsschlssel bzw. Wert wurde nicht gefunden.
 
 

========= End of Reg: =========

Alle Zeitangaben in WEZ +1. Es ist jetzt 02:07 Uhr.

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19