Hustlenomics | 20.02.2015 17:22 | Danke für die schnelle Antwort. Hier die Ergebnisse: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 20.02.2015
Suchlauf-Zeit: 16:39:16
Logdatei: mbam.txt
Administrator: Ja
Version: 2.00.4.1028
Malware Datenbank: v2015.02.20.05
Rootkit Datenbank: v2015.02.03.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Nick
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 368335
Verstrichene Zeit: 11 Min, 42 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 1
PUP.Optional.JOSrv.A, C:\Users\Nick\AppData\Roaming\20FDBF00-1424166670-11E2-8C89-30F9EDC775DC\JOSrv.exe, 1768, Löschen bei Neustart, [5e57c65a008ae1551e77464c30d3a759]
Module: 0
(Keine schädliche Elemente erkannt)
Registrierungsschlüssel: 14
PUP.Optional.Bundle, HKLM\SOFTWARE\CLASSES\TYPELIB\{10520590-28A6-4E33-97F5-43102DCA2565}, In Quarantäne, [b500918f7f0b4beb106fe1437a88ef11],
PUP.Optional.Bundle, HKLM\SOFTWARE\CLASSES\INTERFACE\{D82EABD1-23DA-4DB5-89D4-A74834BD781D}, In Quarantäne, [b500918f7f0b4beb106fe1437a88ef11],
PUP.Optional.Bundle, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D82EABD1-23DA-4DB5-89D4-A74834BD781D}, In Quarantäne, [b500918f7f0b4beb106fe1437a88ef11],
PUP.Optional.Bundle, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{10520590-28A6-4E33-97F5-43102DCA2565}, In Quarantäne, [b500918f7f0b4beb106fe1437a88ef11],
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\WOW6432NODE\omniboxesSoftware, In Quarantäne, [4c6966ba2a60dc5a303c662c41c21be5],
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, In Quarantäne, [3d7863bda8e2bf775e4cabf751b2dd23],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, In Quarantäne, [397ce8381575b2841602e7d41ae98080],
PUP.Optional.JOSrv.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SERVERJO, In Quarantäne, [5e57c65a008ae1551e77464c30d3a759],
PUP.Optional.Cinema.A, HKU\S-1-5-21-2221540061-1888483456-2263770824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaP-1.4cV17.02-nv-ie, In Quarantäne, [cbea2bf5a6e469cd77b3e2cd22e1ec14],
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2221540061-1888483456-2263770824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaPlus-2.4icV17.02-nv-ie, In Quarantäne, [bef77ba58dfd3ef854036e33748fa65a],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2221540061-1888483456-2263770824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SearchProtectWS, In Quarantäne, [eacbe43cd2b88ea85a10464df40f659b],
PUP.Optional.Qone8, HKU\S-1-5-21-2221540061-1888483456-2263770824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [9f1661bf3159ab8bdc69ce3222e3aa56],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
Registrierungswerte: 4
PUP.Optional.Shopperz.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{5081D2D4-1637-404c-B74F-50526718257D}, C:\Program Files\shopperz\Firefox, In Quarantäne, [5e57ad73d1b930066e777922ec174fb1]
PUP.Optional.MBot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|mbot_de_516, In Quarantäne, [ecc9988893f7ab8b8900327fd82b2ad6],
PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{5081D2D4-1637-404c-B74F-50526718257D}, C:\Program Files\shopperz\Firefox, In Quarantäne, [5c591709a4e635019253fba08a79728e]
PUP.Optional.JOSrv.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SERVERJO|ImagePath, C:\Users\Nick\AppData\Roaming\20FDBF00-1424166670-11E2-8C89-30F9EDC775DC\JOSrv.exe, In Quarantäne, [5e57c65a008ae1551e77464c30d3a759]
Registrierungsdaten: 9
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.omniboxes.com/web/?type=ds&ts=1424163141&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/web/?type=ds&ts=1424163141&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}),Ersetzt,[4c69af7156345adc09263a81877e748c]
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551),Ersetzt,[1f96b56bc2c882b4c26b506bd72ef907]
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551),Ersetzt,[10a598889eec92a40e2c4477b84d867a]
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.omniboxes.com/web/?type=ds&ts=1424163141&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/web/?type=ds&ts=1424163141&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}),Ersetzt,[2a8b87997d0d6bcb8fa06c4f1de89c64]
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551),Ersetzt,[c2f35dc39bef1422c36a57648580b44c]
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551),Ersetzt,[11a4aa768a0091a572c8cbf00302cc34]
PUP.Optional.Omniboxes.A, HKU\S-1-5-21-2221540061-1888483456-2263770824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551),Ersetzt,[3085091751390c2ae35884370ff611ef]
PUP.Optional.Omniboxes.A, HKU\S-1-5-21-2221540061-1888483456-2263770824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551),Ersetzt,[eec7c858a3e7280e6fbfbefdc63f6f91]
PUP.Optional.Omniboxes.A, HKU\S-1-5-21-2221540061-1888483456-2263770824-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.omniboxes.com/web/?type=dspp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.omniboxes.com/web/?type=dspp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}),Ersetzt,[2a8bff21305a8babeb459f1c8f7611ef]
Ordner: 3
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.LolliScan.A, C:\ProgramData\LolliScan, In Quarantäne, [684d7ca4fe8ce84eb176048d4eb50000],
Dateien: 45
PUP.Optional.Bundle, C:\Users\Nick\AppData\Local\Temp\Bushido Carlo Cokxxx Nutten 3 (2015)__10924_i1468968642_il329940.exe, In Quarantäne, [b500918f7f0b4beb106fe1437a88ef11],
PUP.Optional.OutBrowse, C:\Users\Nick\AppData\Local\Temp\setup.exe, In Quarantäne, [54615ec2addd3ef8278f15a5d92cda26],
PUP.Optional.Wajam.A, C:\Users\Nick\AppData\Local\Temp\WIE_2.25.2.18.exe, In Quarantäne, [8a2bcf51c7c3eb4b99f323f611f138c8],
PUP.Optional.XTabs.A, C:\Users\Nick\AppData\Local\Temp\Wtmp418656296\tmp\STab_Down_6.0.6.8.exe, In Quarantäne, [e3d27ba5e6a4e15533d9d62b39cde61a],
PUP.Optional.WindowsProtectManger.A, C:\Users\Nick\AppData\Local\Temp\Wtmp418656296\tmp\wpm_v20.0.0.1714_0204.exe, In Quarantäne, [991c839de4a6082e4c81b6b005fb857b],
PUP.Optional.XTab.A, C:\Users\Nick\AppData\Local\Temp\Wtmp418656296\tmp\XTab_v4.0.exe, In Quarantäne, [64511808fc8ee452d8dba863d32fc53b],
PUP.Optional.XTabs.A, C:\Users\Nick\AppData\Local\Temp\~dl389E\lxjyb\tmp\STab_Down_6.0.6.8.exe, In Quarantäne, [eacb54cc8703cb6b8b818e737c8a14ec],
PUP.Optional.WindowsProtectManger.A, C:\Users\Nick\AppData\Local\Temp\~dl389E\lxjyb\tmp\wpm_v20.0.0.1714_0204.exe, In Quarantäne, [13a22ff1c3c7bb7ba32a86e03ec2ed13],
PUP.Optional.XTab.A, C:\Users\Nick\AppData\Local\Temp\~dl389E\lxjyb\tmp\XTab_v4.0.exe, In Quarantäne, [882dd14fe4a6a393b8fbc348ed1502fe],
PUP.Optional.XTabs.A, C:\Users\Nick\AppData\Local\Temp\~dlBA75\lxwsh\tmp\STab_Down_6.0.6.8.exe, In Quarantäne, [cce9e43c75154ee8ee1e44bd0df9b749],
PUP.Optional.XTab.A, C:\Users\Nick\AppData\Local\Temp\~dlBA75\lxwsh\tmp\XTab_v4.0.exe, In Quarantäne, [09ac7aa699f1b77f961d9c6f986a7090],
PUP.Optional.Tuto4PC.A, C:\Users\Nick\AppData\Local\Temp\is-02D1L.tmp\package_speedup_installer_multilang.exe, In Quarantäne, [4c69e739820880b6179c0bedf40de020],
PUP.Optional.Tuto4PC.A, C:\Users\Nick\AppData\Local\Temp\is-02D1L.tmp\package_superpc_installer_multilang.exe, In Quarantäne, [bafbb769c7c373c31c97e90f48b9a55b],
PUP.Optional.Amonetize.A, C:\Users\Nick\Downloads\Bushido Carlo Cokxxx Nutten 3 (2015)_10924_i33942682_il345.exe, In Quarantäne, [5f56de42bad0fb3be47dbab1cc346b95],
PUP.Optional.OptimizerMonitor.A, C:\Users\Nick\AppData\Local\Temp\OptimizerMonitorr.log, In Quarantäne, [4570091798f2082e86f71f77de257d83],
PUP.Optional.SelectNGo.A, C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.selectgo00.selectgo.net_0.localstorage, Löschen bei Neustart, [a11472ae7e0c04326d8d4254c63d966a],
PUP.Optional.SelectNGo.A, C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.selectgo00.selectgo.net_0.localstorage-journal, Löschen bei Neustart, [af0626fa3e4c122467934551a162b24e],
PUP.Optional.SelectNGo.A, C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage, Löschen bei Neustart, [813455cbc0cab87e40b7e0e3b94a5fa1],
PUP.Optional.SelectNGo.A, C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, Löschen bei Neustart, [cce9d9476921fe38bd3ab40f3ec5ab55],
PUP.Optional.MindSpark.A, C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_internetspeedtracker.dl.tb.ask.com_0.localstorage, In Quarantäne, [377e9c84a2e85adcede11bae5ba805fb],
PUP.Optional.MindSpark.A, C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_internetspeedtracker.dl.tb.ask.com_0.localstorage-journal, In Quarantäne, [387d46da850596a0c608567331d240c0],
PUP.Optional.ColorMedia.A, C:\Windows\System32\ColorMediaOff.ini, In Quarantäne, [288d4dd35238cf6703bdc356d43112ee],
PUP.Optional.ColorMedia.A, C:\Windows\SysWOW64\ColorMediaOff.ini, In Quarantäne, [1d988e9241493cfac1ff28f1f70ec23e],
PUP.Optional.JOSrv.A, C:\Users\Nick\AppData\Roaming\20FDBF00-1424166670-11E2-8C89-30F9EDC775DC\JOSrv.exe, Löschen bei Neustart, [5e57c65a008ae1551e77464c30d3a759],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\GoogleCrashHandler.exe, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\GoogleUpdate.exe, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\GoogleUpdateBroker.exe, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\GoogleUpdateHelper.msi, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\GoogleUpdateOnDemand.exe, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\goopdate.dll, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\goopdateres_en.dll, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\npGoogleUpdate4.dll, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\psmachine.dll, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.177542\psuser.dll, In Quarantäne, [7144d44c11797fb7b29b82f043c0da26],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\GoogleCrashHandler.exe, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\GoogleUpdate.exe, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\GoogleUpdateBroker.exe, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\GoogleUpdateHelper.msi, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\GoogleUpdateOnDemand.exe, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\goopdate.dll, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\goopdateres_en.dll, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\npGoogleUpdate4.dll, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\psmachine.dll, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.GlobalUpdate.A, C:\Users\Nick\AppData\Local\Temp\comh.397904\psuser.dll, In Quarantäne, [ae0777a9a7e3201637168ee4b152946c],
PUP.Optional.LolliScan.A, C:\ProgramData\LolliScan\RfndNSIS.dll, In Quarantäne, [684d7ca4fe8ce84eb176048d4eb50000],
Physische Sektoren: 0
(Keine schädliche Elemente erkannt)
(end) Code:
# AdwCleaner v4.111 - Bericht erstellt 20/02/2015 um 17:05:53
# Aktualisiert 18/02/2015 von Xplode
# Datenbank : 2015-02-18.3 [Server]
# Betriebssystem : Windows 8.1 (x64)
# Benutzername : Nick - NICKSVAIO
# Gestarted von : C:\Users\Nick\Downloads\AdwCleaner_4.111.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Program Files (x86)\download Manager
Datei Gelöscht : C:\WINDOWS\SysWOW64\ColorMedia.dll
Datei Gelöscht : C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage
Datei Gelöscht : C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Google Chrome v40.0.2214.115
*************************
AdwCleaner[R0].txt - [18277 Bytes] - [17/02/2015 10:18:00]
AdwCleaner[R1].txt - [975 Bytes] - [17/02/2015 15:40:19]
AdwCleaner[R2].txt - [1508 Bytes] - [20/02/2015 17:02:53]
AdwCleaner[S0].txt - [17667 Bytes] - [17/02/2015 10:19:11]
AdwCleaner[S1].txt - [1035 Bytes] - [17/02/2015 15:42:33]
AdwCleaner[S2].txt - [1430 Bytes] - [20/02/2015 17:05:53]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1489 Bytes] ########## Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 8.1 x64
Ran by Nick on 20.02.2015 at 17:11:47,58
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9"
~~~ Files
Successfully deleted: [File] C:\WINDOWS\prefetch\SPEEDUP_SOFT_PARTNER.TMP-6E477958.pf
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20.02.2015 at 17:14:16,79
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2015 01
Ran by Nick (administrator) on NICKSVAIO on 20-02-2015 17:21:31
Running from C:\Users\Nick\Downloads
Loaded Profiles: Nick (Available profiles: Nick)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Users\Nick\AppData\Roaming\20FDBF00-1424166670-11E2-8C89-30F9EDC775DC\nsi89B3.tmp
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Super PC Tools Ltd) C:\ProgramData\{a83bc2ab-eb94-e1ca-a83b-bc2abeb90aaf}\superpc_soft_partner.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-13] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-21] (Synaptics Incorporated)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-17] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-08-07] (cyberlink)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
HKU\S-1-5-21-2221540061-1888483456-2263770824-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2221540061-1888483456-2263770824-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2874048 2015-02-19] (Valve Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Parental Controls.lnk
ShortcutTarget: McAfee Parental Controls.lnk -> C:\Program Files\McAfeeEx\MOCP\core\OcpTray.exe (McAfee, Inc.)
Startup: C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\superpc_soft_partner.lnk
ShortcutTarget: superpc_soft_partner.lnk -> C:\ProgramData\{a83bc2ab-eb94-e1ca-a83b-bc2abeb90aaf}\superpc_soft_partner.exe (Super PC Tools Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:56003;https=127.0.0.1:56003
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=ds&ts=1424163141&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=ds&ts=1424163141&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2221540061-1888483456-2263770824-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=dspp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&q={searchTerms}
HKU\S-1-5-21-2221540061-1888483456-2263770824-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-2221540061-1888483456-2263770824-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2221540061-1888483456-2263770824-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.omniboxes.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&ts=1424163167&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2221540061-1888483456-2263770824-1001 -> {74973924-EA23-412E-8C84-3E9D6B3CDD38} URL = hxxp://www.omniboxes.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&ts=1424163167&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2221540061-1888483456-2263770824-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.omniboxes.com/web/?utm_source=b&utm_medium=amt&utm_campaign=install_ie&utm_content=ds&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551&ts=1424163167&type=default&q={searchTerms}
BHO: IEVkbdBHO Class -> {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: IEVkbdBHO Class -> {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.5.0 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru [2013-03-26]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru [2013-03-26]
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru [2013-03-26]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR HomePage: Default -> hxxp://www.omniboxes.com/?type=hppp&ts=1424163146&from=amt&uid=ST320LM001XHN-M320MBB_S2UKJ9DCA01551
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-18]
CHR Extension: (Google Drive) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-18]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-29]
CHR Extension: (YouTube) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-18]
CHR Extension: (Adblock Plus) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-02-20]
CHR Extension: (Google Search) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-18]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-09-18]
CHR Extension: (eclfpdflffnadciiehipiknmahlokchp) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\eclfpdflffnadciiehipiknmahlokchp [2015-02-20]
CHR Extension: (Virtual Keyboard) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-09-18]
CHR Extension: (Google Wallet) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-18]
CHR Extension: (Gmail) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-18]
CHR Extension: (Anti-Banner) - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-09-18]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\urladvisor.crx [2012-12-18]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\virtkbd.crx [2012-12-18]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\ab.crx [2012-12-18]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-13] (Qualcomm Atheros Commnucations)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [243728 2012-06-29] (CyberLink)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
R2 dibudyzy; C:\Users\Nick\AppData\Roaming\20FDBF00-1424166670-11E2-8C89-30F9EDC775DC\nsi89B3.tmp [223744 2015-02-18] () [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 mfeicfcoreocp; C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe [2782392 2013-12-31] (McAfee, Inc.)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () [File not signed]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1266336 2012-07-24] (Sony Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-08-20] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\system32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R1 kl2; C:\Windows\system32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-20] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-12-26] (McAfee, Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-21] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [X]
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-20 17:14 - 2015-02-20 17:14 - 00000997 _____ () C:\Users\Nick\Desktop\JRT.txt
2015-02-20 17:11 - 2015-02-20 17:11 - 01388274 _____ (Thisisu) C:\Users\Nick\Downloads\JRT.exe
2015-02-20 17:02 - 2015-02-20 17:02 - 02126848 _____ () C:\Users\Nick\Downloads\AdwCleaner_4.111.exe
2015-02-20 17:01 - 2015-02-20 17:01 - 00015470 _____ () C:\Users\Nick\Desktop\mbam.txt
2015-02-20 16:38 - 2015-02-20 17:07 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-20 16:38 - 2015-02-20 16:38 - 00001078 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-20 16:38 - 2015-02-20 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-20 16:37 - 2015-02-20 16:37 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-20 16:37 - 2015-02-20 16:37 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-20 16:37 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-02-20 16:37 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-02-20 16:37 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-02-20 16:34 - 2015-02-20 16:35 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Nick\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-20 15:16 - 2015-02-20 15:16 - 00380416 _____ () C:\Users\Nick\Downloads\Gmer-19357.exe
2015-02-20 15:11 - 2015-02-20 15:12 - 00030075 _____ () C:\Users\Nick\Downloads\Addition.txt
2015-02-20 15:09 - 2015-02-20 17:21 - 00023308 _____ () C:\Users\Nick\Downloads\FRST.txt
2015-02-20 15:09 - 2015-02-20 17:21 - 00000000 ____D () C:\FRST
2015-02-20 15:09 - 2015-02-20 15:09 - 02086912 _____ (Farbar) C:\Users\Nick\Downloads\FRST64.exe
2015-02-20 15:03 - 2015-02-20 15:03 - 00000470 _____ () C:\Users\Nick\Downloads\defogger_disable.log
2015-02-20 15:03 - 2015-02-20 15:03 - 00000000 _____ () C:\Users\Nick\defogger_reenable
2015-02-20 15:01 - 2015-02-20 15:01 - 00050477 _____ () C:\Users\Nick\Downloads\Defogger.exe
2015-02-20 15:01 - 2014-12-31 12:14 - 00298120 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-02-20 14:18 - 2015-02-20 14:18 - 00000000 ____D () C:\Users\Nick\AppData\Local\Steam
2015-02-17 15:39 - 2015-02-17 15:39 - 02112512 _____ () C:\Users\Nick\Downloads\AdwCleaner_4.110 (1).exe
2015-02-17 14:14 - 2015-02-17 14:14 - 00065969 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201502171414127605.log
2015-02-17 10:17 - 2015-02-20 17:05 - 00000000 ____D () C:\AdwCleaner
2015-02-17 10:17 - 2015-02-17 10:17 - 02112512 _____ () C:\Users\Nick\Downloads\adwcleaner_4.110.exe
2015-02-17 10:11 - 2015-02-17 10:11 - 00000000 __SHD () C:\Users\Nick\AppData\Local\EmieUserList
2015-02-17 10:11 - 2015-02-17 10:11 - 00000000 __SHD () C:\Users\Nick\AppData\Local\EmieSiteList
2015-02-17 10:11 - 2015-02-17 10:11 - 00000000 __SHD () C:\Users\Nick\AppData\Local\EmieBrowserModeList
2015-02-17 10:04 - 2015-02-17 10:21 - 00000000 ____D () C:\ProgramData\{a83bc2ab-eb94-e1ca-a83b-bc2abeb90aaf}
2015-02-17 09:52 - 2015-02-07 21:45 - 00364024 _____ (Over the Rainbow Tech) C:\WINDOWS\system32\ColorMedia64.dll
2015-02-17 09:51 - 2015-02-20 16:56 - 00000000 ____D () C:\Users\Nick\AppData\Roaming\20FDBF00-1424166670-11E2-8C89-30F9EDC775DC
2015-02-17 09:51 - 2015-02-17 10:11 - 00000000 ____D () C:\Users\Nick\AppData\Roaming\Opera Software
2015-02-17 09:51 - 2015-02-17 10:11 - 00000000 ____D () C:\Users\Nick\AppData\Local\Opera Software
2015-02-17 09:50 - 2015-02-20 17:07 - 00001702 _____ () C:\WINDOWS\Tasks\PSTGDVIP.job
2015-02-17 09:50 - 2015-02-17 10:11 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-17 09:50 - 2015-02-17 09:50 - 01994712 _____ (CiPlus2.4icV17.02) C:\Users\Nick\AppData\Roaming\PSTGDVIP.exe
2015-02-17 09:50 - 2015-02-17 09:50 - 00004708 _____ () C:\WINDOWS\System32\Tasks\PSTGDVIP
2015-02-17 09:49 - 2015-02-17 09:49 - 00000045 _____ () C:\user.js
2015-02-17 09:47 - 2015-02-17 10:10 - 00000000 ____D () C:\Program Files (x86)\af9bd1c8-ecb7-43c6-a4c8-d19490d05330
2015-02-12 13:49 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-12 13:49 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-11 09:09 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-11 09:09 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-11 09:09 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-11 09:09 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-11 09:09 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-11 09:09 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-11 09:09 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-11 09:09 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-11 09:09 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-11 09:09 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-11 09:09 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-11 09:09 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-11 09:09 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-11 09:09 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-11 09:09 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-11 09:09 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-11 09:09 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-11 09:09 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-11 09:09 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-11 09:09 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-11 09:09 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-11 09:09 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-11 09:09 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-11 09:09 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-11 09:09 - 2014-12-09 00:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-11 09:09 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2015-02-11 09:09 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2015-02-11 09:09 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2015-02-11 09:09 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2015-02-11 09:09 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-02-11 09:09 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-02-11 09:09 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-02-11 09:09 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-02-11 09:09 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-02-11 09:09 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-02-11 09:09 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-02-11 09:09 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-02-11 09:09 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-02-11 09:08 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-02-11 09:08 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-11 09:08 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-02-11 09:08 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-02-11 09:08 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-11 09:08 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-02-11 09:08 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-11 09:08 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-11 09:08 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-11 09:08 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-11 09:08 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-11 09:08 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-11 09:08 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-11 09:08 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-11 09:08 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-11 09:08 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-11 09:08 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-11 09:08 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-11 09:08 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-11 09:08 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-11 09:08 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-11 09:08 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-11 09:08 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-11 09:08 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-11 09:08 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-11 09:08 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-11 09:08 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-11 09:08 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-11 09:08 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-11 09:08 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-11 09:08 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-11 09:08 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-11 09:08 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-02-03 11:28 - 2015-02-03 11:28 - 00019685 _____ () C:\Users\Nick\Downloads\produktbeschreibungen_tnt.zip
2015-01-25 17:12 - 2015-01-25 17:12 - 00001248 _____ () C:\Users\Nick\AppData\Roaming\PSTGDVIP
2015-01-21 14:39 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-21 14:39 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-21 14:39 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-21 14:39 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-21 14:39 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-21 14:39 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-21 14:39 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-21 14:39 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-21 14:39 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-21 14:39 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-21 14:39 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-21 14:39 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-21 14:39 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-21 14:39 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-21 14:39 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-21 14:39 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-21 14:39 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-21 14:39 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-21 14:39 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-21 14:39 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-21 14:39 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-21 14:39 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-21 14:39 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-21 14:39 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-21 14:39 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-21 14:39 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-21 14:39 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-21 14:39 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-21 14:39 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-21 14:39 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-21 14:39 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-20 17:17 - 2012-11-05 15:04 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2221540061-1888483456-2263770824-1001
2015-02-20 17:14 - 2014-12-11 12:06 - 01684963 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-20 17:14 - 2014-09-24 07:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-20 17:14 - 2014-09-24 06:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2015-02-20 17:14 - 2014-09-24 06:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2015-02-20 17:13 - 2013-09-18 11:17 - 00001138 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-20 17:07 - 2014-11-05 12:53 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-02-20 17:07 - 2013-09-18 11:17 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-20 17:07 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-20 17:06 - 2014-09-23 22:06 - 00039340 _____ () C:\WINDOWS\PFRO.log
2015-02-20 17:06 - 2013-08-22 15:46 - 00294419 _____ () C:\WINDOWS\setupact.log
2015-02-20 17:06 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-20 17:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-20 17:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-20 16:55 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2015-02-20 15:14 - 2013-09-18 11:18 - 00002155 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-20 15:03 - 2014-12-11 12:14 - 00000000 ____D () C:\Users\Nick
2015-02-20 14:57 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-02-20 14:37 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-20 14:16 - 2013-03-06 20:26 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D4D9BA51-EC99-403F-B081-2ED846E0A160}
2015-02-18 21:29 - 2013-11-07 23:15 - 00000000 ____D () C:\Users\Nick\Documents\Training
2015-02-17 14:14 - 2014-12-11 12:09 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-02-17 14:10 - 2012-10-27 07:52 - 00000000 ____D () C:\Program Files (x86)\WildGames
2015-02-17 14:10 - 2012-10-27 07:50 - 00000000 ____D () C:\ProgramData\WildTangent
2015-02-17 14:07 - 2012-10-27 07:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-17 14:05 - 2014-12-11 12:06 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2015-02-17 13:55 - 2012-10-27 07:14 - 00000000 ____D () C:\ProgramData\McAfee
2015-02-17 10:12 - 2014-12-11 12:49 - 00001454 _____ () C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-17 10:02 - 2012-11-08 14:34 - 00000000 ____D () C:\Users\Nick\AppData\Local\Adobe
2015-02-14 14:18 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-12 13:58 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-12 13:36 - 2013-08-22 15:44 - 00414352 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-11 14:53 - 2014-12-18 08:16 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-11 14:53 - 2014-09-24 08:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-11 09:59 - 2012-11-05 20:31 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-11 09:57 - 2013-08-24 12:14 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-11 09:52 - 2012-12-17 18:49 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-09 10:45 - 2013-04-04 15:29 - 00000000 ____D () C:\Users\Nick\Documents\Uni
2015-02-08 22:56 - 2014-12-02 09:45 - 00000000 ____D () C:\Users\Nick\Documents\Fitness
2015-02-07 14:08 - 2013-09-18 11:17 - 00004110 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-07 14:08 - 2013-09-18 11:17 - 00003874 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 20:31 - 2014-12-18 08:21 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2014-12-18 08:21 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
==================== Files in the root of some directories =======
2015-01-25 17:12 - 2015-01-25 17:12 - 0001248 _____ () C:\Users\Nick\AppData\Roaming\PSTGDVIP
2015-02-17 09:50 - 2015-02-17 09:50 - 1994712 _____ (CiPlus2.4icV17.02) C:\Users\Nick\AppData\Roaming\PSTGDVIP.exe
2013-03-26 20:40 - 2013-03-26 20:40 - 0017408 _____ () C:\Users\Nick\AppData\Local\WebpageIcons.db
Some content of TEMP:
====================
C:\Users\Nick\AppData\Local\Temp\cbhcabfcccea.exe
C:\Users\Nick\AppData\Local\Temp\CloudBackup4760.exe
C:\Users\Nick\AppData\Local\Temp\nszA449.exe
C:\Users\Nick\AppData\Local\Temp\Opera_NI_stable.exe
C:\Users\Nick\AppData\Local\Temp\Quarantine.exe
C:\Users\Nick\AppData\Local\Temp\SpOrder.dll
C:\Users\Nick\AppData\Local\Temp\sqlite3.dll
C:\Users\Nick\AppData\Local\Temp\supoptsetup.exe
C:\Users\Nick\AppData\Local\Temp\vcredist_x64.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-17 15:54
==================== End Of Log ============================ --- --- --- |