Trojaner-Board - Snap.do nervt, zeigt sich nicht in Systemsteuerung

Danke!

Log:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01

Ran by merdia (administrator) on MERDIA-PC on 13-02-2014 22:31:48

Running from C:\Users\merdia\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Microsoft Corporation) C:\WINDOWS\SYSTEM32\WLANEXT.EXE

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\SCHED.EXE

(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

(Avira Operations GmbH & Co. KG) C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\AVGUARD.EXE

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\PROGRAM FILES\WIDCOMM\BLUETOOTH SOFTWARE\BTWDINS.EXE

() C:\PROGRAM FILES (X86)\CANON\IJPLM\IJPLMSVC.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\PROGRAM FILES (X86)\NVIDIA CORPORATION\NVIDIA UPDATUS\DAEMONU.EXE

(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe

(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe

() C:\PROGRAM FILES (X86)\JOIN AIR\ASSISTANTSERVICES.EXE

(Trend Micro Inc.) C:\PROGRAM FILES\TREND MICRO\TITANIUM\TIRESUMESRV.EXE

(WDC) C:\PROGRAM FILES\WESTERN DIGITAL\WD SMARTWARE\WD DRIVE MANAGER\WDDMSERVICE.EXE

() C:\PROGRAM FILES (X86)\WESTERN DIGITAL\WD SMARTWARE\FRONT PARLOR\WDFME\WDFME.EXE

() C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCORSVW.EXE

(Microsoft Corporation) C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCORSVW.EXE

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUS) C:\Windows\AsScrPro.exe

(ASUSTek Computer Inc.) C:\PROGRAM FILES (X86)\ASUS\ASUS DATA SECURITY MANAGER\ADSMSRV.EXE

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

() C:\PROGRAM FILES (X86)\ASUS\ASUS WEBSTORAGE\SERVICE\ASUSWSSERVICE.EXE

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(Intel(R) Corporation) C:\PROGRAM FILES\COMMON FILES\INTEL\WIRELESSCOMMON\IFRMEWRK.EXE

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\WINDOWS\SYSTEM32\IGFXPERS.EXE

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE

(syncables, LLC) C:\PROGRAM FILES (X86)\SYNCABLES\SYNCABLES DESKTOP\SYNCABLES.EXE

(Sony) C:\PROGRAM FILES (X86)\SONY\SONY PC COMPANION\PCCOMPANION.EXE

(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORUPDATE.EXE

(Skype Technologies S.A.) C:\PROGRAM FILES (X86)\SKYPE\PHONE\SKYPE.EXE

(Sun Microsystems, Inc.) C:\PROGRAM FILES (X86)\SYNCABLES\SYNCABLES DESKTOP\JRE\BIN\JAVAW.EXE

(Smartbar) C:\USERS\MERDIA\APPDATA\LOCAL\SMARTBAR\APPLICATION\QUICKSHARE.EXE

(Broadcom Corporation.) C:\PROGRAM FILES\WIDCOMM\BLUETOOTH SOFTWARE\BTTRAY.EXE

() C:\PROGRAM FILES (X86)\SONY\SONY PC COMPANION\PCCOMPANIONINFO.EXE

(SRS Labs, Inc.) C:\PROGRAM FILES\SRS LABS\SRS PREMIUM SOUND CONTROL PANEL\SRSPREMIUMPANEL_64.EXE

(ArcSoft, Inc.) C:\PROGRAM FILES (X86)\ARCSOFT\TOTALMEDIA 3.5\TMMONITOR.EXE

(Microsoft Corporation) C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V3.0\WPF\PRESENTATIONFONTCACHE.EXE

(Western Digital Technologies, Inc.) C:\PROGRAM FILES\WESTERN DIGITAL\WD SMARTWARE\WD DRIVE MANAGER\WDDMSTATUS.EXE

(Dropbox, Inc.) C:\USERS\MERDIA\APPDATA\ROAMING\DROPBOX\BIN\DROPBOX.EXE

(Mozilla Corporation) C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE

(OpenOffice.org) C:\PROGRAM FILES (X86)\OPENOFFICE.ORG 3\PROGRAM\SOFFICE.EXE

(OpenOffice.org) C:\PROGRAM FILES (X86)\OPENOFFICE.ORG 3\PROGRAM\SOFFICE.BIN

(Boingo Wireless, Inc.) C:\PROGRAM FILES (X86)\BOINGO\BOINGO WI-FI\BOINGO WI-FI.EXE

(Renesas Electronics Corporation) C:\PROGRAM FILES (X86)\RENESAS ELECTRONICS\USB 3.0 HOST CONTROLLER DRIVER\APPLICATION\NUSB3MON.EXE

(ASUS) C:\PROGRAM FILES (X86)\ASUS\ATK PACKAGE\ATKOSD2\ATKOSD2.EXE

(ASUS) C:\PROGRAM FILES (X86)\ASUS\ATK PACKAGE\ATK MEDIA\DMEDIA.EXE

(ASUS) C:\PROGRAM FILES (X86)\ASUS\ATK PACKAGE\ATK HOTKEY\HCONTROLUSER.EXE

(Apple Inc.) C:\PROGRAM FILES (X86)\QUICKTIME\QTTASK.EXE

(ArcSoft Inc.) C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE

(Sony Corporation) C:\PROGRAM FILES (X86)\SONY\READERDESKTOP\APPHELPER\READERAPPHELPER.EXE

(Adobe Systems Incorporated) C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\ARM\1.0\ADOBEARM.EXE

(Sun Microsystems, Inc.) C:\PROGRAM FILES (X86)\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE

(Avira Operations GmbH & Co. KG) C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE

() C:\PROGRAM FILES (X86)\JOIN AIR\UIEXEC.EXE

(CANON INC.) C:\PROGRAM FILES (X86)\CANON\SOLUTION MENU EX\CNSEMAIN.EXE

(CANON INC.) C:\PROGRAM FILES (X86)\CANON\IJ NETWORK SCANNER SELECTOR EX\CNMNSST.EXE

(Apple Inc.) C:\PROGRAM FILES (X86)\ITUNES\ITUNESHELPER.EXE

(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE

(Apple Inc.) C:\PROGRAM FILES\IPOD\BIN\IPODSERVICE.EXE

(Microsoft Corporation) C:\WINDOWS\SPLWOW64.EXE
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [322384 2010-09-17] (Trend Micro Inc.)

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [17412200 2010-03-27] (NVIDIA Corporation)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)

HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)

HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)

HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-18] ()

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7350912 2010-02-04] (ASUS)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-01-05] (ASUS)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)

HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)

HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [] - [X]

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\Join Air\UIExec.exe [153936 2012-04-01] ()

HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1000\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

HKU\S-1-5-21-1334498686-1576535541-2732482738-1000\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [1305408 2011-01-20] (DT Soft Ltd)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [BlazeServoTool] - "C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe"

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [Browser Infrastructure Helper] - C:\Users\merdia\AppData\Local\Smartbar\Application\QuickShare.exe [20248 2013-12-31] (Smartbar)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: F - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: I - I:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {06876f29-b116-11e2-8918-bcaec51319e2} - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {144a0106-0684-11e2-b5d4-74f06dbce1ab} - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {144a0110-0684-11e2-b5d4-74f06dbce1ab} - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {2a598b41-a542-11e2-bc63-1a5d5eb43d53} - F:\LGAutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {c7ed047b-786c-11e2-94d9-bcaec51319e2} - I:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {f49cdf48-b19c-11e2-819a-bcaec51319e2} - F:\AutoRun.exe

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [95848 2010-03-27] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [90216 2010-03-27] (NVIDIA Corporation)

Startup: C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\merdia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&q={searchTerms}&installDate=23/09/2013

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=hp&installDate=23/09/2013

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&q={searchTerms}&installDate=23/09/2013

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dogpile.com/

SearchScopes: HKLM-x32 - {0955D5D2-4C84-4FAB-A62A-A19A21864737} URL = ${SEARCH_URL}{searchTerms}

SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT

SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&q={searchTerms}&installDate=23/09/2013

SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&q={searchTerms}&installDate=23/09/2013

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: hosts - {11111111-1111-1111-1111-110311531182} - C:\Program Files (x86)\hosts\hosts-bho64.dll (Irismedia)

BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

BHO: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)

BHO-x32: hosts - {11111111-1111-1111-1111-110311531182} - C:\Program Files (x86)\hosts\hosts-bho.dll (Irismedia)

BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)

BHO-x32: QuickShare WidgetEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)

BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: ividi Helper Object - {8B8B2E80-1444-451D-AC8E-EB9A847F3887} - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll (Unitech LLC)

BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)

Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21

Tcpip\..\Interfaces\{B6744583-EFE2-43B2-8A09-101F6480A9AE}: [NameServer]0.0.0.0
 

FireFox:

========

FF ProfilePath: C:\Users\merdia\AppData\Roaming\Mozilla\Firefox\Profiles\hzt0v0nr.default

FF user.js: detected! => C:\Users\merdia\AppData\Roaming\Mozilla\Firefox\Profiles\hzt0v0nr.default\user.js

FF NewTab: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=nt&installDate=23/09/2013

FF DefaultSearchEngine: Web Search

FF SearchEngineOrder.1: Dogpile

FF SelectedSearchEngine: Web Search

FF Homepage: about:home

FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&installDate=23/09/2013&q=

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npffividiplg.dll (iVIDI.org)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\merdia\AppData\Roaming\Mozilla\Firefox\Profiles\hzt0v0nr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-09]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-07]

FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\

FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ []

FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-04-12]
 

Chrome: 

=======

CHR HomePage: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=hp&installDate=23/09/2013

CHR DefaultSearchKeyword: search.snap.do

CHR DefaultSearchProvider: Web

CHR DefaultSearchURL: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&q={searchTerms}&installDate=23/09/2013

CHR DefaultNewTabURL: 

CHR Extension: (QuickShare Widget) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl [2014-01-06]

CHR Extension: (Google Drive) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-01-07]

CHR Extension: (YouTube) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-07]

CHR Extension: (Google-Suche) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-07]

CHR Extension: (iVIDI.org plugin) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\giacfgjdclhnmkacnfbaljbmpnelflol [2013-12-14]

CHR Extension: (Stealthy) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2013-12-14]

CHR Extension: (iVidi Chrome Toolbar) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdhgpkkloealnjnmepfhanpcleldbef [2013-10-08]

CHR Extension: (Skype Click to Call) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-01-07]

CHR Extension: (Google Wallet) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-14]

CHR Extension: (hosts) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa [2013-10-08]

CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonChrome.crx [2013-10-08]

CHR HKLM-x32\...\Chrome\Extension: [giacfgjdclhnmkacnfbaljbmpnelflol] - C:\Program Files (x86)\iVIDI.org plugin\ividiplg.crx [2012-11-05]

CHR HKLM-x32\...\Chrome\Extension: [kpdhgpkkloealnjnmepfhanpcleldbef] - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividi.crx [2013-07-25]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-03-02]
 

==================== Services (Whitelisted) =================
 

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-06] (Avira Operations GmbH & Co. KG)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)

R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)

R3 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] ()

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)

R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.)

R2 UI Assistant Service; C:\Program Files (x86)\Join Air\AssistantServices.exe [271696 2012-04-01] ()

R2 WDFME; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe [1034752 2010-09-08] ()

R2 WDSC; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe [485376 2010-09-08] ()

S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]
 

==================== Drivers (Whitelisted) ====================
 

S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)

S3 BMserDiag; C:\Windows\System32\DRIVERS\BMserDiag.sys [118144 2008-10-21] (TCT International Mobile Ltd)

S3 BMserNmea; C:\Windows\System32\DRIVERS\BMserNmea.sys [118144 2008-10-21] (TCT International Mobile Ltd)

S3 BMusbmdm; C:\Windows\System32\DRIVERS\BMusbmdm.sys [118144 2008-10-21] (TCT International Mobile Ltd)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-05-11] (DT Soft Ltd)

R2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [17464 2007-08-03] ()

S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2012-07-29] (ITE                      )

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-01-14] (Windows (R) Win 7 DDK provider)

R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)

R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)

R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)

R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

S3 ipswuio; System32\DRIVERS\ipswuio.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-13 22:31 - 2014-02-13 22:32 - 00031602 _____ () C:\Users\merdia\Desktop\FRST.txt

2014-02-13 22:30 - 2014-02-13 22:31 - 00000000 ____D () C:\FRST

2014-02-13 22:29 - 2014-02-13 22:29 - 02152960 _____ (Farbar) C:\Users\merdia\Desktop\FRST64.exe

2014-02-12 21:58 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-12 21:58 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-12 21:57 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-12 21:57 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-12 21:57 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-12 21:57 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-12 21:57 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-12 21:57 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-12 21:57 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-12 21:57 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-12 21:57 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-12 21:57 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-12 21:57 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-12 21:57 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-12 21:57 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-12 21:57 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-12 21:57 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-12 21:57 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-12 21:57 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-12 21:57 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-12 21:57 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-12 21:57 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-12 21:57 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-12 21:57 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-12 21:57 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-12 21:57 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-12 21:57 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-12 21:57 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-12 21:57 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-12 21:57 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-12 21:57 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-12 21:57 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-12 21:57 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-12 21:57 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-12 21:57 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-12 21:57 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-12 21:57 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-12 21:57 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-12 21:57 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-12 21:57 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-12 21:57 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-11 22:06 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-02-11 22:06 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-11 22:06 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-11 22:06 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-11 22:06 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-02-11 22:06 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-02-11 22:05 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-02-11 22:05 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-11 22:05 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-11 22:05 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-11 22:05 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-11 22:05 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-11 22:05 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-11 22:05 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-02-11 22:05 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-02-11 22:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-11 22:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-11 22:05 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-02-11 22:05 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-11 22:05 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-02-11 22:05 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-11 22:05 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-11 22:05 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-02-11 22:05 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-07 13:46 - 2014-02-07 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-04 16:56 - 2014-02-04 16:56 - 01069512 _____ (Solid State Networks) C:\Users\merdia\Downloads\install_flashplayer12x32au_mssa_aaa_aih.exe

2014-01-15 12:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-15 12:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-15 12:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-14 21:38 - 2014-02-11 00:11 - 00000000 ____D () C:\ProgramData\Spyware Terminator

2014-01-14 21:38 - 2014-01-14 21:38 - 05049344 _____ (Crawler.com ) C:\Users\merdia\Downloads\SpywareTerminatorSetup_3.0.0.82.exe

2014-01-14 21:38 - 2014-01-14 21:38 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys

2014-01-14 21:38 - 2014-01-14 21:38 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Spyware Terminator

2014-01-14 21:38 - 2014-01-14 21:38 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator

2014-01-14 17:32 - 2014-02-12 23:11 - 00003112 _____ () C:\Windows\System32\Tasks\RDReminder
 

==================== One Month Modified Files and Folders =======
 

2014-02-13 22:32 - 2014-02-13 22:31 - 00031602 _____ () C:\Users\merdia\Desktop\FRST.txt

2014-02-13 22:31 - 2014-02-13 22:30 - 00000000 ____D () C:\FRST

2014-02-13 22:29 - 2014-02-13 22:29 - 02152960 _____ (Farbar) C:\Users\merdia\Desktop\FRST64.exe

2014-02-13 22:25 - 2010-11-18 14:48 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-13 22:25 - 2010-11-18 14:26 - 01476038 _____ () C:\Windows\WindowsUpdate.log

2014-02-13 22:24 - 2014-01-13 22:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-13 22:24 - 2011-05-07 23:25 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Skype

2014-02-13 22:24 - 2010-11-18 14:48 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-12 23:11 - 2014-01-14 17:32 - 00003112 _____ () C:\Windows\System32\Tasks\RDReminder

2014-02-12 23:11 - 2009-07-14 05:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-12 23:11 - 2009-07-14 05:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-12 23:09 - 2013-10-30 14:43 - 00000000 ___RD () C:\Users\merdia\Dropbox

2014-02-12 23:09 - 2013-10-30 14:40 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Dropbox

2014-02-12 23:08 - 2011-05-07 19:04 - 00000000 ___HD () C:\ASUS.DAT

2014-02-12 23:04 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-12 23:04 - 2009-07-14 05:51 - 00123338 _____ () C:\Windows\setupact.log

2014-02-12 23:03 - 2010-11-18 14:54 - 00315172 _____ () C:\Windows\PFRO.log

2014-02-12 22:13 - 2011-05-11 22:16 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-02-12 22:11 - 2009-08-04 10:51 - 00670650 _____ () C:\Windows\system32\perfh007.dat

2014-02-12 22:11 - 2009-08-04 10:51 - 00136528 _____ () C:\Windows\system32\perfc007.dat

2014-02-12 22:11 - 2009-07-14 06:13 - 01565438 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-12 21:59 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini

2014-02-12 21:52 - 2010-11-18 15:06 - 00338594 _____ () C:\Windows\DPINST.LOG

2014-02-12 18:54 - 2012-11-15 16:07 - 00000000 ____D () C:\Users\merdia\Desktop\UNIDO

2014-02-12 18:52 - 2013-07-26 23:11 - 00000278 _____ () C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job

2014-02-12 18:52 - 2013-07-26 23:10 - 00000000 ____D () C:\Program Files (x86)\Dll-Files.com Fixer

2014-02-11 13:26 - 2011-05-11 22:16 - 00000000 ____D () C:\Users\merdia\AppData\Local\Microsoft Help

2014-02-11 00:11 - 2014-01-14 21:38 - 00000000 ____D () C:\ProgramData\Spyware Terminator

2014-02-09 00:19 - 2012-05-15 20:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-02-08 20:39 - 2013-09-16 21:02 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-02-08 20:25 - 2013-07-26 23:11 - 00000294 _____ () C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job

2014-02-07 21:38 - 2013-12-20 22:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak

2014-02-07 13:47 - 2014-02-07 13:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-06 23:29 - 2014-01-13 22:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-06 23:29 - 2012-04-22 13:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-06 23:29 - 2011-05-15 17:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-06 13:16 - 2014-02-12 21:57 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-12 21:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-12 21:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-12 21:57 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-12 21:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-12 21:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-12 21:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-12 21:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-06 11:52 - 2014-02-12 21:57 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-06 11:49 - 2014-02-12 21:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-12 21:57 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-12 21:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-12 21:57 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-12 21:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-12 21:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-12 21:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-06 11:11 - 2014-02-12 21:57 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-12 21:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-12 21:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-12 21:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-12 21:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-12 21:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-12 21:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-12 21:57 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-06 10:49 - 2014-02-12 21:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-06 10:47 - 2014-02-12 21:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-12 21:57 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-12 21:57 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-12 21:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-12 21:57 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-06 10:22 - 2014-02-12 21:57 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-12 21:57 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-12 21:57 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-12 21:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-12 21:57 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-12 21:57 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-12 21:57 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-12 21:57 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-12 21:57 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-04 16:56 - 2014-02-04 16:56 - 01069512 _____ (Solid State Networks) C:\Users\merdia\Downloads\install_flashplayer12x32au_mssa_aaa_aih.exe

2014-02-04 16:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-02-04 16:01 - 2013-07-22 23:08 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\uTorrent

2014-01-26 21:54 - 2012-09-24 21:07 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\vlc

2014-01-19 22:44 - 2013-10-30 14:41 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-01-19 22:44 - 2011-04-15 09:13 - 00000000 ___RD () C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-16 13:23 - 2009-07-14 05:45 - 00439200 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-15 23:49 - 2013-08-14 09:08 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 23:47 - 2011-05-15 17:03 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-15 12:02 - 2013-11-01 23:36 - 00002028 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk

2014-01-15 12:02 - 2010-11-18 14:38 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-15 11:18 - 2010-11-18 15:11 - 00001593 _____ () C:\Windows\system32\ServiceFilter.ini

2014-01-15 11:16 - 2010-11-18 15:11 - 00002502 _____ () C:\Windows\system32\AutoRunFilter.ini

2014-01-14 21:38 - 2014-01-14 21:38 - 05049344 _____ (Crawler.com ) C:\Users\merdia\Downloads\SpywareTerminatorSetup_3.0.0.82.exe

2014-01-14 21:38 - 2014-01-14 21:38 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys

2014-01-14 21:38 - 2014-01-14 21:38 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Spyware Terminator

2014-01-14 21:38 - 2014-01-14 21:38 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
 

Some content of TEMP:

====================

C:\Users\Ipod Matthias\AppData\Local\Temp\7hvcu8sv.dll

C:\Users\Ipod Matthias\AppData\Local\Temp\AskSLib.dll

C:\Users\merdia\AppData\Local\Temp\7z920.exe

C:\Users\merdia\AppData\Local\Temp\appshat-distribution.exe

C:\Users\merdia\AppData\Local\Temp\AskSLib.dll

C:\Users\merdia\AppData\Local\Temp\avgnt.exe

C:\Users\merdia\AppData\Local\Temp\DevSetup32.dll

C:\Users\merdia\AppData\Local\Temp\DevSetup64.dll

C:\Users\merdia\AppData\Local\Temp\DriverInstall32.exe

C:\Users\merdia\AppData\Local\Temp\DriverInstall64.exe

C:\Users\merdia\AppData\Local\Temp\FileSystemView.dll

C:\Users\merdia\AppData\Local\Temp\Installer.exe

C:\Users\merdia\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe

C:\Users\merdia\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe

C:\Users\merdia\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe

C:\Users\merdia\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe

C:\Users\merdia\AppData\Local\Temp\KillProcess.exe

C:\Users\merdia\AppData\Local\Temp\libexpat.dll

C:\Users\merdia\AppData\Local\Temp\mfc80.dll

C:\Users\merdia\AppData\Local\Temp\mfc80u.dll

C:\Users\merdia\AppData\Local\Temp\mfcm80.dll

C:\Users\merdia\AppData\Local\Temp\mfcm80u.dll

C:\Users\merdia\AppData\Local\Temp\MoviesToolbarSetup_Somoto.exe

C:\Users\merdia\AppData\Local\Temp\MSETUP4.EXE

C:\Users\merdia\AppData\Local\Temp\msvcm80.dll

C:\Users\merdia\AppData\Local\Temp\msvcp80.dll

C:\Users\merdia\AppData\Local\Temp\msvcr80.dll

C:\Users\merdia\AppData\Local\Temp\nlsdl.dll

C:\Users\merdia\AppData\Local\Temp\ose00000.exe

C:\Users\merdia\AppData\Local\Temp\pricepeep_130001_0101.exe

C:\Users\merdia\AppData\Local\Temp\QuickShare1.exe

C:\Users\merdia\AppData\Local\Temp\SkypeSetup.exe

C:\Users\merdia\AppData\Local\Temp\tmdbg64.dll

C:\Users\merdia\AppData\Local\Temp\uninstall.exe

C:\Users\merdia\AppData\Local\Temp\UpdateCheckerSetup.exe

C:\Users\merdia\AppData\Local\Temp\vlc-2.0.8-win32.exe

C:\Users\merdia\AppData\Local\Temp\wajam_download.exe

C:\Users\merdia\AppData\Local\Temp\~convert5302618184181069256.exe

C:\Users\merdia\AppData\Local\Temp\~convert5486822247663086418.exe

C:\Users\merdia\AppData\Local\Temp\~convert6386108904061205113.exe

C:\Users\merdia\AppData\Local\Temp\~convert639819676036233620.exe

C:\Users\merdia\AppData\Local\Temp\~convert6430201708474281386.exe

C:\Users\merdia\AppData\Local\Temp\~convert8324292555196541881.exe

C:\Users\merdia\AppData\Local\Temp\~convert8450605163558216672.exe

C:\Users\merdia\AppData\Local\Temp\?odec Performer803921.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2012-05-20 16:16
 

==================== End Of Log ============================

--- --- ---

Addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-02-2014 01

Ran by merdia at 2014-02-13 22:32:40

Running from C:\Users\merdia\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Trend Micro Titanium Internet Security (Disabled - Up to date) {68F968AC-2AA0-091D-848C-803E83E35902}

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Trend Micro Titanium Internet Security (Disabled - Up to date) {D3988948-0C9A-0693-BE3C-BB4CF86413BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

µTorrent (HKCU Version: 3.3.1.29812 - BitTorrent Inc.)

7-Zip 9.20 (x32 Version:  - )

Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.)

Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden

Adobe Digital Editions 2.0 (x32 Version: 2.0 - Adobe Systems Incorporated)

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04 - Adobe Systems Incorporated)

Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.)

Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.) Hidden

Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)

Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)

Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)

ArcSoft TotalMedia 3.5 (x32 Version: 3.5.91.388 - ArcSoft)

ASUS AI Recovery (x32 Version: 1.0.9 - ASUS)

ASUS AP Bank (x32 Version: 1.0.0.0 - ASUSTEK)

ASUS Data Security Manager (x32 Version: 1.00.0014 - ASUS)

ASUS FancyStart (x32 Version: 1.0.8 - ASUSTeK Computer Inc.)

ASUS LifeFrame3 (x32 Version: 3.0.20 - ASUS)

ASUS Live Update (x32 Version: 2.5.9 - ASUS)

ASUS MultiFrame (x32 Version: 1.0.0021 - ASUS)

ASUS Power4Gear Hybrid (Version: 1.1.37 - ASUS)

ASUS SmartLogon (x32 Version: 1.0.0008 - ASUS)

ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028 - ASUS)

ASUS U Series Bamboo ScreenSaver (x32 Version: 1.0.0001 - ASUS)

ASUS Virtual Camera (x32 Version: 1.0.19 - asus)

ASUS WebStorage (x32 Version: 2.0.46.1429 - eCareme Technologies, Inc.)

ATK Package (x32 Version: 1.0.0003 - ASUS)

Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)

BIPA FotoShop (x32 Version: 5.1.3 - CEWE Stiftung u Co. KGaA)

Boingo Wi-Fi (x32 Version: 1.7.0048 - Boingo Wireless, Inc.)

Bonjour (Version: 3.0.0.10 - Apple Inc.)

Bookworm Deluxe (x32 Version:  - Oberon Media Inc.)

Bundled software uninstaller (x32 Version:  - ) <==== ATTENTION

Canon Easy-PhotoPrint EX (x32 Version:  - )

Canon Easy-WebPrint EX (x32 Version: 1.3.5.0 - Canon Inc.)

Canon IJ Network Scanner Selector EX (x32 Version:  - )

Canon IJ Network Tool (x32 Version: 3.1.1 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32 Version:  - )

Canon MG5300 series Benutzerregistrierung (x32 Version:  - )

Canon MG5300 series MP Drivers (Version:  - Canon Inc.)

Canon MG5300 series On-screen Manual (x32 Version:  - )

Canon MP Navigator EX 5.0 (x32 Version:  - )

Canon My Printer (x32 Version:  - )

Canon Solution Menu EX (x32 Version:  - )

Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden

Cinergy T Stick RC V86.001.1129.2011 (x32 Version: 86.001.1129.2011 - )

CollageIt 1.8.9 (x32 Version:  - PearlMountain Technology Co., Ltd)

ControlDeck (x32 Version: 1.0.7 - ASUS)

Cooking Dash (x32 Version:  - Oberon Media Inc.)

CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.)

CyberLink LabelPrint (x32 Version: 2.5.1908 - CyberLink Corp.) Hidden

DAEMON Tools Lite (x32 Version: 4.40.2.0131 - DT Soft Ltd)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)

Dll-Files Fixer (x32 Version: 3.1.81 - Dll-Files.com)

Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)

ETDWare PS/2-x64 7.0.5.9_WHQL (Version:  - )

Fast Boot (Version: 1.0.5 - ASUS)

ffdshow v1.2.4422 [2012-04-09] (x32 Version: 1.2.4422.0 - )

Free Video Flip and Rotate version 2.1.6.128 (x32 Version: 2.1.6.128 - DVDVideoSoft Ltd.)

Game Park Console (x32 Version: 6.2.1.1 - Oberon Media, Inc.)

Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

Haali Media Splitter (x32 Version:  - )

HappyFoto - Bestellassistent (HKCU Version:  - HAPPY - FOTO GmbH / ©2011 Aberger Software GmbH)

HappyFoto-Designer 4.4 (x32 Version:  - )

hosts (x32 Version: 1.28.153.3 - Irismedia)

Hotel Dash Suite Success (x32 Version:  - Oberon Media Inc.)

HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät (Version: 22.50.231.0 - Hewlett-Packard Co.)

HP Deskjet 1050 J410 series Hilfe (x32 Version: 140.0.66.66 - Hewlett Packard)

iCloud (Version: 3.0.2.163 - Apple Inc.)

iDumpPod2iTunesDEMO (x32 Version: 1.2.0.6 - EscSoft)

Intel PROSet Wireless (Version:  - ) Hidden

Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2119 - Intel Corporation)

Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)

Intel(R) PROSet/Wireless WiFi Software (Version: 13.02.0000 - Intel Corporation)

Intel(R) Turbo Boost Technology Monitor (Version: 1.0.115.11 - Intel)

Intel(R) Wireless Display (Version: 1.2.15.0 - Intel Corporation)

IrfanView (remove only) (x32 Version: 4.30 - Irfan Skiljan)

IT9130 Driver v12.3.14.1 (x32 Version:  - )

iTunes (Version: 11.1.1.11 - Apple Inc.)

iVIDI Plugin 1.3 (x32 Version: 1.3 - iVIDI Plugin, Inc.)

IZArc 4.1.6 (x32 Version: 4.1.6 - Ivan Zahariev)

Java 7 Update 17 (x32 Version: 7.0.170 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden

Java(TM) 6 Update 29 (x32 Version: 6.0.290 - Oracle)

JavaFX 2.1.0 (x32 Version: 2.1.0 - Oracle Corporation)

Jewel Quest 3 (x32 Version:  - Oberon Media Inc.)

JLC's Internet TV (x32 Version:  - )

Join Air (x32 Version: 1.0.0.1 - ZTE)

Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

LG United Mobile Drivers (x32 Version: 3.6.0.0 - LG Electronics)

Lidl-Fotos (x32 Version:  - )

Luxor 3 (x32 Version:  - Oberon Media Inc.)

Mahjongg dimensions (x32 Version:  - Oberon Media Inc.)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)

Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla)

Mozilla Maintenance Service (x32 Version: 27.0 - Mozilla)

MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0 - Microsoft Corporation)

NAVIGON Fresh 3.4.1 (x32 Version: 3.4.1 - NAVIGON)

NB Probe (x32 Version:  - )

Net4Switch (x32 Version: 1.00.0020 - ASUS)

Nur Entfernen der CopyTrans Suite möglich (HKCU Version: 2.33 - WindSolutions)

NVIDIA Drivers (Version: 1.10.58.36 - NVIDIA Corporation)

NVIDIA Updatus (x32 Version: 1.0.3 - NVIDIA Corporation) Hidden

OnlineFotoservice (x32 Version: 5.1.3 - CEWE Stiftung u Co. KGaA)

OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org)

PDF Architect (x32 Version: 1.0.52.8917 - pdfforge)

PDFCreator (x32 Version: 1.6.2 - pdfforge)

Photo Collage Creator 3.97 (x32 Version:  - AMS Software)

Pixum Fotobuch (x32 Version:  - )

Plants vs Zombies (x32 Version:  - Oberon Media Inc.)

QuickShare (x32 Version: 10.204.60.14277 - Linkury Inc.) <==== ATTENTION

QuickTime (x32 Version: 7.71.80.42 - Apple Inc.)

Reader for PC (x32 Version: 2.0.01.11080 - Sony Corporation)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6098 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden

Riot - Radical Image Optimization Tool (x32 Version:  - )

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden

SES Driver (Version: 1.0.0 - Western Digital)

Sid Meier's Civilization V Brave New World (x32 Version: 1 - )

Skype Click to Call (x32 Version: 5.10.9560 - Skype Technologies S.A.)

Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)

Sony Ericsson Update Engine (x32 Version: 2.13.8.201307151333 - Sony Ericsson Communications AB)

Sony PC Companion 2.10.188 (x32 Version: 2.10.188 - Sony)

Spyware Terminator 2012 (x32 Version: 3.0.0.82 - Crawler.com)

SRS Premium Sound Control Panel (Version: 1.8.5700 - SRS Labs, Inc.)

syncables desktop (x32 Version: 5.5.502.8155 - syncables)

syncables desktop SE (x32 Version: 5.5.746.11492 - syncables)

TerraTec Home Cinema (x32 Version: 6.25.6 - )

Trend Micro Titanium Internet Security (Version: 3.0 - Trend Micro Inc.)

Trend Micro Titanium Internet Security (Version: 3.00 - Trend Micro Inc.) Hidden

Unitech LLC toolbar   (x32 Version: 1.8.23.0 - Unitech LLC)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2494150) (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2837583) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)

USB2.0 UVC 2M WebCam (Version: 5.8.54000.207 - Sonix)

VLC media player 2.0.3 (x32 Version: 2.0.3 - VideoLAN)

WD SmartWare (Version: 1.4.1.1 - Western Digital)

WIDCOMM Bluetooth Software (Version: 6.2.5.600 - Broadcom Corporation)

Windows Driver Package - Broadcom (BTHUSB) Bluetooth  (02/25/2010 6.2.0.9419) (Version: 02/25/2010 6.2.0.9419 - Broadcom)

Windows Driver Package - Broadcom Bluetooth  (01/19/2010 6.2.0.1417) (Version: 01/19/2010 6.2.0.1417 - Broadcom)

Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (Version: 07/29/2009 6.1.7100.0 - Broadcom)

Windows Driver Package - Broadcom Bluetooth  (07/30/2009 6.2.0.9405) (Version: 07/30/2009 6.2.0.9405 - Broadcom)

Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (Version: 07/28/2009 6.2.0.9800 - Broadcom)

Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM  (03/06/2009 1.0.0008.0) (Version: 03/06/2009 1.0.0008.0 - Western Digital Technologies)

Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6 - Microsoft Corporation)

Windows Live Call (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

Windows Live Communications Platform (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

Windows Live Family Safety (Version: 14.0.8052.1208 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

Windows Live Messenger (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (x32 Version: 14.0.8051.1204 - Microsoft Corporation) Hidden

Windows Live Sync (x32 Version: 14.0.8050.1202 - Microsoft Corporation)

Windows Live Upload Tool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)

Windows Live Writer (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden

WinFlash (x32 Version: 2.30.1 - ASUS)

WinRAR 4.00 (64-Bit) (Version: 4.00.0 - win.rar GmbH)

Wireless Console 3 (x32 Version: 3.0.15 - ASUS)

World of Goo (x32 Version:  - Oberon Media Inc.)

XMedia Recode Version 3.1.7.2 (x32 Version: 3.1.7.2 - XMedia Recode)
 

==================== Restore Points  =========================
 
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {010DEC61-0815-485F-A6BC-8AAA4235AAF5} - System32\Tasks\{6BCB4E8F-A4BE-44C9-9700-74967D711482} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)

Task: {17CC516B-6F24-4DC5-94EB-FC0B03DC3B80} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-05-28] (ATK)

Task: {1B4FA6FF-DCC6-4A7C-AC26-4078BD93E4EC} - System32\Tasks\{83319355-D9DA-44EC-AB8C-088C1B36626E} => C:\Program Files (x86)\ALNO\KPL\KPL.exe

Task: {2C0AE9D9-F4AB-4B2F-8E42-21A3EC40AF73} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-18] (Google Inc.)

Task: {31A2E1F3-14C0-4BB0-A78B-F3E344396D0C} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS)

Task: {3B7CA9D4-B88F-4BEB-A336-CCD1F66E28E0} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-11-25] (Dll-FIles.Com)

Task: {3E638C66-7A81-4E1F-BE82-4699E6CFD79F} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] ()

Task: {3FBFCF07-4ADC-4950-A704-40F296234248} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe [2010-05-17] (asus)

Task: {40B2F38F-0275-46E1-8820-89E2731DA35A} - System32\Tasks\RDReminder => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-11-25] (Dll-FIles.Com)

Task: {456E688D-9659-4856-A91F-EEA1E30E7E61} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-11-25] (Dll-FIles.Com)

Task: {62D7E74D-19C1-4E28-BF34-C81E304D98BA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-18] (Google Inc.)

Task: {99060075-B9F0-4EFC-896B-16599599F527} - System32\Tasks\Net4Switch => C:\Program Files (x86)\ASUS\Net4Switch\Net4Switch.exe [2009-09-23] (ASUS)

Task: {9FF7E75E-1080-420C-9620-49AA14CC1913} - System32\Tasks\{279271BE-A19F-4F94-A967-47ACD03CA251} => C:\Users\merdia\Desktop\vlc-2.0.3-win32.exe

Task: {A32BBEB6-D196-444A-A769-D35F88F9D101} - System32\Tasks\{F6569881-195B-416F-8EF3-DE5A8EFD1508} => C:\Program Files (x86)\ALNO\KPL\KPL.exe

Task: {B179F44E-65E3-4C7D-8DB0-B29C91AB2FA8} - System32\Tasks\{D2CED333-FCE7-47B4-9FED-55E839018927} => C:\Program Files (x86)\ALNO\KPL\KPL.exe

Task: {BD11BBC6-70AC-4212-A7FE-01DBD357AB4C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated)

Task: {C64D71FF-460F-4FFF-B3F4-538F09E9E5D1} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()

Task: {C7D0BDBE-0038-433C-A906-5361C6652ACD} - System32\Tasks\{0D072F56-1F88-4478-8CFE-A2F93C950115} => C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TotalMedia.exe [2011-05-06] (ArcSoft, Inc.)

Task: {C9E42DA8-0725-4B95-BC26-E654E4CC8789} - System32\Tasks\{667E30A2-880D-48EC-9313-F3FFC7436D81} => C:\Program Files (x86)\ALNO\KPL\KPL.exe

Task: {D4D9D503-CC3B-4188-817B-75FC69716A82} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)

Task: {DA3EA9EF-1401-4550-AAEA-A3EEE18C4160} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {DDB49BC2-1AF9-4A8A-BAFD-DF9D3ACA794C} - System32\Tasks\{0FF727F9-44A1-4E77-A51A-E557447F7CB8} => C:\Program Files (x86)\ALNO\KPL\KPL.exe

Task: {DFF5A4A1-7CD4-474F-AEDB-38141B22D75E} - System32\Tasks\Updater35382.exe => C:\Users\merdia\AppData\Local\Updater35382\Updater35382.exe [2013-10-08] (Irismedia) <==== ATTENTION

Task: {F9E87C04-C82C-49FA-8FBB-6B2FE38AD21E} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe

Task: C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2007-06-15 09:28 - 2007-06-15 09:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll

2007-06-01 15:52 - 2007-06-01 15:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2010-03-12 05:14 - 2010-03-12 05:14 - 00173344 _____ () C:\PROGRAM FILES\WIDCOMM\BLUETOOTH SOFTWARE\btkeyind.dll

2010-03-16 02:48 - 2010-03-16 02:48 - 00148816 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\EcaremeDLL.dll

2010-11-18 14:48 - 2010-11-18 14:48 - 00030032 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll

2010-11-18 14:48 - 2010-11-18 14:48 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll

2011-05-11 18:30 - 2011-03-02 11:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll

2010-03-16 02:48 - 2010-03-16 02:48 - 01754448 _____ () C:\PROGRAM FILES (X86)\ASUS\ASUS WEBSTORAGE\SERVICE\ASUSWSSERVICE.EXE

2010-03-05 18:21 - 2010-03-05 18:21 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll

2012-12-26 19:20 - 2013-10-31 11:35 - 00070880 _____ () C:\PROGRAM FILES (X86)\SONY\SONY PC COMPANION\PCCOMPANIONINFO.EXE

2013-04-30 16:49 - 2012-04-01 15:25 - 00153936 _____ () C:\PROGRAM FILES (X86)\JOIN AIR\UIEXEC.EXE

2013-03-22 00:06 - 2013-03-21 22:41 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-09-16 21:03 - 2011-02-07 08:56 - 00138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2013-04-30 16:49 - 2012-04-01 15:25 - 00271696 _____ () C:\Program Files (x86)\Join Air\AssistantServices.exe

2010-09-08 09:45 - 2010-09-08 09:45 - 01034752 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe

2010-03-05 09:24 - 2010-03-05 09:24 - 00886272 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\System.Data.SQLite.dll

2011-05-07 19:06 - 2007-08-03 11:24 - 00125496 _____ () C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

2012-12-26 19:20 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll

2012-12-26 19:20 - 2013-09-13 10:02 - 00208896 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll

2011-07-07 13:54 - 2011-07-07 13:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll

2012-09-03 22:18 - 2013-05-20 11:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll

2012-12-26 19:20 - 2010-01-11 15:44 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll

2013-05-14 08:38 - 2013-05-14 08:38 - 00607744 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll

2007-06-15 09:28 - 2007-06-15 09:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll

2007-06-01 16:08 - 2007-06-01 16:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2013-12-31 17:57 - 2013-12-31 17:57 - 00034072 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll

2013-12-31 17:58 - 2013-12-31 17:58 - 00063256 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\srau.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00149784 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00111896 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 02151192 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll

2013-12-31 17:58 - 2013-12-31 17:58 - 00055064 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\spbl.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00012568 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\siem.dll

2013-12-31 17:58 - 2013-12-31 17:58 - 00047896 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\sppsm.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00727320 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00081176 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00013592 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00016664 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll

2013-12-31 17:58 - 2013-12-31 17:58 - 00030488 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\srut.dll

2013-12-31 17:58 - 2013-12-31 17:58 - 00019736 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\srsbs.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00056600 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll

2013-12-31 17:58 - 2013-12-31 17:58 - 00013592 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\srpdm.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00013592 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\sgml.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00052504 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll

2013-12-31 17:56 - 2013-12-31 17:56 - 00047384 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\MACTrackBarLib.dll

2013-12-31 17:56 - 2013-12-31 17:56 - 00025368 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll

2013-12-31 17:57 - 2013-12-31 17:57 - 00024856 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll

2013-12-31 17:58 - 2013-12-31 17:58 - 00247576 _____ () C:\Users\merdia\AppData\Local\Smartbar\Application\srns.dll

2012-12-26 19:20 - 2013-10-31 11:35 - 00070880 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe

2012-07-29 20:29 - 2007-04-19 08:33 - 00035584 _____ () C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\uPiApi.dll

2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll

2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\merdia\AppData\Roaming\Dropbox\bin\libcef.dll

2014-02-07 13:47 - 2014-02-07 13:47 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2011-01-17 15:19 - 2011-05-08 13:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll

2012-11-08 10:54 - 2012-11-08 10:54 - 00880640 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\fsk.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00039816 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskMediaPlayers.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00239496 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\Fskin.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00026504 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskinLocalize.dll

2012-10-23 21:58 - 2012-10-23 21:58 - 00798720 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskSecurity.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00124808 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskDocumentViewer.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00015752 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskPower.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00024456 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskNetInterface.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00016776 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskMobileMediaDevice.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00014728 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskTimeHardware.dll

2012-11-08 10:56 - 2012-11-08 10:56 - 00034184 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ticket.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00018312 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ebookDeviceNotifier.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00092040 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ebookUsb.dll

2012-11-08 10:55 - 2012-11-08 10:55 - 00149384 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\readerAppHelper.dll

2012-11-08 10:56 - 2012-11-08 10:56 - 00178056 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\USBDetector.dll

2013-04-30 16:49 - 2012-04-01 15:25 - 00153936 _____ () C:\Program Files (x86)\Join Air\UIExec.exe
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Disabled items from MSCONFIG ==============
 

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe

MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe

MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"

MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
 

==================== Faulty Device Manager Devices =============
 

Name: BT-270

Description: BT-270

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Broadcom

Service: BTHUSB

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/13/2014 10:24:15 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76406544
 

Error: (02/13/2014 10:24:15 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 76406544
 

Error: (02/13/2014 10:24:15 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2014 10:24:14 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76405530
 

Error: (02/13/2014 10:24:14 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 76405530
 

Error: (02/13/2014 10:24:14 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2014 10:24:13 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76404516
 

Error: (02/13/2014 10:24:13 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 76404516
 

Error: (02/13/2014 10:24:13 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2014 10:24:12 PM) (Source: Bonjour Service) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76403518
 
 

System errors:

=============

Error: (02/12/2014 11:09:06 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (02/12/2014 11:09:06 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht.
 

Error: (02/12/2014 11:08:24 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (02/12/2014 11:08:24 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (02/12/2014 11:08:24 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Funktionssuche-Ressourcenveröffentlichung erreicht.
 

Error: (02/12/2014 09:56:03 PM) (Source: DCOM) (User: )

Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
 

Error: (02/12/2014 06:49:29 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht.
 

Error: (02/11/2014 09:50:54 PM) (Source: Server) (User: )

Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{12D5E719-4DE6-4143-96CC-3863A4110CC4} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 

Error: (02/11/2014 09:50:48 PM) (Source: NetBT) (User: )

Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.
 

Error: (02/10/2014 09:39:19 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirSchedulerService erreicht.
 
 

Microsoft Office Sessions:

=========================

Error: (02/13/2014 10:24:15 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76406544
 

Error: (02/13/2014 10:24:15 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledEvent 76406544
 

Error: (02/13/2014 10:24:15 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2014 10:24:14 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76405530
 

Error: (02/13/2014 10:24:14 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledEvent 76405530
 

Error: (02/13/2014 10:24:14 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2014 10:24:13 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76404516
 

Error: (02/13/2014 10:24:13 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledEvent 76404516
 

Error: (02/13/2014 10:24:13 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2014 10:24:12 PM) (Source: Bonjour Service)(User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 76403518
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 60%

Total physical RAM: 3884.48 MB

Available physical RAM: 1520.03 MB

Total Pagefile: 7767.13 MB

Available Pagefile: 4648.02 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:16.29 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive d: (Data) (Fixed) (Total:327.83 GB) (Free:99.43 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E0C5913D)

Partition 1: (Not Active) - (Size=21 GB) - (Type=1C)

Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=328 GB) - (Type=OF Extended)
 

==================== End Of Log ============================

Aaalso, Malwarebytes als Anhang, ist zu lang.

Adwcleaner:

Code:

# AdwCleaner v3.018 - Bericht erstellt am 14/02/2014 um 19:10:13

# Updated 28/01/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : merdia - MERDIA-PC

# Gestartet von : C:\Users\merdia\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\boost_interprocess

Ordner Gelöscht : C:\ProgramData\Partner

Ordner Gelöscht : C:\Program Files (x86)\Babylon

Ordner Gelöscht : C:\Program Files\Babylon

Ordner Gelöscht : C:\Users\merdia\AppData\Local\Smartbar

Ordner Gelöscht : C:\Users\merdia\AppData\Local\Temp\Smartbar

Ordner Gelöscht : C:\Users\merdia\AppData\LocalLow\Smartbar

Ordner Gelöscht : C:\Users\merdia\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gelöscht : C:\Users\merdia\AppData\Roaming\pdfforge

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Users\merdia\AppData\Local\Temp\Uninstall.exe

Datei Gelöscht : C:\Users\merdia\AppData\Roaming\Mozilla\Firefox\Profiles\hzt0v0nr.default\user.js
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_contenta-raw-converter_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_contenta-raw-converter_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45E2-857D-2A368FE749E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536682}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536682}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}

Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Schlüssel Gelöscht : HKCU\Software\Cr_Installer

Schlüssel Gelöscht : HKCU\Software\filescout

Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions

Schlüssel Gelöscht : HKCU\Software\smartbar

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\StartSearch

Schlüssel Gelöscht : HKLM\Software\DeviceVM

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16518
 
 

-\\ Mozilla Firefox v27.0 (de)
 

[ Datei : C:\Users\merdia\AppData\Roaming\Mozilla\Firefox\Profiles\hzt0v0nr.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");

Zeile gelöscht : user_pref("extensions.crossrider.bic", "140086564590076e99368e22a03198d4");

Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);

Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);

Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);

Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);

Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "at");

Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "quickobrw");

Zeile gelöscht : user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\\"ExcludeDomains\\\":[\\\"snap.do\\\",\\\"snapdo.com\\\"],\\\"hxxpInjection\\\":\\\"hxxp:\\\\\\/\\\\\\/i.linkuryjs.info\\\\\\/kury\\\\\\[...]

Zeile gelöscht : user_pref("extensions.helperbar.installationid", "eba9a6f8-1c3c-2469-00a7-7aab24bb37cb");

Zeile gelöscht : user_pref("extensions.helperbar.installdate", "23/09/2013");

Zeile gelöscht : user_pref("extensions.helperbar.lastExternalJsUpdate", "1389645149629");

Zeile gelöscht : user_pref("extensions.helperbar.publisher", "quickobrw");
 

[ Datei : C:\Users\Ipod Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\c98shd7q.default\prefs.js ]
 
 

-\\ Google Chrome v32.0.1700.107
 

[ Datei : C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht : keyword
 

*************************
 

AdwCleaner[R0].txt - [10366 octets] - [14/02/2014 19:07:10]

AdwCleaner[S0].txt - [9806 octets] - [14/02/2014 19:10:13]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9866 octets] ##########

JRT

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.1 (02.04.2014:1)

OS: Windows 7 Home Premium x64

Ran by merdia on 14.02.2014 at 19:21:34,71

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322532282}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322532282}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0955D5D2-4C84-4FAB-A62A-A19A21864737}
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\Windows\Tasks\dll-files.com fixer_monthly.job"

Successfully deleted: [File] "C:\Windows\Tasks\dll-files.com fixer_updates.job"
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\Users\merdia\AppData\Roaming\dll-files.com"

Successfully deleted: [Folder] "C:\Program Files (x86)\dll-files.com fixer"
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\merdia\AppData\Roaming\mozilla\firefox\profiles\hzt0v0nr.default\prefs.js
 

user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=nt&installDate=23/09/2

user_pref("browser.search.defaultengine", "Dogpile");

user_pref("browser.search.order.1", "Dogpile");

user_pref("keyword.URL", "hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&installDate=23/09/2013&q="

Emptied folder: C:\Users\merdia\AppData\Roaming\mozilla\firefox\profiles\hzt0v0nr.default\minidumps [240 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 14.02.2014 at 19:54:28,99

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST neu:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01

Ran by merdia (administrator) on MERDIA-PC on 14-02-2014 19:56:45

Running from C:\Users\merdia\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe

(Microsoft Corporation) C:\WINDOWS\SYSTEM32\WLANEXT.EXE

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\SCHED.EXE

(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

(Avira Operations GmbH & Co. KG) C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\AVGUARD.EXE

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

() C:\PROGRAM FILES (X86)\CANON\IJPLM\IJPLMSVC.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe

(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiMiniService.exe

() C:\PROGRAM FILES (X86)\JOIN AIR\ASSISTANTSERVICES.EXE

(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe

(WDC) C:\PROGRAM FILES\WESTERN DIGITAL\WD SMARTWARE\WD DRIVE MANAGER\WDDMSERVICE.EXE

() C:\PROGRAM FILES (X86)\WESTERN DIGITAL\WD SMARTWARE\FRONT PARLOR\WDFME\WDFME.EXE

() C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe

(ASUS) C:\Windows\AsScrPro.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe

() C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe

() C:\PROGRAM FILES (X86)\ASUS\ASUS WEBSTORAGE\SERVICE\ASUSWSSERVICE.EXE

(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(Intel(R) Corporation) C:\PROGRAM FILES\COMMON FILES\INTEL\WIRELESSCOMMON\IFRMEWRK.EXE

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE

(syncables, LLC) C:\PROGRAM FILES (X86)\SYNCABLES\SYNCABLES DESKTOP\SYNCABLES.EXE

(Sony) C:\PROGRAM FILES (X86)\SONY\SONY PC COMPANION\PCCOMPANION.EXE

(Skype Technologies S.A.) C:\PROGRAM FILES (X86)\SKYPE\PHONE\SKYPE.EXE

(Broadcom Corporation.) C:\PROGRAM FILES\WIDCOMM\BLUETOOTH SOFTWARE\BTTRAY.EXE

(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORUPDATE.EXE

(SRS Labs, Inc.) C:\PROGRAM FILES\SRS LABS\SRS PREMIUM SOUND CONTROL PANEL\SRSPREMIUMPANEL_64.EXE

(ArcSoft, Inc.) C:\PROGRAM FILES (X86)\ARCSOFT\TOTALMEDIA 3.5\TMMONITOR.EXE

(Sun Microsystems, Inc.) C:\PROGRAM FILES (X86)\SYNCABLES\SYNCABLES DESKTOP\JRE\BIN\JAVAW.EXE

(Western Digital Technologies, Inc.) C:\PROGRAM FILES\WESTERN DIGITAL\WD SMARTWARE\WD DRIVE MANAGER\WDDMSTATUS.EXE

(Dropbox, Inc.) C:\USERS\MERDIA\APPDATA\ROAMING\DROPBOX\BIN\DROPBOX.EXE

(Boingo Wireless, Inc.) C:\PROGRAM FILES (X86)\BOINGO\BOINGO WI-FI\BOINGO WI-FI.EXE

(OpenOffice.org) C:\PROGRAM FILES (X86)\OPENOFFICE.ORG 3\PROGRAM\SOFFICE.EXE

() C:\PROGRAM FILES (X86)\SONY\SONY PC COMPANION\PCCOMPANIONINFO.EXE

(OpenOffice.org) C:\PROGRAM FILES (X86)\OPENOFFICE.ORG 3\PROGRAM\SOFFICE.BIN

(Renesas Electronics Corporation) C:\PROGRAM FILES (X86)\RENESAS ELECTRONICS\USB 3.0 HOST CONTROLLER DRIVER\APPLICATION\NUSB3MON.EXE

(ASUS) C:\PROGRAM FILES (X86)\ASUS\ATK PACKAGE\ATKOSD2\ATKOSD2.EXE

(ASUS) C:\PROGRAM FILES (X86)\ASUS\ATK PACKAGE\ATK MEDIA\DMEDIA.EXE

(ASUS) C:\PROGRAM FILES (X86)\ASUS\ATK PACKAGE\ATK HOTKEY\HCONTROLUSER.EXE

(Apple Inc.) C:\PROGRAM FILES (X86)\QUICKTIME\QTTASK.EXE

(ArcSoft Inc.) C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE

(Sony Corporation) C:\PROGRAM FILES (X86)\SONY\READERDESKTOP\APPHELPER\READERAPPHELPER.EXE

(Sun Microsystems, Inc.) C:\PROGRAM FILES (X86)\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE

(Avira Operations GmbH & Co. KG) C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE

() C:\PROGRAM FILES (X86)\JOIN AIR\UIEXEC.EXE

(CANON INC.) C:\PROGRAM FILES (X86)\CANON\SOLUTION MENU EX\CNSEMAIN.EXE

(CANON INC.) C:\PROGRAM FILES (X86)\CANON\IJ NETWORK SCANNER SELECTOR EX\CNMNSST.EXE

(Apple Inc.) C:\PROGRAM FILES (X86)\ITUNES\ITUNESHELPER.EXE

(Microsoft Corporation) C:\WINDOWS\SPLWOW64.EXE

(Apple Inc.) C:\PROGRAM FILES\IPOD\BIN\IPODSERVICE.EXE

(Microsoft Corporation) C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V4.0.30319\MSCORSVW.EXE

(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE

(Mozilla Corporation) C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)

HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()

HKLM\...\Run: [VizorHtmlDialog.exe] - C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.)

HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [322384 2010-09-17] (Trend Micro Inc.)

HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [17412200 2010-03-27] (NVIDIA Corporation)

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)

HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)

HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)

HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)

HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)

HKLM-x32\...\Run: [Boingo Wi-Fi] - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2429 2010-11-18] ()

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [7350912 2010-02-04] (ASUS)

HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-01-05] (ASUS)

HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)

HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)

HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [] - [X]

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\Join Air\UIExec.exe [153936 2012-04-01] ()

HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1000\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

HKU\S-1-5-21-1334498686-1576535541-2732482738-1000\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [1305408 2011-01-20] (DT Soft Ltd)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [BlazeServoTool] - "C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe"

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: F - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: I - I:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {06876f29-b116-11e2-8918-bcaec51319e2} - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {144a0106-0684-11e2-b5d4-74f06dbce1ab} - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {144a0110-0684-11e2-b5d4-74f06dbce1ab} - F:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {2a598b41-a542-11e2-bc63-1a5d5eb43d53} - F:\LGAutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {c7ed047b-786c-11e2-94d9-bcaec51319e2} - I:\AutoRun.exe

HKU\S-1-5-21-1334498686-1576535541-2732482738-1001\...\MountPoints2: {f49cdf48-b19c-11e2-819a-bcaec51319e2} - F:\AutoRun.exe

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [95848 2010-03-27] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [90216 2010-03-27] (NVIDIA Corporation)

Startup: C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\merdia\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: hosts - {11111111-1111-1111-1111-110311531182} - C:\Program Files (x86)\hosts\hosts-bho64.dll No File

BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)

BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)

BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)

Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)

Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21

Tcpip\..\Interfaces\{B6744583-EFE2-43B2-8A09-101F6480A9AE}: [NameServer]0.0.0.0
 

FireFox:

========

FF ProfilePath: C:\Users\merdia\AppData\Roaming\Mozilla\Firefox\Profiles\hzt0v0nr.default

FF Homepage: about:home

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\merdia\AppData\Roaming\Mozilla\Firefox\Profiles\hzt0v0nr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-09]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-07]

FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\

FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ []

FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-04-12]
 

Chrome: 

=======

CHR HomePage: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=hp&installDate=23/09/2013

CHR DefaultSearchProvider: Web

CHR DefaultSearchURL: hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=AT&userid=eba9a6f8-1c3c-2469-00a7-7aab24bb37cb&searchtype=ds&q={searchTerms}&installDate=23/09/2013

CHR DefaultNewTabURL: 

CHR Extension: (Google Drive) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-01-07]

CHR Extension: (YouTube) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-07]

CHR Extension: (Google-Suche) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-01-07]

CHR Extension: (iVIDI.org plugin) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\giacfgjdclhnmkacnfbaljbmpnelflol [2013-12-14]

CHR Extension: (Stealthy) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2013-12-14]

CHR Extension: (Skype Click to Call) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-01-07]

CHR Extension: (Google Wallet) - C:\Users\merdia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-14]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-03-02]
 

==================== Services (Whitelisted) =================
 

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-06] (Avira Operations GmbH & Co. KG)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()

R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)

R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)

R3 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] ()

R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)

R2 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.)

R2 UI Assistant Service; C:\Program Files (x86)\Join Air\AssistantServices.exe [271696 2012-04-01] ()

R2 WDFME; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe [1034752 2010-09-08] ()

R2 WDSC; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe [485376 2010-09-08] ()

S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]
 

==================== Drivers (Whitelisted) ====================
 

S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)

S3 BMserDiag; C:\Windows\System32\DRIVERS\BMserDiag.sys [118144 2008-10-21] (TCT International Mobile Ltd)

S3 BMserNmea; C:\Windows\System32\DRIVERS\BMserNmea.sys [118144 2008-10-21] (TCT International Mobile Ltd)

S3 BMusbmdm; C:\Windows\System32\DRIVERS\BMusbmdm.sys [118144 2008-10-21] (TCT International Mobile Ltd)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [254528 2011-05-11] (DT Soft Ltd)

R2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [17464 2007-08-03] ()

S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2012-07-29] (ITE                      )

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()

R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-01-14] (Windows (R) Win 7 DDK provider)

R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)

R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)

R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)

R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)

R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()

S3 ipswuio; System32\DRIVERS\ipswuio.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-14 19:56 - 2014-02-14 19:56 - 00027020 _____ () C:\Users\merdia\Desktop\FRST.txt

2014-02-14 19:54 - 2014-02-14 19:54 - 00002260 _____ () C:\Users\merdia\Desktop\JRT.txt

2014-02-14 19:21 - 2014-02-14 19:21 - 00000000 ____D () C:\Windows\ERUNT

2014-02-14 19:19 - 2014-02-14 19:19 - 01037530 _____ (Thisisu) C:\Users\merdia\Desktop\JRT.exe

2014-02-14 19:16 - 2014-02-14 19:16 - 00009990 _____ () C:\Users\merdia\Desktop\AdwCleaner[S0].txt

2014-02-14 19:06 - 2014-02-14 19:10 - 00000000 ____D () C:\AdwCleaner

2014-02-14 18:41 - 2014-02-14 18:41 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Malwarebytes

2014-02-14 18:40 - 2014-02-14 18:40 - 01166132 _____ () C:\Users\merdia\Downloads\adwcleaner.exe

2014-02-14 18:39 - 2014-02-14 18:40 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-14 18:39 - 2014-02-14 18:39 - 00001115 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-14 18:39 - 2014-02-14 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-14 18:39 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-02-14 18:38 - 2014-02-14 18:38 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\merdia\Downloads\mbam-setup-1.75.0.1300.exe

2014-02-13 22:32 - 2014-02-13 22:33 - 00039980 _____ () C:\Users\merdia\Desktop\Addition old.txt

2014-02-13 22:31 - 2014-02-13 22:33 - 00054695 _____ () C:\Users\merdia\Desktop\FRST old.txt

2014-02-13 22:30 - 2014-02-14 19:56 - 00000000 ____D () C:\FRST

2014-02-13 22:29 - 2014-02-13 22:29 - 02152960 _____ (Farbar) C:\Users\merdia\Desktop\FRST64.exe

2014-02-12 21:58 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-12 21:58 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-12 21:57 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-12 21:57 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-12 21:57 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-12 21:57 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-12 21:57 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-12 21:57 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-12 21:57 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-12 21:57 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-12 21:57 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-12 21:57 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-12 21:57 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-12 21:57 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-12 21:57 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-12 21:57 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-12 21:57 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-12 21:57 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-12 21:57 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-12 21:57 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-12 21:57 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-12 21:57 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-12 21:57 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-12 21:57 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-12 21:57 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-12 21:57 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-12 21:57 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-12 21:57 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-12 21:57 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-12 21:57 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-12 21:57 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-12 21:57 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-12 21:57 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-12 21:57 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-12 21:57 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-12 21:57 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-12 21:57 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-12 21:57 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-12 21:57 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-12 21:57 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-12 21:57 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-11 22:06 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-02-11 22:06 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-11 22:06 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-11 22:06 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-11 22:06 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-02-11 22:06 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-02-11 22:05 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-02-11 22:05 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-11 22:05 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-11 22:05 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-11 22:05 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-11 22:05 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-11 22:05 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-11 22:05 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-11 22:05 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-02-11 22:05 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-02-11 22:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-11 22:05 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-11 22:05 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-02-11 22:05 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-11 22:05 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-02-11 22:05 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-11 22:05 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-11 22:05 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-02-11 22:05 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-07 13:46 - 2014-02-07 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-04 16:56 - 2014-02-04 16:56 - 01069512 _____ (Solid State Networks) C:\Users\merdia\Downloads\install_flashplayer12x32au_mssa_aaa_aih.exe

2014-01-15 12:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-15 12:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-15 12:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-15 12:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

==================== One Month Modified Files and Folders =======
 

2014-02-14 19:59 - 2014-02-14 19:56 - 00027020 _____ () C:\Users\merdia\Desktop\FRST.txt

2014-02-14 19:57 - 2011-05-07 23:25 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Skype

2014-02-14 19:56 - 2014-02-13 22:30 - 00000000 ____D () C:\FRST

2014-02-14 19:54 - 2014-02-14 19:54 - 00002260 _____ () C:\Users\merdia\Desktop\JRT.txt

2014-02-14 19:37 - 2014-01-13 22:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-14 19:21 - 2014-02-14 19:21 - 00000000 ____D () C:\Windows\ERUNT

2014-02-14 19:21 - 2009-07-14 05:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-14 19:21 - 2009-07-14 05:45 - 00010240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-14 19:19 - 2014-02-14 19:19 - 01037530 _____ (Thisisu) C:\Users\merdia\Desktop\JRT.exe

2014-02-14 19:18 - 2014-01-14 17:32 - 00003112 _____ () C:\Windows\System32\Tasks\RDReminder

2014-02-14 19:16 - 2014-02-14 19:16 - 00009990 _____ () C:\Users\merdia\Desktop\AdwCleaner[S0].txt

2014-02-14 19:16 - 2013-10-30 14:43 - 00000000 ___RD () C:\Users\merdia\Dropbox

2014-02-14 19:16 - 2013-10-30 14:40 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Dropbox

2014-02-14 19:15 - 2014-01-14 21:38 - 00000000 ____D () C:\ProgramData\Spyware Terminator

2014-02-14 19:14 - 2011-05-07 19:04 - 00000000 ___HD () C:\ASUS.DAT

2014-02-14 19:12 - 2010-11-18 14:48 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-14 19:12 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-14 19:12 - 2009-07-14 05:51 - 00123394 _____ () C:\Windows\setupact.log

2014-02-14 19:11 - 2010-11-18 14:54 - 00705206 _____ () C:\Windows\PFRO.log

2014-02-14 19:10 - 2014-02-14 19:06 - 00000000 ____D () C:\AdwCleaner

2014-02-14 19:10 - 2010-11-18 14:26 - 01526875 _____ () C:\Windows\WindowsUpdate.log

2014-02-14 19:05 - 2013-10-08 19:25 - 00000000 ____D () C:\Program Files (x86)\Unitech LLC

2014-02-14 18:51 - 2012-11-15 16:07 - 00000000 ____D () C:\Users\merdia\Desktop\UNIDO

2014-02-14 18:41 - 2014-02-14 18:41 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Malwarebytes

2014-02-14 18:40 - 2014-02-14 18:40 - 01166132 _____ () C:\Users\merdia\Downloads\adwcleaner.exe

2014-02-14 18:40 - 2014-02-14 18:39 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-14 18:39 - 2014-02-14 18:39 - 00001115 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-14 18:39 - 2014-02-14 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-14 18:38 - 2014-02-14 18:38 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\merdia\Downloads\mbam-setup-1.75.0.1300.exe

2014-02-14 18:28 - 2010-11-18 14:48 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-14 13:07 - 2010-11-18 14:48 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-02-14 13:07 - 2010-11-18 14:48 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-02-14 12:20 - 2009-08-04 10:51 - 00670650 _____ () C:\Windows\system32\perfh007.dat

2014-02-14 12:20 - 2009-08-04 10:51 - 00136528 _____ () C:\Windows\system32\perfc007.dat

2014-02-14 12:20 - 2009-07-14 06:13 - 01543446 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-14 12:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-02-13 22:33 - 2014-02-13 22:32 - 00039980 _____ () C:\Users\merdia\Desktop\Addition old.txt

2014-02-13 22:33 - 2014-02-13 22:31 - 00054695 _____ () C:\Users\merdia\Desktop\FRST old.txt

2014-02-13 22:29 - 2014-02-13 22:29 - 02152960 _____ (Farbar) C:\Users\merdia\Desktop\FRST64.exe

2014-02-12 22:13 - 2011-05-11 22:16 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-02-12 21:59 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini

2014-02-12 21:52 - 2010-11-18 15:06 - 00338594 _____ () C:\Windows\DPINST.LOG

2014-02-11 13:26 - 2011-05-11 22:16 - 00000000 ____D () C:\Users\merdia\AppData\Local\Microsoft Help

2014-02-09 00:19 - 2012-05-15 20:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-02-08 20:39 - 2013-09-16 21:02 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-02-07 21:38 - 2013-12-20 22:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak

2014-02-07 13:47 - 2014-02-07 13:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-06 23:29 - 2014-01-13 22:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-06 23:29 - 2012-04-22 13:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-06 23:29 - 2011-05-15 17:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-06 13:16 - 2014-02-12 21:57 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-12 21:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-12 21:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-12 21:57 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-12 21:57 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-12 21:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-12 21:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-12 21:57 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-06 11:52 - 2014-02-12 21:57 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-06 11:49 - 2014-02-12 21:57 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-12 21:57 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-12 21:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-12 21:57 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-12 21:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-12 21:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-12 21:57 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-06 11:11 - 2014-02-12 21:57 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-12 21:57 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-12 21:57 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-12 21:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-12 21:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-12 21:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-12 21:57 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-12 21:57 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-06 10:49 - 2014-02-12 21:57 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-06 10:47 - 2014-02-12 21:57 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-12 21:57 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-12 21:57 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-12 21:57 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-12 21:57 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-06 10:22 - 2014-02-12 21:57 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-12 21:57 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-12 21:57 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-12 21:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-12 21:57 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-12 21:57 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-12 21:57 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-12 21:57 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-12 21:57 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-04 16:56 - 2014-02-04 16:56 - 01069512 _____ (Solid State Networks) C:\Users\merdia\Downloads\install_flashplayer12x32au_mssa_aaa_aih.exe

2014-02-04 16:01 - 2013-07-22 23:08 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\uTorrent

2014-01-26 21:54 - 2012-09-24 21:07 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\vlc

2014-01-19 22:44 - 2013-10-30 14:41 - 00000000 ____D () C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-01-19 22:44 - 2011-04-15 09:13 - 00000000 ___RD () C:\Users\merdia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-16 13:23 - 2009-07-14 05:45 - 00439200 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-15 23:49 - 2013-08-14 09:08 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 23:47 - 2011-05-15 17:03 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-15 12:02 - 2013-11-01 23:36 - 00002028 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk

2014-01-15 12:02 - 2010-11-18 14:38 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-15 11:18 - 2010-11-18 15:11 - 00001593 _____ () C:\Windows\system32\ServiceFilter.ini

2014-01-15 11:16 - 2010-11-18 15:11 - 00002502 _____ () C:\Windows\system32\AutoRunFilter.ini
 

Some content of TEMP:

====================

C:\Users\Ipod Matthias\AppData\Local\Temp\7hvcu8sv.dll

C:\Users\Ipod Matthias\AppData\Local\Temp\AskSLib.dll

C:\Users\merdia\AppData\Local\Temp\7z920.exe

C:\Users\merdia\AppData\Local\Temp\AskSLib.dll

C:\Users\merdia\AppData\Local\Temp\avgnt.exe

C:\Users\merdia\AppData\Local\Temp\DevSetup32.dll

C:\Users\merdia\AppData\Local\Temp\DevSetup64.dll

C:\Users\merdia\AppData\Local\Temp\DriverInstall32.exe

C:\Users\merdia\AppData\Local\Temp\DriverInstall64.exe

C:\Users\merdia\AppData\Local\Temp\FileSystemView.dll

C:\Users\merdia\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe

C:\Users\merdia\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe

C:\Users\merdia\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe

C:\Users\merdia\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe

C:\Users\merdia\AppData\Local\Temp\KillProcess.exe

C:\Users\merdia\AppData\Local\Temp\libexpat.dll

C:\Users\merdia\AppData\Local\Temp\mfc80.dll

C:\Users\merdia\AppData\Local\Temp\mfc80u.dll

C:\Users\merdia\AppData\Local\Temp\mfcm80.dll

C:\Users\merdia\AppData\Local\Temp\mfcm80u.dll

C:\Users\merdia\AppData\Local\Temp\MSETUP4.EXE

C:\Users\merdia\AppData\Local\Temp\msvcm80.dll

C:\Users\merdia\AppData\Local\Temp\msvcp80.dll

C:\Users\merdia\AppData\Local\Temp\msvcr80.dll

C:\Users\merdia\AppData\Local\Temp\nlsdl.dll

C:\Users\merdia\AppData\Local\Temp\ose00000.exe

C:\Users\merdia\AppData\Local\Temp\Quarantine.exe

C:\Users\merdia\AppData\Local\Temp\SkypeSetup.exe

C:\Users\merdia\AppData\Local\Temp\tmdbg64.dll

C:\Users\merdia\AppData\Local\Temp\vlc-2.0.8-win32.exe

C:\Users\merdia\AppData\Local\Temp\~convert5302618184181069256.exe

C:\Users\merdia\AppData\Local\Temp\~convert5486822247663086418.exe

C:\Users\merdia\AppData\Local\Temp\~convert6386108904061205113.exe

C:\Users\merdia\AppData\Local\Temp\~convert639819676036233620.exe

C:\Users\merdia\AppData\Local\Temp\~convert6430201708474281386.exe

C:\Users\merdia\AppData\Local\Temp\~convert8324292555196541881.exe

C:\Users\merdia\AppData\Local\Temp\~convert8450605163558216672.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2012-05-20 16:16
 

==================== End Of Log ============================

--- --- ---