Trojaner-Board - TR/BProtector.Gen2 auf meinem Rechner

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - TR/BProtector.Gen2 auf meinem Rechner - Windows 8 (https://www.trojaner-board.de/156340-tr-bprotector-gen2-meinem-rechner-windows-8-a.html)

TR/BProtector.Gen2 auf meinem Rechner - Windows 8

Hallo zusammen,

also ich habe nun doch ein mulmiges Gefühl.

Avira hat gerade die Datei TR/BProtector.Gen2 bei chrome.exe und rundll.exe gefunden!!!
Was kann ich dagegen machen? Einfach in Quarantäne und gut ist?

Achso noch eine Info: Ich bin nicht Computerfreundlich, vondaher kann es bei mir immer etwas unverständlich sein ;)

Vielen Dank im Voraus!

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

ich hoffe mal, dass ich das richtig gemacht habe.

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014

Ran by Name (administrator) on NINANORMAN on 11-07-2014 09:48:55

Running from C:\Users\Name\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe

() C:\ProgramData\IePluginServices\PluginService.exe

() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E\zbjnhykjzk64.exe

() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

() C:\Program Files\004\rqpbhevlkc64.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avrestart.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688472 2013-07-23] (Alps Electric Co., Ltd.)

HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)

HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)

HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.)

HKLM-x32\...\Run: [1.TPUReg] => C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA)

HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)

HKLM-x32\...\Run: [fst_de_19] => [X]

HKLM-x32\...\Run: [t4pc_en_3] => [X]

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found

AppInit_DLLs:  C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL => C:\ProgramData\Fast And Safe\FastAndSafe_x64.dll [4302848 2014-06-26] ()

AppInit_DLLs-x32: c:\progra~2\suptab\search~1.dll => c:\Program Files (x86)\SupTab\SearchProtect32.dll [91248 2014-05-08] (Skytech Co., Ltd.)

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1400662330&from=cor&uid=HGSTXHTS545050A7E380_140226TE85313Q2R9X1RX&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1400662330&from=cor&uid=HGSTXHTS545050A7E380_140226TE85313Q2R9X1RX&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1400662330&from=cor&uid=HGSTXHTS545050A7E380_140226TE85313Q2R9X1RX&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1400662330&from=cor&uid=HGSTXHTS545050A7E380_140226TE85313Q2R9X1RX&q={searchTerms}

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 

Chrome: 

=======

CHR Extension: (Google Wallet) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-21]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 64af91bf; c:\ProgramData\Fast And Safe\FastAndSafeSvc.dll [186192 2014-06-26] () [File not signed]

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-08-30] () [File not signed]

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-08-22] (Windows (R) Win 7 DDK provider)

R2 CouponDownloaderService64; C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E\zbjnhykjzk64.exe [172544 2014-07-08] () [File not signed]

R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()

R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()

R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] () [File not signed]

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)

R2 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe [709120 2014-05-21] () [File not signed]

R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]

S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-06] (Advanced Micro Devices, INC.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-07-08] (NetFilterSDK.com)

R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )

R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

S3 cpuz135; \??\C:\Users\Name\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]

S3 cpuz136; \??\C:\Users\Name\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================

und die nächste Datei

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-07-2014

Ran by Name at 2014-07-11 09:51:04

Running from C:\Users\Name\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 4.8.1245.73583 - Alcor Micro Corp.)

Alcor Micro USB Card Reader (x32 Version: 4.8.1245.73583 - Alcor Micro Corp.) Hidden

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.303.509 - Alps Electric)

AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden

AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

AMD Catalyst Install Manager (HKLM\...\{5D42947B-E961-C0B5-5A70-EA0F753331EB}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)

AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)

AMD Start Now (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Atheros)

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

DTS Sound (HKLM-x32\...\{2DFA9084-CEB3-4A48-B9F7-9038FEF1B8F4}) (Version: 1.01.2700 - DTS, Inc.)

Fast And Safe (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{64af91bf}) (Version:  - GTgroup) <==== ATTENTION

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

IDT Audio Driver (HKLM\...\{588A747E-CFF6-46B3-9207-CD754F9473AF}) (Version: 6.10.6491.0 - IDT)

iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Preview Redistributable (x64) - 12.0.20617 (HKLM-x32\...\{448652c1-f5f3-4230-98c6-68c10c88b1fb}) (Version: 12.0.20617.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Preview Redistributable (x86) - 12.0.20617 (HKLM-x32\...\{1f407217-9aec-4146-8504-e64ac959c534}) (Version: 12.0.20617.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.20617 (Version: 12.0.20617 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.20617 (Version: 12.0.20617 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.20617 (x32 Version: 12.0.20617 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.20617 (x32 Version: 12.0.20617 - Microsoft Corporation) Hidden

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)

Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)

OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

Open Office Packages (HKCU\...\Open Office Packages) (Version:  - ) <==== ATTENTION

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

PDF24 Creator 6.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.300 - Qualcomm Atheros)

Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.)

Spotify (HKLM-x32\...\Spotify) (Version: 0.8.5.1333.g822e0de8 - Spotify AB)

TOSHIBA Addendum (HKLM-x32\...\{CE0374A6-B204-4336-8293-63FBB1DADBF4}) (Version: 1.00 - TOSHIBA)

TOSHIBA Addendum (x32 Version: 1.00 - TOSHIBA) Hidden

TOSHIBA Desktop Assist (HKLM\...\{95CCACF0-010D-45F0-82BF-858643D8BC02}) (Version: 1.02.01.6407 - Toshiba Corporation)

TOSHIBA Display Utility (HKLM\...\{84FA4D2D-4273-4C66-BD3D-ADD3FE48DFA2}) (Version: 1.1.5.0 - Toshiba Corporation)

TOSHIBA eco Utility (HKLM\...\{5944B9D4-3C2A-48DE-931E-26B31714A2F7}) (Version: 2.2.0.6404 - Toshiba Corporation)

TOSHIBA Function Key (HKLM\...\{16562A90-71BC-41A0-B890-D91B0C267120}) (Version: 1.1.0001.6403 - Toshiba Corporation)

TOSHIBA Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.10 - TOSHIBA)

TOSHIBA Password Utility (HKLM-x32\...\InstallShield_{78931270-BC9E-441A-A52B-73ECD4ACFAB5}) (Version: 3.00.344 - Toshiba Corporation)

TOSHIBA Password Utility (x32 Version: 3.00.344 - Toshiba Corporation) Hidden

TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.9.09.6400 - Toshiba Corporation)

TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 3.1.02.55065006 - Toshiba Corporation)

TOSHIBA Service Station (HKLM\...\{414AC0F5-C371-423A-9C3B-37A5C0AA95DB}) (Version: 2.6.8 - Toshiba Corporation)

TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 1.00.0030 - Toshiba Corporation)

TOSHIBA System Settings (HKLM-x32\...\{05A55927-DB9B-4E26-BA44-828EBFF829F0}) (Version: 1.1.2.32001 - Toshiba Corporation)

Toshiba TEMPRO (HKLM-x32\...\{F76F5214-83A8-4030-80C9-1EF57391D72A}) (Version: 4.5.0 - Toshiba Europe GmbH)

TOSHIBA VIDEO PLAYER (HKLM\...\{FF07604E-C860-40E9-A230-E37FA41F103A}) (Version: 5.3.27.102 - Toshiba Corporation)
 

==================== Restore Points  =========================
 

04-06-2014 12:15:14 Sprachpaketdeinstallation

26-06-2014 05:40:46 Windows Update

03-07-2014 09:29:45 Geplanter Prüfpunkt

09-07-2014 13:20:56 Windows Update
 

==================== Hosts content: ==========================
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {17969B23-9BC6-426C-ABF0-FA3FF570CAEA} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [2013-07-31] (TOSHIBA Corporation)

Task: {17F78E9F-06AF-42DA-A546-0F92FC3C64E3} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation

Task: {1AA7BC6C-2CF6-427C-89A3-A443B9D8E364} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {27F8B676-6600-4BA1-99C4-E3A834AED810} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-21] (Google Inc.)

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {2FDD90AF-FBB9-464D-99B6-FDA603948563} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {365554DC-A6CD-44CB-B202-E904F135CA88} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv

Task: {3B22FA3F-DDDF-45EF-AEB7-08EC41DC70AC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {471B7313-3CEB-424F-913A-F0EAD331B1A4} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {6E341B62-2886-4299-9CAC-2B83AAFF4DA9} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {C864E09C-53D9-40EA-AE2F-08DD9E30D3F7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-21] (Google Inc.)

Task: {CE269680-0D80-4815-B407-D0DC0ADC530B} - System32\Tasks\Toshiba\CommonNotifier => C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [2013-07-18] (Toshiba Europe GmbH)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {DA53654C-FFDD-49F0-95D4-3E1AB34A0224} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-26] (Microsoft Corporation)

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============

Also ich bin mittlerweile echt verzweifelt:

nun findet das Programm auch:

- symmi.39749
- adware.gen

Wird ja irgendwie immer mehr :(

Adware & Co. deinstallieren

Lade Dir bitte von hier http://deeprybka.trojaner-board.de/b...ninstaller.pngRevo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:
http://deeprybka.trojaner-board.de/b.../revo/add1.png
diesen Zusatz haben:
http://deeprybka.trojaner-board.de/b...e/revo/att.PNG
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
http://deeprybka.trojaner-board.de/b.../uninstall.PNG http://deeprybka.trojaner-board.de/b...o/moderat2.PNG
Reste löschen:
Klicke auf http://deeprybka.trojaner-board.de/b.../selectall.PNG dann auf http://deeprybka.trojaner-board.de/b...evo/delete.PNG und dann auf http://deeprybka.trojaner-board.de/b...evo/weiter.PNG.

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo Schrauber,

also ich konnte leider nicht erkennen, welche mbam-Datei die aktuellste war bzw. ist, deshalb hier beide:

erste Datei:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malware Protection, Starting, 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malware Protection, Started, 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Starting, 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Started, 

Update, 12.07.2014 09:25:07, SYSTEM, NINANORMAN, Manual, Rootkit Database, 2014.2.20.1, 2014.7.9.1, 

Update, 12.07.2014 09:25:17, SYSTEM, NINANORMAN, Manual, Malware Database, 2014.3.4.9, 2014.7.12.1, 

Protection, 12.07.2014 09:25:19, SYSTEM, NINANORMAN, Protection, Refresh, Starting, 

Protection, 12.07.2014 09:25:19, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Stopping, 

Protection, 12.07.2014 09:25:19, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Stopped, 

Protection, 12.07.2014 09:25:30, SYSTEM, NINANORMAN, Protection, Refresh, Success, 

Protection, 12.07.2014 09:25:30, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Starting, 

Protection, 12.07.2014 09:25:30, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Started, 

Detection, 12.07.2014 09:30:05, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:30:05, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:30:05, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Detection, 12.07.2014 09:30:10, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:30:11, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:30:11, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Detection, 12.07.2014 09:52:33, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.CouponDownloader.A, C:\Windows\Temp\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237En.exe, Quarantine, [2180a7f75526ad895bffdd66629ec23e]

Detection, 12.07.2014 09:52:49, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:52:49, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:52:49, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Detection, 12.07.2014 09:54:11, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.MultiPlug.A, C:\ProgramData\COupScanner\tH25.exe, Quarantine, [9110bfdffd7ec07621262c256d948e72]

Detection, 12.07.2014 09:59:50, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:59:50, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:59:50, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Protection, 12.07.2014 10:07:06, SYSTEM, NINANORMAN, Protection, Malware Protection, Starting, 

Protection, 12.07.2014 10:07:06, SYSTEM, NINANORMAN, Protection, Malware Protection, Started, 

Protection, 12.07.2014 10:07:06, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Starting, 

Protection, 12.07.2014 10:07:55, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Started, 
 

(end)

und nun die zweite Datei:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malware Protection, Starting, 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malware Protection, Started, 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Starting, 

Protection, 12.07.2014 09:25:05, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Started, 

Update, 12.07.2014 09:25:07, SYSTEM, NINANORMAN, Manual, Rootkit Database, 2014.2.20.1, 2014.7.9.1, 

Update, 12.07.2014 09:25:17, SYSTEM, NINANORMAN, Manual, Malware Database, 2014.3.4.9, 2014.7.12.1, 

Protection, 12.07.2014 09:25:19, SYSTEM, NINANORMAN, Protection, Refresh, Starting, 

Protection, 12.07.2014 09:25:19, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Stopping, 

Protection, 12.07.2014 09:25:19, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Stopped, 

Protection, 12.07.2014 09:25:30, SYSTEM, NINANORMAN, Protection, Refresh, Success, 

Protection, 12.07.2014 09:25:30, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Starting, 

Protection, 12.07.2014 09:25:30, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Started, 

Detection, 12.07.2014 09:30:05, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:30:05, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:30:05, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Detection, 12.07.2014 09:30:10, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:30:11, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:30:11, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Detection, 12.07.2014 09:52:33, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.CouponDownloader.A, C:\Windows\Temp\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237En.exe, Quarantine, [2180a7f75526ad895bffdd66629ec23e]

Detection, 12.07.2014 09:52:49, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:52:49, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:52:49, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Detection, 12.07.2014 09:54:11, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.MultiPlug.A, C:\ProgramData\COupScanner\tH25.exe, Quarantine, [9110bfdffd7ec07621262c256d948e72]

Detection, 12.07.2014 09:59:50, SYSTEM, NINANORMAN, Protection, Malware Protection, File, PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, Quarantine, [6839ccd2700bdb5b346543490df4e818]

Protection, 12.07.2014 09:59:50, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Error, 12.07.2014 09:59:50, SYSTEM, NINANORMAN, Protection, DeleteFile, 5, Failed, C:\Program Files (x86)\SupTab\SearchProtect32.dll, 

Protection, 12.07.2014 10:07:06, SYSTEM, NINANORMAN, Protection, Malware Protection, Starting, 

Protection, 12.07.2014 10:07:06, SYSTEM, NINANORMAN, Protection, Malware Protection, Started, 

Protection, 12.07.2014 10:07:06, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Starting, 

Protection, 12.07.2014 10:07:55, SYSTEM, NINANORMAN, Protection, Malicious Website Protection, Started, 
 

(end)

so und hier die Datei von AdwCleaner:

Code:

# AdwCleaner v3.215 - Bericht erstellt am 12/07/2014 um 10:18:15

# Aktualisiert 09/07/2014 von Xplode

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : Name - NINANORMAN

# Gestartet von : C:\Users\Name\Desktop\adwcleaner_3.215.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\CoupScanner

Ordner Gelöscht : C:\ProgramData\WPM

Ordner Gelöscht : C:\ProgramData\PriceDownloader

Ordner Gelöscht : C:\Program Files (x86)\CoupScanner

Ordner Gelöscht : C:\Program Files (x86)\predm

Ordner Gelöscht : C:\Program Files (x86)\SupTab

Ordner Gelöscht : C:\Program Files (x86)\PriceDownloader

Ordner Gelöscht : C:\Program Files\004

Ordner Gelöscht : C:\Users\Name\AppData\Local\Genesis

Ordner Gelöscht : C:\Users\Name\AppData\Local\Temp\OCS

Ordner Gelöscht : C:\Users\Name\AppData\Roaming\Activeris

Ordner Gelöscht : C:\Users\Name\AppData\Roaming\sweet-page

Ordner Gelöscht : C:\Users\Name\AppData\Roaming\Systweak

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Users\Name\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PriCeDoewnoLoadeR.PriCeDoewnoLoadeR

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PriCeDoewnoLoadeR.PriCeDoewnoLoadeR.2.4

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CoupScanNerr.CoupScanNerr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CoupScanNerr.CoupScanNerr.3.2

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B58920CE-8D25-A693-A213-DFBBB6D40C6B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EFCC8F10-FCDD-BE56-65DD-B51E8EC5389E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B58920CE-8D25-A693-A213-DFBBB6D40C6B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58920CE-8D25-A693-A213-DFBBB6D40C6B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EFCC8F10-FCDD-BE56-65DD-B51E8EC5389E}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{B58920CE-8D25-A693-A213-DFBBB6D40C6B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EFCC8F10-FCDD-BE56-65DD-B51E8EC5389E}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Schlüssel Gelöscht : HKCU\Software\genesis

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\TutoTag

Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}

Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Schlüssel Gelöscht : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}

Schlüssel Gelöscht : HKLM\Software\SupDp

Schlüssel Gelöscht : HKLM\Software\SupTab

Schlüssel Gelöscht : HKLM\Software\supWPM

Schlüssel Gelöscht : HKLM\Software\systweak

Schlüssel Gelöscht : HKLM\Software\Tutorials

Schlüssel Gelöscht : HKLM\Software\Wpm

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D471A31-4FA7-95BA-1880-D441113ED736}

Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.17126
 
 

-\\ Mozilla Firefox v
 

[ Datei : C:\Users\Name\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js ]
 
 

-\\ Google Chrome v35.0.1916.153
 

[ Datei : C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [4908 octets] - [12/07/2014 10:16:03]

AdwCleaner[S0].txt - [4430 octets] - [12/07/2014 10:18:15]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4490 octets] ##########

und hier die JRT-Datei:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.4 (04.06.2014:1)

OS: Windows 8.1 x64

Ran by Name on 12.07.2014 at 10:25:26,29

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 12.07.2014 at 10:37:16,53

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und hier die FRST-Datei:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014

Ran by Name (administrator) on NINANORMAN on 12-07-2014 10:38:25

Running from C:\Users\Name\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(Thisisu) C:\Users\Name\Desktop\JRT.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688472 2013-07-23] (Alps Electric Co., Ltd.)

HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)

HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)

HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.)

HKLM-x32\...\Run: [1.TPUReg] => C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA)

HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)

HKLM-x32\...\Run: [t4pc_en_3] => [X]

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

AppInit_DLLs: C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL => C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL File Not Found

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKLM-x32 - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKCU - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Wallet) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-21]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-08-30] () [File not signed]

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-08-22] (Windows (R) Win 7 DDK provider)

R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()

R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)

R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]

S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-06] (Advanced Micro Devices, INC.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-12] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-07-08] (NetFilterSDK.com)

R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )

R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

S3 cpuz135; \??\C:\Users\Name\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]

S3 cpuz136; \??\C:\Users\Name\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-12 10:37 - 2014-07-12 10:37 - 00000613 _____ () C:\Users\Name\Desktop\JRT.txt

2014-07-12 10:25 - 2014-07-12 10:25 - 00000000 ____D () C:\Windows\ERUNT

2014-07-12 10:24 - 2014-07-12 10:24 - 01016261 _____ (Thisisu) C:\Users\Name\Desktop\JRT.exe

2014-07-12 10:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-12 10:15 - 2014-07-12 10:18 - 00000000 ____D () C:\AdwCleaner

2014-07-12 10:14 - 2014-07-12 10:14 - 01348263 _____ () C:\Users\Name\Desktop\adwcleaner_3.215.exe

2014-07-12 10:11 - 2014-07-12 10:11 - 00009856 _____ () C:\Users\Name\Desktop\mbam2.txt

2014-07-12 10:10 - 2014-07-12 10:10 - 00004064 _____ () C:\Users\Name\Desktop\mbam.txt

2014-07-12 09:24 - 2014-07-12 10:21 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-12 09:24 - 2014-07-12 09:24 - 00001089 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-12 09:24 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-12 09:24 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-12 09:23 - 2014-07-12 09:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Name\Desktop\mbam-setup-2.0.2.1012.exe

2014-07-12 09:14 - 2014-07-12 09:14 - 00000714 _____ () C:\Users\Name\Desktop\Revo Uninstaller.lnk

2014-07-12 09:13 - 2014-07-12 09:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Name\Desktop\revosetup95.exe

2014-07-11 09:51 - 2014-07-11 09:52 - 00025578 _____ () C:\Users\Name\Desktop\Addition.txt

2014-07-11 09:48 - 2014-07-12 10:38 - 00012922 _____ () C:\Users\Name\Desktop\FRST.txt

2014-07-11 09:48 - 2014-07-12 10:38 - 00000000 ____D () C:\FRST

2014-07-11 09:47 - 2014-07-11 09:47 - 02084864 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe

2014-07-11 08:39 - 2014-07-11 08:39 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira

2014-07-11 08:33 - 2014-07-11 08:33 - 00002057 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2014-07-11 08:33 - 2014-07-11 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\ProgramData\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-11 08:31 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-11 08:31 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-11 08:31 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-11 08:18 - 2014-07-11 08:19 - 143880056 _____ () C:\Users\Name\Downloads\avira_free_antivirus_de_464.exe

2014-07-09 15:24 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-07-09 15:22 - 2014-07-09 15:22 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-09 13:52 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-09 13:52 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-09 13:52 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-07-09 12:37 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-09 12:37 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-09 12:37 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-09 12:37 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-09 12:37 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-09 12:37 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-09 12:37 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-09 12:37 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-09 12:37 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-07-09 12:37 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-07-09 12:37 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-07-09 12:37 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-07-09 12:37 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-07-09 12:37 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-09 12:36 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-09 12:36 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-09 12:36 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-09 12:36 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-09 12:36 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-09 12:36 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-09 12:36 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-09 12:36 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-09 12:36 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-09 12:36 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-09 12:36 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-09 12:36 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-09 12:36 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-09 12:36 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-09 12:36 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-09 12:36 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-09 12:36 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-09 12:36 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-09 12:36 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-09 12:36 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-09 12:36 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-09 12:36 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-09 12:36 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-09 12:36 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-09 12:36 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-09 12:36 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-07-09 12:36 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2014-07-09 12:36 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-07-09 12:36 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-07-09 12:36 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 12:36 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-07-09 12:36 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-07-09 12:36 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 12:36 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-07-09 12:36 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-07-09 12:36 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-07-09 12:36 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-07-09 12:36 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-07-09 12:36 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-07-09 12:36 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-07-09 12:27 - 2014-07-09 12:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

2014-07-09 12:25 - 2014-07-12 10:05 - 00000000 ____D () C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E

2014-07-08 20:31 - 2014-07-08 20:31 - 00046376 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter64.sys

2014-07-08 12:55 - 2014-07-09 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-06-30 15:02 - 2014-06-30 15:02 - 00821760 _____ (Browser Opt-out) C:\Users\Name\Downloads\uninstall.exe

2014-06-30 14:28 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-06-26 08:02 - 2014-07-11 08:36 - 00000000 ____D () C:\ProgramData\f33e80f8b2680104

2014-06-26 06:09 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-06-26 06:09 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-06-26 06:09 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-06-26 06:09 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-06-26 06:09 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-06-26 06:09 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-06-26 06:09 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-06-26 06:09 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-06-26 06:09 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-06-26 06:09 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-06-26 06:09 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-06-26 06:08 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll

2014-06-26 06:08 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-06-26 06:08 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-06-26 06:08 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll

2014-06-26 06:08 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-06-26 06:08 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-06-26 06:08 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-06-26 06:08 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-06-26 06:08 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-06-26 06:08 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll

2014-06-26 06:08 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll

2014-06-26 06:08 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2014-06-26 06:08 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2014-06-26 06:08 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll

2014-06-26 06:08 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-06-26 06:08 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2014-06-26 06:08 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2014-06-26 06:08 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2014-06-26 06:08 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2014-06-26 06:08 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2014-06-26 06:08 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2014-06-26 06:08 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2014-06-26 06:08 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-06-26 06:08 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-06-26 06:08 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll

2014-06-26 06:08 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys

2014-06-26 06:08 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-06-26 06:08 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2014-06-26 06:08 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-06-26 06:08 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-06-26 06:08 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-06-26 06:08 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2014-06-26 06:08 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe

2014-06-26 06:08 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-06-26 06:08 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-06-26 06:08 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll

2014-06-26 06:08 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-06-26 06:08 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-06-26 06:08 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-06-26 06:08 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-06-26 06:08 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-06-26 06:08 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-06-26 06:08 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll

2014-06-26 06:08 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll

2014-06-26 06:08 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-06-26 06:08 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll

2014-06-26 06:08 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-06-26 06:08 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-06-26 06:08 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-06-26 06:08 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-06-26 06:08 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-06-26 06:08 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll

2014-06-26 06:08 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll

2014-06-26 06:08 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-06-26 06:08 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-06-26 06:08 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll

2014-06-26 06:08 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-06-26 06:08 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-06-26 06:08 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2014-06-26 06:08 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-06-26 06:08 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-06-26 06:08 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-06-26 06:08 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2014-06-26 06:08 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-06-26 06:08 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll

2014-06-26 06:08 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2014-06-26 06:08 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll

2014-06-26 06:08 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2014-06-26 06:08 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-06-26 06:08 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2014-06-26 06:08 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe

2014-06-26 06:08 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-06-26 06:08 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2014-06-26 06:08 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-06-26 06:08 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-06-26 06:08 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-06-26 06:08 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-06-26 06:08 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2014-06-26 06:08 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-06-26 06:08 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2014-06-26 06:08 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-06-26 06:08 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-06-26 06:08 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2014-06-26 06:08 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2014-06-26 06:08 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-06-26 06:08 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-06-26 06:08 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2014-06-26 06:08 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-06-26 06:08 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2014-06-26 06:08 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2014-06-26 06:08 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2014-06-26 06:08 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-06-26 06:07 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2014-06-26 06:07 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2014-06-26 06:07 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-06-26 06:07 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-06-26 06:07 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2014-06-26 06:07 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-06-26 06:07 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-06-26 06:07 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-06-26 06:07 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2014-06-26 06:07 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-06-26 06:07 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-06-26 06:07 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-06-26 06:07 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2014-06-26 06:07 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2014-06-26 06:07 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2014-06-26 06:07 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-06-26 06:07 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll

2014-06-26 06:07 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-06-26 06:07 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll

2014-06-26 06:07 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-06-26 06:07 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2014-06-26 06:07 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-06-26 06:07 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2014-06-26 06:07 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-06-26 06:04 - 2014-06-26 06:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
 

==================== One Month Modified Files and Folders =======
 

2014-07-12 10:38 - 2014-07-11 09:48 - 00012922 _____ () C:\Users\Name\Desktop\FRST.txt

2014-07-12 10:38 - 2014-07-11 09:48 - 00000000 ____D () C:\FRST

2014-07-12 10:37 - 2014-07-12 10:37 - 00000613 _____ () C:\Users\Name\Desktop\JRT.txt

2014-07-12 10:35 - 2013-09-16 23:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2078998368-3938944336-3194671038-1001

2014-07-12 10:25 - 2014-07-12 10:25 - 00000000 ____D () C:\Windows\ERUNT

2014-07-12 10:24 - 2014-07-12 10:24 - 01016261 _____ (Thisisu) C:\Users\Name\Desktop\JRT.exe

2014-07-12 10:21 - 2014-07-12 09:24 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-12 10:20 - 2014-05-21 10:08 - 00002166 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-12 10:19 - 2014-05-21 10:07 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-12 10:19 - 2013-09-11 04:13 - 00168660 _____ () C:\Windows\PFRO.log

2014-07-12 10:19 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-12 10:18 - 2014-07-12 10:15 - 00000000 ____D () C:\AdwCleaner

2014-07-12 10:18 - 2014-05-21 10:07 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-12 10:18 - 2013-09-10 19:19 - 01412432 _____ () C:\Windows\WindowsUpdate.log

2014-07-12 10:18 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-07-12 10:14 - 2014-07-12 10:14 - 01348263 _____ () C:\Users\Name\Desktop\adwcleaner_3.215.exe

2014-07-12 10:11 - 2014-07-12 10:11 - 00009856 _____ () C:\Users\Name\Desktop\mbam2.txt

2014-07-12 10:10 - 2014-07-12 10:10 - 00004064 _____ () C:\Users\Name\Desktop\mbam.txt

2014-07-12 10:05 - 2014-07-09 12:25 - 00000000 ____D () C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E

2014-07-12 10:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-07-12 10:04 - 2014-05-21 10:54 - 00000000 ____D () C:\temp

2014-07-12 10:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-07-12 09:24 - 2014-07-12 09:24 - 00001089 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-12 09:23 - 2014-07-12 09:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Name\Desktop\mbam-setup-2.0.2.1012.exe

2014-07-12 09:14 - 2014-07-12 09:14 - 00000714 _____ () C:\Users\Name\Desktop\Revo Uninstaller.lnk

2014-07-12 09:13 - 2014-07-12 09:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Name\Desktop\revosetup95.exe

2014-07-11 20:27 - 2013-09-10 19:19 - 00065536 _____ () C:\Windows\system32\spu_storage.bin

2014-07-11 09:52 - 2014-07-11 09:51 - 00025578 _____ () C:\Users\Name\Desktop\Addition.txt

2014-07-11 09:47 - 2014-07-11 09:47 - 02084864 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe

2014-07-11 08:39 - 2014-07-11 08:39 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira

2014-07-11 08:36 - 2014-06-26 08:02 - 00000000 ____D () C:\ProgramData\f33e80f8b2680104

2014-07-11 08:33 - 2014-07-11 08:33 - 00002057 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2014-07-11 08:33 - 2014-07-11 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\ProgramData\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-11 08:19 - 2014-07-11 08:18 - 143880056 _____ () C:\Users\Name\Downloads\avira_free_antivirus_de_464.exe

2014-07-10 20:23 - 2014-05-21 18:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-10 20:23 - 2013-08-22 16:44 - 00360600 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-07-09 16:20 - 2014-05-22 17:57 - 00000000 ____D () C:\Users\Name\Documents\Bewerbungen

2014-07-09 15:26 - 2014-05-21 16:42 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-09 15:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-07-09 15:26 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-07-09 15:23 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-09 15:22 - 2014-07-09 15:22 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-09 15:00 - 2014-07-08 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-07-09 12:27 - 2014-07-09 12:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

2014-07-08 20:31 - 2014-07-08 20:31 - 00046376 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter64.sys

2014-07-08 11:54 - 2014-05-21 18:57 - 00000000 ____D () C:\Users\Name\AppData\Local\Thunderbird

2014-07-02 13:06 - 2014-07-11 08:31 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-11 08:31 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-11 08:31 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 00:45 - 2014-07-09 13:52 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 15:02 - 2014-06-30 15:02 - 00821760 _____ (Browser Opt-out) C:\Users\Name\Downloads\uninstall.exe

2014-06-30 15:02 - 2013-09-10 19:13 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2078998368-3938944336-3194671038-500

2014-06-30 14:26 - 2013-09-10 19:26 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-06-30 14:26 - 2013-08-28 11:59 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2014-06-30 14:26 - 2013-08-28 11:59 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2014-06-28 09:48 - 2014-07-09 13:52 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-28 09:07 - 2014-07-09 13:52 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-06-26 22:55 - 2013-08-22 17:38 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-06-26 22:55 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-06-26 17:40 - 2014-05-21 16:42 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-06-26 10:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-06-26 10:10 - 2013-08-22 16:46 - 00021161 _____ () C:\Windows\setupact.log

2014-06-26 06:13 - 2014-05-21 10:07 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-06-26 06:13 - 2014-05-21 10:07 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-06-26 06:04 - 2014-06-26 06:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-06-26 06:02 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-06-26 06:01 - 2014-06-26 06:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-06-19 03:39 - 2014-07-09 12:37 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-06-19 02:48 - 2014-07-09 12:36 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-06-19 02:16 - 2014-07-09 12:37 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-06-19 02:09 - 2014-07-09 12:36 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-06-19 01:51 - 2014-07-09 12:36 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-06-19 01:50 - 2014-07-09 12:36 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-06-19 01:48 - 2014-07-09 12:36 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-06-19 01:46 - 2014-07-09 12:37 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-06-19 01:39 - 2014-07-09 12:36 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-06-19 01:33 - 2014-07-09 12:36 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-06-19 01:32 - 2014-07-09 12:36 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-06-19 01:27 - 2014-07-09 12:36 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-06-19 01:12 - 2014-07-09 12:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-06-19 00:59 - 2014-07-09 12:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-06-19 00:58 - 2014-07-09 12:36 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-06-19 00:58 - 2014-07-09 12:36 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-06-19 00:57 - 2014-07-09 12:37 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-06-19 00:52 - 2014-07-09 12:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-06-19 00:51 - 2014-07-09 12:36 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-06-19 00:49 - 2014-07-09 12:36 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-06-19 00:45 - 2014-07-09 12:36 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-06-19 00:35 - 2014-07-09 12:36 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-06-19 00:34 - 2014-07-09 12:36 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-06-19 00:15 - 2014-07-09 12:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-06-19 00:13 - 2014-07-09 12:36 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-06-19 00:09 - 2014-07-09 12:36 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-06-19 00:07 - 2014-07-09 12:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-06-17 00:26 - 2014-07-09 12:37 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-06-17 00:24 - 2014-07-09 12:37 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
 

Some content of TEMP:

====================

C:\Users\Name\AppData\Local\Temp\2040-2082_re-markit.exe

C:\Users\Name\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe

C:\Users\Name\AppData\Local\Temp\avgnt.exe

C:\Users\Name\AppData\Local\Temp\BackupSetup.exe

C:\Users\Name\AppData\Local\Temp\cloud_backup_setup.exe

C:\Users\Name\AppData\Local\Temp\genesisinstaller.exe

C:\Users\Name\AppData\Local\Temp\optimizerpro.exe

C:\Users\Name\AppData\Local\Temp\optprosetup.exe

C:\Users\Name\AppData\Local\Temp\Quarantine.exe

C:\Users\Name\AppData\Local\Temp\vcredist_x64.exe

C:\Users\Name\AppData\Local\Temp\_unps.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-05-21 16:04
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

so Schrauber nun bin ich mal gespannt was dir die Dateien alles so sagen ;)
Hoffe nun ist wieder alles in Ordnung!!! Gib mir bitte ein Feedback, danke.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Hallo Schrauber,

vielen Dank dafür. Werde morgen alles einstellen, da uns heute (FINAAAAALE) eindeutig die Zeit dafür fehlt.

Also hier die erste Datei:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=4d721c2e3feac94b9c6ad3b7b7f46f6e

# engine=19151

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-07-13 10:59:52

# local_time=2014-07-13 12:59:52 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1='Avira Desktop'

# compatibility_mode=1810 16777213 100 99 96836 949991 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 232069 9632713 0 0

# scanned=122057

# found=26

# cleaned=0

# scan_time=4230

sh=A0D52DCF369EF5A26EDD02F381A30BC06D6159F1 ft=1 fh=c71c00110a80296a vn="Variante von Win64/SProtector.B evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-2078998368-3938944336-3194671038-1001\$R1BW3FT.dll"

sh=C7C0F42A23562AA6DCCD60326FD8CC2AA41B5448 ft=1 fh=c053642cee9f3def vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir"

sh=9DC13DB9C123270C2356ED410128E11D5ADF7C6E ft=1 fh=023ab782f0a9b07d vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"

sh=31CE21FE36C11E107A6E315EFE1875743809B4CC ft=1 fh=48abcfa6ce4a4014 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Name\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"

sh=AC4C62B4E6CCBEAB2234AFE7829D9A34C202333B ft=1 fh=5503b1a00d2c7568 vn="Variante von Win32/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\CARQX3SM\Setup[1].exe"

sh=074B3F2D32C2A70633AC8ADDADD4388F5B8D5F27 ft=1 fh=c75947f906fffa9e vn="Win32/VOPackage.J evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\CARQX3SM\VOPackage[1].exe"

sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\Cloud_Backup_Setup[1].exe"

sh=C08F459BA661AFC5419C451FE5EA62CD3E7BB653 ft=1 fh=cea652e578407e27 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\setup_fst_de[1].exe"

sh=A836A8346F791EC8A83B51BC78E84B2F6659E6DA ft=1 fh=0a2e45c370149901 vn="Win32/Wajam.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\wajam_validate[1].exe"

sh=97D93B5D543B0B3FFF417FCD2703D18FA80F8B55 ft=1 fh=85ae7d50c516e326 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\KQU92LKY\amsetup_activeris_default_010414_installer[1].exe"

sh=18D4F067AB4D2429DDA81840B486757B015D3D3E ft=1 fh=01742c030ef609a4 vn="Variante von Win32/Packed.ScrambleWrapper.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\KQU92LKY\mplus[1].exe"

sh=9B72604832B83A5508824184D19DF2E98B654EA4 ft=1 fh=29a0d2f607c0a043 vn="Win32/Conduit.SearchProtect.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\KQU92LKY\spidentifierimpl[1].exe"

sh=C6A08EEABCE331983F493FE9A178B5A22882D3D5 ft=1 fh=00496ab151f6a0c9 vn="Variante von Win32/AdWare.AddLyrics.AS Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\2040-2084_Re-markit[1].exe"

sh=2AFB55CD2FEACB6D2AE6118C599F87CDF9FAEFA4 ft=1 fh=ddf5685e41767084 vn="Variante von Win32/AdWare.NaviPromo.AV Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\GenesisInstaller[1].exe"

sh=5C4D8E9627662734C30E2F9D08F4212DE93BEC6A ft=1 fh=1fac9d3a9620c57d vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\OptimizerPro[1].exe"

sh=C6A08EEABCE331983F493FE9A178B5A22882D3D5 ft=1 fh=00496ab151f6a0c9 vn="Variante von Win32/AdWare.AddLyrics.AS Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\2040-2082_re-markit.exe"

sh=97D93B5D543B0B3FFF417FCD2703D18FA80F8B55 ft=1 fh=85ae7d50c516e326 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe"

sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\cloud_backup_setup.exe"

sh=2AFB55CD2FEACB6D2AE6118C599F87CDF9FAEFA4 ft=1 fh=ddf5685e41767084 vn="Variante von Win32/AdWare.NaviPromo.AV Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\genesisinstaller.exe"

sh=5C4D8E9627662734C30E2F9D08F4212DE93BEC6A ft=1 fh=1fac9d3a9620c57d vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\optimizerpro.exe"

sh=C9D13284025E53AD700F7B0CBC83DE9838993E0E ft=1 fh=dbf293c8c33a42b0 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Name\AppData\Local\Temp\optprosetup.exe"

sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\133190390.Uninstall\uninstaller.exe"

sh=1198E362C0504B2A3B13C48A3FB1FD392CD961F2 ft=1 fh=f811da979eb359e7 vn="Variante von Win32/ELEX.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\is1597349865\177099680_stp\May7www.sweet-page.com.exe"

sh=D12DB4438118C857E220AA0C932CEC1E9D49B561 ft=1 fh=7660c3acc48a82d0 vn="Win32/Systweak.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\is1597349865\177099827_stp\rcpsetup_adppi14_adppi14.exe"

sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\is1597349865\177099979_stp\uninstaller.exe"

sh=D9F1B46C007D36A261D05EDCA66A6E1ADC47B97D ft=1 fh=1a9568f970d74b86 vn="Variante von Win32/Packed.ScrambleWrapper.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\nslF8B7.tmp\WrapperUtils.dll"

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=4d721c2e3feac94b9c6ad3b7b7f46f6e

# engine=19163

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-07-14 11:06:01

# local_time=2014-07-14 01:06:01 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1='Avira Desktop'

# compatibility_mode=1810 16777213 100 99 9672 1036760 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 318838 9719482 0 0

# scanned=168696

# found=26

# cleaned=0

# scan_time=4347

sh=A0D52DCF369EF5A26EDD02F381A30BC06D6159F1 ft=1 fh=c71c00110a80296a vn="Variante von Win64/SProtector.B evtl. unerwünschte Anwendung" ac=I fn="C:\$RECYCLE.BIN\S-1-5-21-2078998368-3938944336-3194671038-1001\$R1BW3FT.dll"

sh=C7C0F42A23562AA6DCCD60326FD8CC2AA41B5448 ft=1 fh=c053642cee9f3def vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir"

sh=9DC13DB9C123270C2356ED410128E11D5ADF7C6E ft=1 fh=023ab782f0a9b07d vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"

sh=31CE21FE36C11E107A6E315EFE1875743809B4CC ft=1 fh=48abcfa6ce4a4014 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Name\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"

sh=AC4C62B4E6CCBEAB2234AFE7829D9A34C202333B ft=1 fh=5503b1a00d2c7568 vn="Variante von Win32/BrowseFox.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\CARQX3SM\Setup[1].exe"

sh=074B3F2D32C2A70633AC8ADDADD4388F5B8D5F27 ft=1 fh=c75947f906fffa9e vn="Win32/VOPackage.J evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\CARQX3SM\VOPackage[1].exe"

sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\Cloud_Backup_Setup[1].exe"

sh=C08F459BA661AFC5419C451FE5EA62CD3E7BB653 ft=1 fh=cea652e578407e27 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\setup_fst_de[1].exe"

sh=A836A8346F791EC8A83B51BC78E84B2F6659E6DA ft=1 fh=0a2e45c370149901 vn="Win32/Wajam.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\wajam_validate[1].exe"

sh=97D93B5D543B0B3FFF417FCD2703D18FA80F8B55 ft=1 fh=85ae7d50c516e326 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\KQU92LKY\amsetup_activeris_default_010414_installer[1].exe"

sh=18D4F067AB4D2429DDA81840B486757B015D3D3E ft=1 fh=01742c030ef609a4 vn="Variante von Win32/Packed.ScrambleWrapper.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\KQU92LKY\mplus[1].exe"

sh=9B72604832B83A5508824184D19DF2E98B654EA4 ft=1 fh=29a0d2f607c0a043 vn="Win32/Conduit.SearchProtect.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\KQU92LKY\spidentifierimpl[1].exe"

sh=C6A08EEABCE331983F493FE9A178B5A22882D3D5 ft=1 fh=00496ab151f6a0c9 vn="Variante von Win32/AdWare.AddLyrics.AS Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\2040-2084_Re-markit[1].exe"

sh=2AFB55CD2FEACB6D2AE6118C599F87CDF9FAEFA4 ft=1 fh=ddf5685e41767084 vn="Variante von Win32/AdWare.NaviPromo.AV Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\GenesisInstaller[1].exe"

sh=5C4D8E9627662734C30E2F9D08F4212DE93BEC6A ft=1 fh=1fac9d3a9620c57d vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\OptimizerPro[1].exe"

sh=C6A08EEABCE331983F493FE9A178B5A22882D3D5 ft=1 fh=00496ab151f6a0c9 vn="Variante von Win32/AdWare.AddLyrics.AS Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\2040-2082_re-markit.exe"

sh=97D93B5D543B0B3FFF417FCD2703D18FA80F8B55 ft=1 fh=85ae7d50c516e326 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe"

sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\cloud_backup_setup.exe"

sh=2AFB55CD2FEACB6D2AE6118C599F87CDF9FAEFA4 ft=1 fh=ddf5685e41767084 vn="Variante von Win32/AdWare.NaviPromo.AV Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\genesisinstaller.exe"

sh=5C4D8E9627662734C30E2F9D08F4212DE93BEC6A ft=1 fh=1fac9d3a9620c57d vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\optimizerpro.exe"

sh=C9D13284025E53AD700F7B0CBC83DE9838993E0E ft=1 fh=dbf293c8c33a42b0 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Name\AppData\Local\Temp\optprosetup.exe"

sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\133190390.Uninstall\uninstaller.exe"

sh=1198E362C0504B2A3B13C48A3FB1FD392CD961F2 ft=1 fh=f811da979eb359e7 vn="Variante von Win32/ELEX.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\is1597349865\177099680_stp\May7www.sweet-page.com.exe"

sh=D12DB4438118C857E220AA0C932CEC1E9D49B561 ft=1 fh=7660c3acc48a82d0 vn="Win32/Systweak.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\is1597349865\177099827_stp\rcpsetup_adppi14_adppi14.exe"

sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\is1597349865\177099979_stp\uninstaller.exe"

sh=D9F1B46C007D36A261D05EDCA66A6E1ADC47B97D ft=1 fh=1a9568f970d74b86 vn="Variante von Win32/Packed.ScrambleWrapper.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\AppData\Local\Temp\nslF8B7.tmp\WrapperUtils.dll"

und hier die zweite Datei:

Code:

 Results of screen317's Security Check version 0.99.85  

   x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop      

Windows Defender   

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 Adobe Reader XI  

 Mozilla Thunderbird (24.6.0) 

 Google Chrome 35.0.1916.114  

 Google Chrome 35.0.1916.153  
 ````````Process Check: objlist.exe by Laurent````````  

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbam.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

und die letzte Datei:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2014

Ran by Name (administrator) on NINANORMAN on 14-07-2014 13:14:47

Running from C:\Users\Name\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\Name\Desktop\SecurityCheck.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688472 2013-07-23] (Alps Electric Co., Ltd.)

HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)

HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)

HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.)

HKLM-x32\...\Run: [1.TPUReg] => C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA)

HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)

HKLM-x32\...\Run: [t4pc_en_3] => [X]

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

AppInit_DLLs: C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL => C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL File Not Found

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKLM-x32 - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKCU - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Wallet) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-21]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-08-30] () [File not signed]

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-08-22] (Windows (R) Win 7 DDK provider)

R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()

R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)

R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]

S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-06] (Advanced Micro Devices, INC.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-14] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-07-08] (NetFilterSDK.com)

R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )

R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

S3 cpuz135; \??\C:\Users\Name\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]

S3 cpuz136; \??\C:\Users\Name\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-14 13:14 - 2014-07-14 13:14 - 00000000 ____D () C:\Users\Name\Desktop\FRST-OlderVersion

2014-07-14 13:12 - 2014-07-14 13:12 - 00854390 _____ () C:\Users\Name\Desktop\SecurityCheck.exe

2014-07-13 11:46 - 2014-07-13 11:46 - 02347384 _____ (ESET) C:\Users\Name\Desktop\esetsmartinstaller_deu.exe

2014-07-13 11:46 - 2014-07-13 11:46 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-12 10:37 - 2014-07-12 10:37 - 00000613 _____ () C:\Users\Name\Desktop\JRT.txt

2014-07-12 10:25 - 2014-07-12 10:25 - 00000000 ____D () C:\Windows\ERUNT

2014-07-12 10:24 - 2014-07-12 10:24 - 01016261 _____ (Thisisu) C:\Users\Name\Desktop\JRT.exe

2014-07-12 10:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-12 10:15 - 2014-07-12 10:18 - 00000000 ____D () C:\AdwCleaner

2014-07-12 10:14 - 2014-07-12 10:14 - 01348263 _____ () C:\Users\Name\Desktop\adwcleaner_3.215.exe

2014-07-12 10:11 - 2014-07-12 10:11 - 00009856 _____ () C:\Users\Name\Desktop\mbam2.txt

2014-07-12 10:10 - 2014-07-12 10:10 - 00004064 _____ () C:\Users\Name\Desktop\mbam.txt

2014-07-12 09:24 - 2014-07-14 11:37 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-12 09:24 - 2014-07-12 09:24 - 00001089 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-12 09:24 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-12 09:24 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-12 09:23 - 2014-07-12 09:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Name\Desktop\mbam-setup-2.0.2.1012.exe

2014-07-12 09:14 - 2014-07-12 09:14 - 00000714 _____ () C:\Users\Name\Desktop\Revo Uninstaller.lnk

2014-07-12 09:13 - 2014-07-12 09:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Name\Desktop\revosetup95.exe

2014-07-11 09:51 - 2014-07-11 09:52 - 00025578 _____ () C:\Users\Name\Desktop\Addition.txt

2014-07-11 09:48 - 2014-07-14 13:14 - 00013577 _____ () C:\Users\Name\Desktop\FRST.txt

2014-07-11 09:48 - 2014-07-14 13:14 - 00000000 ____D () C:\FRST

2014-07-11 09:47 - 2014-07-14 13:14 - 02086912 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe

2014-07-11 08:39 - 2014-07-11 08:39 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira

2014-07-11 08:33 - 2014-07-11 08:33 - 00002057 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2014-07-11 08:33 - 2014-07-11 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\ProgramData\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-11 08:31 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-11 08:31 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-11 08:31 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-11 08:18 - 2014-07-11 08:19 - 143880056 _____ () C:\Users\Name\Downloads\avira_free_antivirus_de_464.exe

2014-07-09 15:24 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-07-09 15:22 - 2014-07-09 15:22 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-09 13:52 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-09 13:52 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-09 13:52 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-07-09 12:37 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-09 12:37 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-09 12:37 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-09 12:37 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-09 12:37 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-09 12:37 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-09 12:37 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-09 12:37 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-09 12:37 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-07-09 12:37 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-07-09 12:37 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-07-09 12:37 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-07-09 12:37 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-07-09 12:37 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-09 12:36 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-09 12:36 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-09 12:36 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-09 12:36 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-09 12:36 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-09 12:36 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-09 12:36 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-09 12:36 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-09 12:36 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-09 12:36 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-09 12:36 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-09 12:36 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-09 12:36 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-09 12:36 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-09 12:36 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-09 12:36 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-09 12:36 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-09 12:36 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-09 12:36 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-09 12:36 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-09 12:36 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-09 12:36 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-09 12:36 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-09 12:36 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-09 12:36 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-09 12:36 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-07-09 12:36 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2014-07-09 12:36 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-07-09 12:36 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-07-09 12:36 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 12:36 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-07-09 12:36 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-07-09 12:36 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 12:36 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-07-09 12:36 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-07-09 12:36 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-07-09 12:36 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-07-09 12:36 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-07-09 12:36 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-07-09 12:36 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-07-09 12:27 - 2014-07-09 12:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

2014-07-09 12:25 - 2014-07-12 10:05 - 00000000 ____D () C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E

2014-07-08 20:31 - 2014-07-08 20:31 - 00046376 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter64.sys

2014-07-08 12:55 - 2014-07-09 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-06-30 15:02 - 2014-06-30 15:02 - 00821760 _____ (Browser Opt-out) C:\Users\Name\Downloads\uninstall.exe

2014-06-30 14:28 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-06-26 08:02 - 2014-07-11 08:36 - 00000000 ____D () C:\ProgramData\f33e80f8b2680104

2014-06-26 06:09 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-06-26 06:09 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-06-26 06:09 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-06-26 06:09 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-06-26 06:09 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-06-26 06:09 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-06-26 06:09 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-06-26 06:09 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-06-26 06:09 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-06-26 06:09 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-06-26 06:09 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-06-26 06:08 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll

2014-06-26 06:08 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-06-26 06:08 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-06-26 06:08 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll

2014-06-26 06:08 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-06-26 06:08 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-06-26 06:08 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-06-26 06:08 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-06-26 06:08 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-06-26 06:08 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll

2014-06-26 06:08 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll

2014-06-26 06:08 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2014-06-26 06:08 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2014-06-26 06:08 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll

2014-06-26 06:08 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-06-26 06:08 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2014-06-26 06:08 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2014-06-26 06:08 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2014-06-26 06:08 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2014-06-26 06:08 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2014-06-26 06:08 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2014-06-26 06:08 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2014-06-26 06:08 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-06-26 06:08 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-06-26 06:08 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll

2014-06-26 06:08 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys

2014-06-26 06:08 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-06-26 06:08 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2014-06-26 06:08 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-06-26 06:08 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-06-26 06:08 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-06-26 06:08 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2014-06-26 06:08 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe

2014-06-26 06:08 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-06-26 06:08 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-06-26 06:08 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll

2014-06-26 06:08 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-06-26 06:08 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-06-26 06:08 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-06-26 06:08 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-06-26 06:08 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-06-26 06:08 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-06-26 06:08 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll

2014-06-26 06:08 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll

2014-06-26 06:08 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-06-26 06:08 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll

2014-06-26 06:08 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-06-26 06:08 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-06-26 06:08 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-06-26 06:08 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-06-26 06:08 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-06-26 06:08 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll

2014-06-26 06:08 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll

2014-06-26 06:08 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-06-26 06:08 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-06-26 06:08 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll

2014-06-26 06:08 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-06-26 06:08 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-06-26 06:08 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2014-06-26 06:08 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-06-26 06:08 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-06-26 06:08 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-06-26 06:08 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2014-06-26 06:08 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-06-26 06:08 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll

2014-06-26 06:08 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2014-06-26 06:08 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll

2014-06-26 06:08 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2014-06-26 06:08 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-06-26 06:08 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2014-06-26 06:08 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe

2014-06-26 06:08 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-06-26 06:08 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2014-06-26 06:08 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-06-26 06:08 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-06-26 06:08 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-06-26 06:08 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-06-26 06:08 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2014-06-26 06:08 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-06-26 06:08 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2014-06-26 06:08 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-06-26 06:08 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-06-26 06:08 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2014-06-26 06:08 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2014-06-26 06:08 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-06-26 06:08 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-06-26 06:08 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2014-06-26 06:08 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-06-26 06:08 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2014-06-26 06:08 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2014-06-26 06:08 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2014-06-26 06:08 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-06-26 06:07 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2014-06-26 06:07 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2014-06-26 06:07 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-06-26 06:07 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-06-26 06:07 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2014-06-26 06:07 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-06-26 06:07 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-06-26 06:07 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-06-26 06:07 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2014-06-26 06:07 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-06-26 06:07 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-06-26 06:07 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-06-26 06:07 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2014-06-26 06:07 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2014-06-26 06:07 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2014-06-26 06:07 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-06-26 06:07 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll

2014-06-26 06:07 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-06-26 06:07 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll

2014-06-26 06:07 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-06-26 06:07 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2014-06-26 06:07 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-06-26 06:07 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2014-06-26 06:07 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-06-26 06:04 - 2014-06-26 06:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
 

==================== One Month Modified Files and Folders =======
 

2014-07-14 13:15 - 2014-07-11 09:48 - 00013577 _____ () C:\Users\Name\Desktop\FRST.txt

2014-07-14 13:14 - 2014-07-14 13:14 - 00000000 ____D () C:\Users\Name\Desktop\FRST-OlderVersion

2014-07-14 13:14 - 2014-07-11 09:48 - 00000000 ____D () C:\FRST

2014-07-14 13:14 - 2014-07-11 09:47 - 02086912 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe

2014-07-14 13:12 - 2014-07-14 13:12 - 00854390 _____ () C:\Users\Name\Desktop\SecurityCheck.exe

2014-07-14 13:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-07-14 12:18 - 2014-05-21 10:07 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-14 11:59 - 2013-09-10 19:19 - 01466564 _____ () C:\Windows\WindowsUpdate.log

2014-07-14 11:37 - 2014-07-12 09:24 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-14 10:22 - 2014-05-21 10:07 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-13 13:00 - 2013-09-10 19:19 - 00065536 _____ () C:\Windows\system32\spu_storage.bin

2014-07-13 11:46 - 2014-07-13 11:46 - 02347384 _____ (ESET) C:\Users\Name\Desktop\esetsmartinstaller_deu.exe

2014-07-13 11:46 - 2014-07-13 11:46 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-12 11:48 - 2013-09-16 23:36 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2078998368-3938944336-3194671038-1001

2014-07-12 10:37 - 2014-07-12 10:37 - 00000613 _____ () C:\Users\Name\Desktop\JRT.txt

2014-07-12 10:25 - 2014-07-12 10:25 - 00000000 ____D () C:\Windows\ERUNT

2014-07-12 10:24 - 2014-07-12 10:24 - 01016261 _____ (Thisisu) C:\Users\Name\Desktop\JRT.exe

2014-07-12 10:20 - 2014-05-21 10:08 - 00002166 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-12 10:19 - 2013-09-11 04:13 - 00168660 _____ () C:\Windows\PFRO.log

2014-07-12 10:19 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-12 10:18 - 2014-07-12 10:15 - 00000000 ____D () C:\AdwCleaner

2014-07-12 10:18 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-07-12 10:14 - 2014-07-12 10:14 - 01348263 _____ () C:\Users\Name\Desktop\adwcleaner_3.215.exe

2014-07-12 10:11 - 2014-07-12 10:11 - 00009856 _____ () C:\Users\Name\Desktop\mbam2.txt

2014-07-12 10:10 - 2014-07-12 10:10 - 00004064 _____ () C:\Users\Name\Desktop\mbam.txt

2014-07-12 10:05 - 2014-07-09 12:25 - 00000000 ____D () C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E

2014-07-12 10:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-07-12 10:04 - 2014-05-21 10:54 - 00000000 ____D () C:\temp

2014-07-12 09:24 - 2014-07-12 09:24 - 00001089 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-12 09:23 - 2014-07-12 09:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Name\Desktop\mbam-setup-2.0.2.1012.exe

2014-07-12 09:14 - 2014-07-12 09:14 - 00000714 _____ () C:\Users\Name\Desktop\Revo Uninstaller.lnk

2014-07-12 09:13 - 2014-07-12 09:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Name\Desktop\revosetup95.exe

2014-07-11 09:52 - 2014-07-11 09:51 - 00025578 _____ () C:\Users\Name\Desktop\Addition.txt

2014-07-11 08:39 - 2014-07-11 08:39 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira

2014-07-11 08:36 - 2014-06-26 08:02 - 00000000 ____D () C:\ProgramData\f33e80f8b2680104

2014-07-11 08:33 - 2014-07-11 08:33 - 00002057 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2014-07-11 08:33 - 2014-07-11 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\ProgramData\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-11 08:19 - 2014-07-11 08:18 - 143880056 _____ () C:\Users\Name\Downloads\avira_free_antivirus_de_464.exe

2014-07-10 20:23 - 2014-05-21 18:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-10 20:23 - 2013-08-22 16:44 - 00360600 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-07-09 16:20 - 2014-05-22 17:57 - 00000000 ____D () C:\Users\Name\Documents\Bewerbungen

2014-07-09 15:26 - 2014-05-21 16:42 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-09 15:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-07-09 15:26 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-07-09 15:23 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-09 15:22 - 2014-07-09 15:22 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-09 15:00 - 2014-07-08 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-07-09 12:27 - 2014-07-09 12:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

2014-07-08 20:31 - 2014-07-08 20:31 - 00046376 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter64.sys

2014-07-08 11:54 - 2014-05-21 18:57 - 00000000 ____D () C:\Users\Name\AppData\Local\Thunderbird

2014-07-02 13:06 - 2014-07-11 08:31 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-11 08:31 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-11 08:31 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 00:45 - 2014-07-09 13:52 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 15:02 - 2014-06-30 15:02 - 00821760 _____ (Browser Opt-out) C:\Users\Name\Downloads\uninstall.exe

2014-06-30 15:02 - 2013-09-10 19:13 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2078998368-3938944336-3194671038-500

2014-06-30 14:26 - 2013-09-10 19:26 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-06-30 14:26 - 2013-08-28 11:59 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2014-06-30 14:26 - 2013-08-28 11:59 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2014-06-28 09:48 - 2014-07-09 13:52 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-28 09:07 - 2014-07-09 13:52 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-06-26 22:55 - 2013-08-22 17:38 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-06-26 22:55 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-06-26 17:40 - 2014-05-21 16:42 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-06-26 10:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-06-26 10:10 - 2013-08-22 16:46 - 00021161 _____ () C:\Windows\setupact.log

2014-06-26 06:13 - 2014-05-21 10:07 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-06-26 06:13 - 2014-05-21 10:07 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-06-26 06:04 - 2014-06-26 06:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-06-26 06:02 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-06-26 06:01 - 2014-06-26 06:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-06-19 03:39 - 2014-07-09 12:37 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-06-19 02:48 - 2014-07-09 12:36 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-06-19 02:16 - 2014-07-09 12:37 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-06-19 02:09 - 2014-07-09 12:36 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-06-19 01:51 - 2014-07-09 12:36 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-06-19 01:50 - 2014-07-09 12:36 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-06-19 01:48 - 2014-07-09 12:36 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-06-19 01:46 - 2014-07-09 12:37 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-06-19 01:39 - 2014-07-09 12:36 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-06-19 01:33 - 2014-07-09 12:36 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-06-19 01:32 - 2014-07-09 12:36 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-06-19 01:27 - 2014-07-09 12:36 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-06-19 01:12 - 2014-07-09 12:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-06-19 00:59 - 2014-07-09 12:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-06-19 00:58 - 2014-07-09 12:36 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-06-19 00:58 - 2014-07-09 12:36 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-06-19 00:57 - 2014-07-09 12:37 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-06-19 00:52 - 2014-07-09 12:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-06-19 00:51 - 2014-07-09 12:36 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-06-19 00:49 - 2014-07-09 12:36 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-06-19 00:45 - 2014-07-09 12:36 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-06-19 00:35 - 2014-07-09 12:36 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-06-19 00:34 - 2014-07-09 12:36 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-06-19 00:15 - 2014-07-09 12:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-06-19 00:13 - 2014-07-09 12:36 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-06-19 00:09 - 2014-07-09 12:36 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-06-19 00:07 - 2014-07-09 12:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-06-17 00:26 - 2014-07-09 12:37 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-06-17 00:24 - 2014-07-09 12:37 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
 

Some content of TEMP:

====================

C:\Users\Name\AppData\Local\Temp\2040-2082_re-markit.exe

C:\Users\Name\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe

C:\Users\Name\AppData\Local\Temp\avgnt.exe

C:\Users\Name\AppData\Local\Temp\BackupSetup.exe

C:\Users\Name\AppData\Local\Temp\cloud_backup_setup.exe

C:\Users\Name\AppData\Local\Temp\genesisinstaller.exe

C:\Users\Name\AppData\Local\Temp\optimizerpro.exe

C:\Users\Name\AppData\Local\Temp\optprosetup.exe

C:\Users\Name\AppData\Local\Temp\Quarantine.exe

C:\Users\Name\AppData\Local\Temp\vcredist_x64.exe

C:\Users\Name\AppData\Local\Temp\_unps.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-05-21 16:04
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

So Schrauber, nun hab ich alles so gemacht wie du es wolltest und bin mal gespannt was nun mit Avira passiert, wenn ich den nochmal durchlaufen lasse. Was mir Sorgen bereitet ist, dass das Programm ESET mehr als 20 (potenzielle) Bedrohungen gefunden hat. :(

Die Funde sind in QUarantäne oder nur in den Temps.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\$RECYCLE.BIN

AppInit_DLLs: C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL => C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL File Not Found

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Was macht Avira?

Hallo Schrauber,

hier ist der Inhalt der Datei:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-07-2014

Ran by Name (administrator) on NINANORMAN on 15-07-2014 09:40:19

Running from C:\Users\Name\Desktop

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

() C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe

(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(TOSHIBA) C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [688472 2013-07-23] (Alps Electric Co., Ltd.)

HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-08-17] (TOSHIBA Corporation)

HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [178016 2013-08-21] (TOSHIBA Corporation)

HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296520 2013-09-11] (TOSHIBA Corporation)

HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [354144 2013-08-13] (TOSHIBA Corporation)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [383768 2002-04-12] (Alcor Micro Corp.)

HKLM-x32\...\Run: [1.TPUReg] => C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800 2013-03-27] (TOSHIBA)

HKLM-x32\...\Run: [TSVU] => c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe [516512 2013-07-23] (TOSHIBA)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)

HKLM-x32\...\Run: [t4pc_en_3] => [X]

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://toshiba.eu/symbaloo_c

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/symbaloo_c

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKLM-x32 - DefaultScope value is missing.

SearchScopes: HKLM-x32 - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=TEJB

SearchScopes: HKCU - {E813CC7E-EA6B-461D-A32C-D60A488DC823} URL = 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 

Chrome: 

=======

CHR HomePage: 

CHR Extension: (Google Wallet) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-21]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Services (Whitelisted) =================
 

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [99328 2013-08-30] () [File not signed]

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-08-22] (Windows (R) Win 7 DDK provider)

R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-09-10] ()

R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe [163168 2013-03-27] ()

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)

R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]

S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-18] (Toshiba Europe GmbH)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17504 2013-02-06] (Advanced Micro Devices, INC.)

R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)

S3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-22] (Advanced Micro Devices)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)

S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-15] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)

S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-07-08] (NetFilterSDK.com)

R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\PasswordUtility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )

R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

S3 cpuz135; \??\C:\Users\Name\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]

S3 cpuz136; \??\C:\Users\Name\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-07-15 09:35 - 2014-07-15 09:35 - 00000181 _____ () C:\Users\Name\Documents\Fixelist.txt

2014-07-15 09:33 - 2014-07-15 09:33 - 00448512 _____ (OldTimer Tools) C:\Users\Name\Desktop\TFC.exe

2014-07-14 13:14 - 2014-07-14 13:14 - 00000000 ____D () C:\Users\Name\Desktop\FRST-OlderVersion

2014-07-14 13:12 - 2014-07-14 13:12 - 00854390 _____ () C:\Users\Name\Desktop\SecurityCheck.exe

2014-07-13 11:46 - 2014-07-13 11:46 - 02347384 _____ (ESET) C:\Users\Name\Desktop\esetsmartinstaller_deu.exe

2014-07-13 11:46 - 2014-07-13 11:46 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-12 10:37 - 2014-07-12 10:37 - 00000613 _____ () C:\Users\Name\Desktop\JRT.txt

2014-07-12 10:25 - 2014-07-12 10:25 - 00000000 ____D () C:\Windows\ERUNT

2014-07-12 10:24 - 2014-07-12 10:24 - 01016261 _____ (Thisisu) C:\Users\Name\Desktop\JRT.exe

2014-07-12 10:16 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-07-12 10:15 - 2014-07-12 10:18 - 00000000 ____D () C:\AdwCleaner

2014-07-12 10:14 - 2014-07-12 10:14 - 01348263 _____ () C:\Users\Name\Desktop\adwcleaner_3.215.exe

2014-07-12 10:11 - 2014-07-12 10:11 - 00009856 _____ () C:\Users\Name\Desktop\mbam2.txt

2014-07-12 10:10 - 2014-07-12 10:10 - 00004064 _____ () C:\Users\Name\Desktop\mbam.txt

2014-07-12 09:24 - 2014-07-15 09:39 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-12 09:24 - 2014-07-12 09:24 - 00001089 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-12 09:24 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-12 09:24 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-12 09:23 - 2014-07-12 09:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Name\Desktop\mbam-setup-2.0.2.1012.exe

2014-07-12 09:14 - 2014-07-12 09:14 - 00000714 _____ () C:\Users\Name\Desktop\Revo Uninstaller.lnk

2014-07-12 09:13 - 2014-07-12 09:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Name\Desktop\revosetup95.exe

2014-07-11 09:51 - 2014-07-11 09:52 - 00025578 _____ () C:\Users\Name\Desktop\Addition.txt

2014-07-11 09:48 - 2014-07-15 09:40 - 00011429 _____ () C:\Users\Name\Desktop\FRST.txt

2014-07-11 09:48 - 2014-07-15 09:40 - 00000000 ____D () C:\FRST

2014-07-11 09:47 - 2014-07-14 13:14 - 02086912 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe

2014-07-11 08:39 - 2014-07-11 08:39 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira

2014-07-11 08:33 - 2014-07-11 08:33 - 00002057 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2014-07-11 08:33 - 2014-07-11 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\ProgramData\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-11 08:31 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-11 08:31 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-11 08:31 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-11 08:18 - 2014-07-11 08:19 - 143880056 _____ () C:\Users\Name\Downloads\avira_free_antivirus_de_464.exe

2014-07-09 15:24 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-07-09 15:22 - 2014-07-09 15:22 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-09 13:52 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-09 13:52 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-09 13:52 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-07-09 12:37 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-09 12:37 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-09 12:37 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-09 12:37 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-09 12:37 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-09 12:37 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-09 12:37 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-09 12:37 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-09 12:37 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2014-07-09 12:37 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-07-09 12:37 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-07-09 12:37 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2014-07-09 12:37 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2014-07-09 12:37 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-09 12:36 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-09 12:36 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-09 12:36 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-09 12:36 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-09 12:36 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-09 12:36 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-09 12:36 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-09 12:36 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-09 12:36 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-09 12:36 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-09 12:36 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-09 12:36 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-09 12:36 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-09 12:36 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-09 12:36 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-09 12:36 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-09 12:36 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-09 12:36 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-09 12:36 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-09 12:36 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-09 12:36 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-09 12:36 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-09 12:36 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-09 12:36 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-09 12:36 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-09 12:36 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-07-09 12:36 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2014-07-09 12:36 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-07-09 12:36 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-07-09 12:36 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 12:36 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-07-09 12:36 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-07-09 12:36 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-07-09 12:36 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-07-09 12:36 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-07-09 12:36 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-07-09 12:36 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-07-09 12:36 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-07-09 12:36 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-07-09 12:36 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-07-09 12:27 - 2014-07-09 12:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

2014-07-09 12:25 - 2014-07-12 10:05 - 00000000 ____D () C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E

2014-07-08 20:31 - 2014-07-08 20:31 - 00046376 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter64.sys

2014-07-08 12:55 - 2014-07-09 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-06-30 15:02 - 2014-06-30 15:02 - 00821760 _____ (Browser Opt-out) C:\Users\Name\Downloads\uninstall.exe

2014-06-30 14:28 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-06-26 08:02 - 2014-07-11 08:36 - 00000000 ____D () C:\ProgramData\f33e80f8b2680104

2014-06-26 06:09 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-06-26 06:09 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-06-26 06:09 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-06-26 06:09 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-06-26 06:09 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-06-26 06:09 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-06-26 06:09 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-06-26 06:09 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-06-26 06:09 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-06-26 06:09 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-06-26 06:09 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-06-26 06:08 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll

2014-06-26 06:08 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-06-26 06:08 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-06-26 06:08 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll

2014-06-26 06:08 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2014-06-26 06:08 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-06-26 06:08 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-06-26 06:08 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-06-26 06:08 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-06-26 06:08 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll

2014-06-26 06:08 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll

2014-06-26 06:08 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2014-06-26 06:08 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2014-06-26 06:08 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll

2014-06-26 06:08 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2014-06-26 06:08 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2014-06-26 06:08 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2014-06-26 06:08 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2014-06-26 06:08 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2014-06-26 06:08 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2014-06-26 06:08 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2014-06-26 06:08 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2014-06-26 06:08 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-06-26 06:08 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-06-26 06:08 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll

2014-06-26 06:08 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys

2014-06-26 06:08 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-06-26 06:08 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-06-26 06:08 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2014-06-26 06:08 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-06-26 06:08 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-06-26 06:08 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-06-26 06:08 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-06-26 06:08 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2014-06-26 06:08 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe

2014-06-26 06:08 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-06-26 06:08 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-06-26 06:08 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll

2014-06-26 06:08 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2014-06-26 06:08 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-06-26 06:08 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-06-26 06:08 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-06-26 06:08 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-06-26 06:08 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-06-26 06:08 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll

2014-06-26 06:08 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-06-26 06:08 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll

2014-06-26 06:08 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-06-26 06:08 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll

2014-06-26 06:08 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-06-26 06:08 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-06-26 06:08 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-06-26 06:08 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-06-26 06:08 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-06-26 06:08 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll

2014-06-26 06:08 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll

2014-06-26 06:08 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-06-26 06:08 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-06-26 06:08 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll

2014-06-26 06:08 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-06-26 06:08 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-06-26 06:08 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2014-06-26 06:08 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-06-26 06:08 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-06-26 06:08 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-06-26 06:08 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2014-06-26 06:08 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-06-26 06:08 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll

2014-06-26 06:08 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2014-06-26 06:08 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll

2014-06-26 06:08 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll

2014-06-26 06:08 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2014-06-26 06:08 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2014-06-26 06:08 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe

2014-06-26 06:08 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-06-26 06:08 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2014-06-26 06:08 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-06-26 06:08 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-06-26 06:08 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-06-26 06:08 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-06-26 06:08 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2014-06-26 06:08 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-06-26 06:08 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2014-06-26 06:08 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-06-26 06:08 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-06-26 06:08 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2014-06-26 06:08 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2014-06-26 06:08 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-06-26 06:08 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-06-26 06:08 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2014-06-26 06:08 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2014-06-26 06:08 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv

2014-06-26 06:08 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2014-06-26 06:08 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2014-06-26 06:08 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-06-26 06:07 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2014-06-26 06:07 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2014-06-26 06:07 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2014-06-26 06:07 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2014-06-26 06:07 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2014-06-26 06:07 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2014-06-26 06:07 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2014-06-26 06:07 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2014-06-26 06:07 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2014-06-26 06:07 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-06-26 06:07 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2014-06-26 06:07 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-06-26 06:07 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2014-06-26 06:07 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2014-06-26 06:07 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2014-06-26 06:07 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-06-26 06:07 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll

2014-06-26 06:07 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-06-26 06:07 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll

2014-06-26 06:07 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-06-26 06:07 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2014-06-26 06:07 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-06-26 06:07 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2014-06-26 06:07 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-06-26 06:04 - 2014-06-26 06:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
 

==================== One Month Modified Files and Folders =======
 

2014-07-15 09:41 - 2014-07-11 09:48 - 00011429 _____ () C:\Users\Name\Desktop\FRST.txt

2014-07-15 09:40 - 2014-07-11 09:48 - 00000000 ____D () C:\FRST

2014-07-15 09:39 - 2014-07-12 09:24 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-15 09:39 - 2014-05-21 10:08 - 00002166 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-07-15 09:38 - 2014-05-21 11:38 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2014-07-15 09:37 - 2014-05-21 10:07 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-07-15 09:37 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-07-15 09:36 - 2013-09-10 19:19 - 01107461 _____ () C:\Windows\WindowsUpdate.log

2014-07-15 09:36 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-07-15 09:35 - 2014-07-15 09:35 - 00000181 _____ () C:\Users\Name\Documents\Fixelist.txt

2014-07-15 09:33 - 2014-07-15 09:33 - 00448512 _____ (OldTimer Tools) C:\Users\Name\Desktop\TFC.exe

2014-07-15 09:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-07-15 09:26 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-07-14 21:12 - 2013-09-10 19:19 - 00065536 _____ () C:\Windows\system32\spu_storage.bin

2014-07-14 20:18 - 2014-05-21 10:07 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-07-14 13:14 - 2014-07-14 13:14 - 00000000 ____D () C:\Users\Name\Desktop\FRST-OlderVersion

2014-07-14 13:14 - 2014-07-11 09:47 - 02086912 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe

2014-07-14 13:12 - 2014-07-14 13:12 - 00854390 _____ () C:\Users\Name\Desktop\SecurityCheck.exe

2014-07-13 11:46 - 2014-07-13 11:46 - 02347384 _____ (ESET) C:\Users\Name\Desktop\esetsmartinstaller_deu.exe

2014-07-13 11:46 - 2014-07-13 11:46 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-07-12 11:48 - 2013-09-16 23:36 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2078998368-3938944336-3194671038-1001

2014-07-12 10:37 - 2014-07-12 10:37 - 00000613 _____ () C:\Users\Name\Desktop\JRT.txt

2014-07-12 10:25 - 2014-07-12 10:25 - 00000000 ____D () C:\Windows\ERUNT

2014-07-12 10:24 - 2014-07-12 10:24 - 01016261 _____ (Thisisu) C:\Users\Name\Desktop\JRT.exe

2014-07-12 10:19 - 2013-09-11 04:13 - 00168660 _____ () C:\Windows\PFRO.log

2014-07-12 10:18 - 2014-07-12 10:15 - 00000000 ____D () C:\AdwCleaner

2014-07-12 10:18 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-07-12 10:14 - 2014-07-12 10:14 - 01348263 _____ () C:\Users\Name\Desktop\adwcleaner_3.215.exe

2014-07-12 10:11 - 2014-07-12 10:11 - 00009856 _____ () C:\Users\Name\Desktop\mbam2.txt

2014-07-12 10:10 - 2014-07-12 10:10 - 00004064 _____ () C:\Users\Name\Desktop\mbam.txt

2014-07-12 10:05 - 2014-07-09 12:25 - 00000000 ____D () C:\Program Files (x86)\A6ADCE5D-859A-4E7E-B0B2-D07F8AB9237E

2014-07-12 10:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-07-12 10:04 - 2014-05-21 10:54 - 00000000 ____D () C:\temp

2014-07-12 09:24 - 2014-07-12 09:24 - 00001089 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-12 09:24 - 2014-07-12 09:24 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-12 09:23 - 2014-07-12 09:23 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Name\Desktop\mbam-setup-2.0.2.1012.exe

2014-07-12 09:14 - 2014-07-12 09:14 - 00000714 _____ () C:\Users\Name\Desktop\Revo Uninstaller.lnk

2014-07-12 09:13 - 2014-07-12 09:13 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Name\Desktop\revosetup95.exe

2014-07-11 09:52 - 2014-07-11 09:51 - 00025578 _____ () C:\Users\Name\Desktop\Addition.txt

2014-07-11 08:39 - 2014-07-11 08:39 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira

2014-07-11 08:36 - 2014-06-26 08:02 - 00000000 ____D () C:\ProgramData\f33e80f8b2680104

2014-07-11 08:33 - 2014-07-11 08:33 - 00002057 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk

2014-07-11 08:33 - 2014-07-11 08:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\ProgramData\Avira

2014-07-11 08:31 - 2014-07-11 08:31 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-11 08:19 - 2014-07-11 08:18 - 143880056 _____ () C:\Users\Name\Downloads\avira_free_antivirus_de_464.exe

2014-07-10 20:23 - 2014-05-21 18:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-10 20:23 - 2013-08-22 16:44 - 00360600 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-07-09 16:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-07-09 16:20 - 2014-05-22 17:57 - 00000000 ____D () C:\Users\Name\Documents\Bewerbungen

2014-07-09 15:26 - 2014-05-21 16:42 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-09 15:26 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-07-09 15:23 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-09 15:22 - 2014-07-09 15:22 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-09 15:00 - 2014-07-08 12:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-07-09 12:27 - 2014-07-09 12:27 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

2014-07-08 20:31 - 2014-07-08 20:31 - 00046376 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter64.sys

2014-07-08 11:54 - 2014-05-21 18:57 - 00000000 ____D () C:\Users\Name\AppData\Local\Thunderbird

2014-07-02 13:06 - 2014-07-11 08:31 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-02 13:06 - 2014-07-11 08:31 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-02 13:06 - 2014-07-11 08:31 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-01 00:45 - 2014-07-09 13:52 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-06-30 15:02 - 2014-06-30 15:02 - 00821760 _____ (Browser Opt-out) C:\Users\Name\Downloads\uninstall.exe

2014-06-30 15:02 - 2013-09-10 19:13 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2078998368-3938944336-3194671038-500

2014-06-30 14:26 - 2013-09-10 19:26 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-06-30 14:26 - 2013-08-28 11:59 - 00765582 _____ () C:\Windows\system32\perfh007.dat

2014-06-30 14:26 - 2013-08-28 11:59 - 00159366 _____ () C:\Windows\system32\perfc007.dat

2014-06-28 09:48 - 2014-07-09 13:52 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-06-28 09:07 - 2014-07-09 13:52 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2014-06-26 22:55 - 2013-08-22 17:38 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-06-26 22:55 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-06-26 17:40 - 2014-05-21 16:42 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-06-26 10:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-06-26 10:10 - 2013-08-22 16:46 - 00021161 _____ () C:\Windows\setupact.log

2014-06-26 06:13 - 2014-05-21 10:07 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2014-06-26 06:13 - 2014-05-21 10:07 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2014-06-26 06:04 - 2014-06-26 06:04 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-06-26 06:02 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-06-26 06:01 - 2014-06-26 06:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-06-26 06:01 - 2014-06-26 06:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-06-26 06:01 - 2014-06-26 06:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-06-19 03:39 - 2014-07-09 12:37 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-06-19 02:48 - 2014-07-09 12:36 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-06-19 02:16 - 2014-07-09 12:37 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-06-19 02:09 - 2014-07-09 12:36 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-06-19 01:51 - 2014-07-09 12:36 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-06-19 01:50 - 2014-07-09 12:36 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-06-19 01:48 - 2014-07-09 12:36 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-06-19 01:46 - 2014-07-09 12:37 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-06-19 01:39 - 2014-07-09 12:36 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-06-19 01:33 - 2014-07-09 12:36 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-06-19 01:32 - 2014-07-09 12:36 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-06-19 01:27 - 2014-07-09 12:36 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-06-19 01:12 - 2014-07-09 12:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-06-19 00:59 - 2014-07-09 12:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-06-19 00:58 - 2014-07-09 12:36 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-06-19 00:58 - 2014-07-09 12:36 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-06-19 00:57 - 2014-07-09 12:37 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-06-19 00:52 - 2014-07-09 12:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-06-19 00:51 - 2014-07-09 12:36 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-06-19 00:49 - 2014-07-09 12:36 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-06-19 00:45 - 2014-07-09 12:36 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-06-19 00:35 - 2014-07-09 12:36 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-06-19 00:34 - 2014-07-09 12:36 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-06-19 00:15 - 2014-07-09 12:36 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-06-19 00:13 - 2014-07-09 12:36 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-06-19 00:09 - 2014-07-09 12:36 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-06-19 00:07 - 2014-07-09 12:36 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-06-17 00:26 - 2014-07-09 12:37 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-06-17 00:24 - 2014-07-09 12:37 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
 

Some content of TEMP:

====================

C:\Users\Name\AppData\Local\Temp\2040-2082_re-markit.exe

C:\Users\Name\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe

C:\Users\Name\AppData\Local\Temp\avgnt.exe

C:\Users\Name\AppData\Local\Temp\BackupSetup.exe

C:\Users\Name\AppData\Local\Temp\cloud_backup_setup.exe

C:\Users\Name\AppData\Local\Temp\genesisinstaller.exe

C:\Users\Name\AppData\Local\Temp\optimizerpro.exe

C:\Users\Name\AppData\Local\Temp\optprosetup.exe

C:\Users\Name\AppData\Local\Temp\Quarantine.exe

C:\Users\Name\AppData\Local\Temp\vcredist_x64.exe

C:\Users\Name\AppData\Local\Temp\_unps.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-05-21 16:04
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Sorry hier der richtige Inhalt:

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-07-2014

Ran by Name at 2014-07-15 09:36:17 Run:1

Running from C:\Users\Name\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

C:\$RECYCLE.BIN

AppInit_DLLs: C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL => C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL File Not Found

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

*****************
 

C:\$RECYCLE.BIN => Moved successfully.

"C:\PROGRA~3\FASTAN~1\FASTAN~2.DLL" => Value Data removed successfully.

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
 
 

The system needed a reboot. 
 

==== End of Fixlog ====

--------------------------

Avira lasse ich nachher mal durchlaufen und gebe dir sofort Bescheid. Hoffe, dass es ruhig bleibt. Ist es schlimm, wenn die Dinge in Temps oder Quarantäne sind?

Reinige die Temps mit Ccleaner.

Ich warte dann mal auf den Bericht :)

Hallo Schrauber,

hier meine wirklich verspätete Antwort. Eine Grippe hatte mich erwischt.

Hier der versprochene Bericht von AntiVir:

Code:



Avira Free Antivirus

Erstellungsdatum der Reportdatei: Montag, 28. Juli 2014  16:54
 
 

Das Programm läuft als uneingeschränkte Vollversion.

Online-Dienste stehen zur Verfügung.
 

Lizenznehmer   : Avira Antivirus Free

Seriennummer   : 0000149996-AVHOE-0000001

Plattform      : Windows 8.1

Windowsversion : (plain)  [6.2.9200]

Boot Modus     : Normal gebootet

Benutzername   : SYSTEM

Computername   : NINANORMAN
 

Versionsinformationen:

BUILD.DAT      : 14.0.5.464     91868 Bytes  02.07.2014 13:06:00

AVSCAN.EXE     : 14.0.5.396   1042512 Bytes  02.07.2014 11:06:43

AVSCANRC.DLL   : 14.0.5.364     62544 Bytes  02.07.2014 11:06:43

LUKE.DLL       : 14.0.5.336     57936 Bytes  02.07.2014 11:06:46

AVSCPLR.DLL    : 14.0.5.376     89680 Bytes  02.07.2014 11:06:43

AVREG.DLL      : 14.0.5.356    261200 Bytes  02.07.2014 11:06:43

avlode.dll     : 14.0.5.396    588368 Bytes  02.07.2014 11:06:42

avlode.rdf     : 14.0.4.42      65114 Bytes  19.07.2014 05:39:53

XBV00008.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00009.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00010.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00011.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00012.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00013.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00014.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00015.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00016.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00017.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00018.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00019.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00020.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00021.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00022.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00023.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00024.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00025.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00026.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00027.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00028.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00029.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00030.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00031.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00032.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00033.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00034.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00035.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00036.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00037.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00038.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00039.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00040.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00041.VDF   : 8.11.153.142     2048 Bytes  06.06.2014 11:06:47

XBV00200.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00201.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00202.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00203.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00204.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00205.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00206.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00207.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00208.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00209.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00210.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00211.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00212.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00213.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:44

XBV00214.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00215.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00216.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00217.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00218.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00219.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00220.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00221.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00222.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00223.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00224.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00225.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00226.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00227.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00228.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00229.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00230.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00231.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00232.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00233.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00234.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00235.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00236.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00237.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00238.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:45

XBV00239.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00240.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00241.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00242.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00243.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00244.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00245.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00246.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00247.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00248.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00249.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00250.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00251.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00252.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00253.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00254.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00255.VDF   : 8.11.159.102     2048 Bytes  08.07.2014 06:55:46

XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 11:06:47

XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 11:06:47

XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 11:06:47

XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 11:06:47

XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 11:06:47

XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 11:06:47

XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 11:06:47

XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 11:06:47

XBV00042.VDF   : 8.11.153.142   710656 Bytes  06.06.2014 11:06:47

XBV00043.VDF   : 8.11.155.44  1013760 Bytes  16.06.2014 11:06:47

XBV00044.VDF   : 8.11.159.102  1662976 Bytes  08.07.2014 06:55:36

XBV00045.VDF   : 8.11.159.104    13824 Bytes  08.07.2014 06:55:36

XBV00046.VDF   : 8.11.159.108    13312 Bytes  08.07.2014 06:55:36

XBV00047.VDF   : 8.11.159.112    30720 Bytes  09.07.2014 06:55:36

XBV00048.VDF   : 8.11.159.114     6144 Bytes  09.07.2014 06:55:36

XBV00049.VDF   : 8.11.159.116    10240 Bytes  09.07.2014 06:55:36

XBV00050.VDF   : 8.11.159.118     5632 Bytes  09.07.2014 06:55:36

XBV00051.VDF   : 8.11.159.122     7168 Bytes  09.07.2014 06:55:36

XBV00052.VDF   : 8.11.159.126   180736 Bytes  09.07.2014 06:55:37

XBV00053.VDF   : 8.11.159.148   174080 Bytes  09.07.2014 06:55:37

XBV00054.VDF   : 8.11.159.168     2560 Bytes  09.07.2014 06:55:37

XBV00055.VDF   : 8.11.159.188    15360 Bytes  09.07.2014 06:55:37

XBV00056.VDF   : 8.11.159.210    25600 Bytes  09.07.2014 06:55:37

XBV00057.VDF   : 8.11.159.212     7168 Bytes  09.07.2014 06:55:37

XBV00058.VDF   : 8.11.159.218    27648 Bytes  10.07.2014 06:55:37

XBV00059.VDF   : 8.11.159.220     2048 Bytes  10.07.2014 06:55:37

XBV00060.VDF   : 8.11.159.222    29696 Bytes  10.07.2014 06:55:37

XBV00061.VDF   : 8.11.159.224   167936 Bytes  10.07.2014 06:55:37

XBV00062.VDF   : 8.11.159.226    35328 Bytes  10.07.2014 06:55:37

XBV00063.VDF   : 8.11.159.230   186368 Bytes  10.07.2014 06:55:37

XBV00064.VDF   : 8.11.159.250    16896 Bytes  10.07.2014 06:55:37

XBV00065.VDF   : 8.11.159.252     2048 Bytes  10.07.2014 06:55:37

XBV00066.VDF   : 8.11.160.16     6144 Bytes  10.07.2014 06:55:37

XBV00067.VDF   : 8.11.160.40    17408 Bytes  10.07.2014 06:55:38

XBV00068.VDF   : 8.11.160.42     2048 Bytes  11.07.2014 06:55:38

XBV00069.VDF   : 8.11.160.46   179200 Bytes  11.07.2014 06:55:38

XBV00070.VDF   : 8.11.160.48   203264 Bytes  11.07.2014 08:23:15

XBV00071.VDF   : 8.11.160.50     6144 Bytes  11.07.2014 08:23:15

XBV00072.VDF   : 8.11.160.52     2048 Bytes  11.07.2014 08:23:15

XBV00073.VDF   : 8.11.160.54     2048 Bytes  11.07.2014 08:23:15

XBV00074.VDF   : 8.11.160.58    22016 Bytes  11.07.2014 08:23:15

XBV00075.VDF   : 8.11.160.60     2048 Bytes  11.07.2014 08:23:15

XBV00076.VDF   : 8.11.160.62     8192 Bytes  11.07.2014 08:23:15

XBV00077.VDF   : 8.11.160.66   198656 Bytes  12.07.2014 08:23:15

XBV00078.VDF   : 8.11.160.68     7168 Bytes  12.07.2014 08:23:15

XBV00079.VDF   : 8.11.160.70    14848 Bytes  12.07.2014 08:23:15

XBV00080.VDF   : 8.11.160.72     7168 Bytes  12.07.2014 08:23:15

XBV00081.VDF   : 8.11.160.92    40448 Bytes  13.07.2014 08:23:15

XBV00082.VDF   : 8.11.160.112     2048 Bytes  13.07.2014 08:23:15

XBV00083.VDF   : 8.11.160.130   193024 Bytes  13.07.2014 08:23:16

XBV00084.VDF   : 8.11.160.132     2048 Bytes  13.07.2014 08:23:16

XBV00085.VDF   : 8.11.160.152    20480 Bytes  13.07.2014 08:23:16

XBV00086.VDF   : 8.11.160.154     2048 Bytes  13.07.2014 08:23:16

XBV00087.VDF   : 8.11.160.156    20992 Bytes  14.07.2014 08:23:16

XBV00088.VDF   : 8.11.160.158     2560 Bytes  14.07.2014 08:23:16

XBV00089.VDF   : 8.11.160.160    11264 Bytes  14.07.2014 14:24:18

XBV00090.VDF   : 8.11.160.162     2560 Bytes  14.07.2014 14:24:18

XBV00091.VDF   : 8.11.160.166    14336 Bytes  14.07.2014 14:24:18

XBV00092.VDF   : 8.11.160.168     5120 Bytes  14.07.2014 14:24:18

XBV00093.VDF   : 8.11.160.178     7168 Bytes  14.07.2014 05:39:53

XBV00094.VDF   : 8.11.160.180     2048 Bytes  14.07.2014 05:39:53

XBV00095.VDF   : 8.11.160.182     2048 Bytes  14.07.2014 05:39:53

XBV00096.VDF   : 8.11.160.188   256000 Bytes  14.07.2014 05:39:53

XBV00097.VDF   : 8.11.160.190     7680 Bytes  14.07.2014 05:39:53

XBV00098.VDF   : 8.11.160.194    18432 Bytes  15.07.2014 05:39:53

XBV00099.VDF   : 8.11.160.212   184832 Bytes  15.07.2014 05:39:54

XBV00100.VDF   : 8.11.160.230   289792 Bytes  15.07.2014 05:39:54

XBV00101.VDF   : 8.11.160.232     2048 Bytes  15.07.2014 05:39:54

XBV00102.VDF   : 8.11.160.234   176128 Bytes  15.07.2014 05:39:54

XBV00103.VDF   : 8.11.160.254    18432 Bytes  15.07.2014 05:39:54

XBV00104.VDF   : 8.11.161.16     6144 Bytes  16.07.2014 05:39:54

XBV00105.VDF   : 8.11.161.32     2048 Bytes  16.07.2014 05:39:54

XBV00106.VDF   : 8.11.161.34     2048 Bytes  16.07.2014 05:39:54

XBV00107.VDF   : 8.11.161.52    26624 Bytes  16.07.2014 05:39:54

XBV00108.VDF   : 8.11.161.68   184832 Bytes  16.07.2014 05:39:54

XBV00109.VDF   : 8.11.161.84     2048 Bytes  16.07.2014 05:39:54

XBV00110.VDF   : 8.11.162.2      2560 Bytes  16.07.2014 05:39:54

XBV00111.VDF   : 8.11.162.6     16896 Bytes  16.07.2014 05:39:54

XBV00112.VDF   : 8.11.162.8     24064 Bytes  16.07.2014 05:39:54

XBV00113.VDF   : 8.11.162.10     2560 Bytes  16.07.2014 05:39:55

XBV00114.VDF   : 8.11.162.14    41472 Bytes  17.07.2014 05:39:55

XBV00115.VDF   : 8.11.162.16     2048 Bytes  17.07.2014 05:39:55

XBV00116.VDF   : 8.11.162.18   215040 Bytes  17.07.2014 05:39:55

XBV00117.VDF   : 8.11.162.22   184320 Bytes  17.07.2014 05:39:55

XBV00118.VDF   : 8.11.162.40   258048 Bytes  17.07.2014 05:39:55

XBV00119.VDF   : 8.11.162.42     3584 Bytes  17.07.2014 05:39:55

XBV00120.VDF   : 8.11.162.58     3072 Bytes  17.07.2014 05:39:55

XBV00121.VDF   : 8.11.162.78     2048 Bytes  17.07.2014 05:39:55

XBV00122.VDF   : 8.11.162.94     2048 Bytes  17.07.2014 05:39:55

XBV00123.VDF   : 8.11.162.110    35840 Bytes  17.07.2014 05:39:55

XBV00124.VDF   : 8.11.162.112     2048 Bytes  18.07.2014 05:39:56

XBV00125.VDF   : 8.11.162.130    23040 Bytes  18.07.2014 05:39:56

XBV00126.VDF   : 8.11.162.134   184320 Bytes  18.07.2014 05:39:56

XBV00127.VDF   : 8.11.162.136     2048 Bytes  18.07.2014 05:39:56

XBV00128.VDF   : 8.11.162.152   231424 Bytes  18.07.2014 05:39:56

XBV00129.VDF   : 8.11.162.154     2048 Bytes  18.07.2014 05:39:56

XBV00130.VDF   : 8.11.162.170   108032 Bytes  18.07.2014 05:39:56

XBV00131.VDF   : 8.11.162.172     9728 Bytes  18.07.2014 05:39:56

XBV00132.VDF   : 8.11.162.174     2048 Bytes  18.07.2014 05:39:56

XBV00133.VDF   : 8.11.162.188    20992 Bytes  18.07.2014 05:39:56

XBV00134.VDF   : 8.11.162.192     2048 Bytes  18.07.2014 05:39:56

XBV00135.VDF   : 8.11.162.194     2048 Bytes  18.07.2014 05:39:56

XBV00136.VDF   : 8.11.162.200    19968 Bytes  18.07.2014 05:39:56

XBV00137.VDF   : 8.11.162.204     2048 Bytes  18.07.2014 05:39:56

XBV00138.VDF   : 8.11.162.212     2048 Bytes  18.07.2014 05:39:56

XBV00139.VDF   : 8.11.162.228   227840 Bytes  19.07.2014 06:46:08

XBV00140.VDF   : 8.11.162.244     2048 Bytes  19.07.2014 06:46:08

XBV00141.VDF   : 8.11.163.2     31232 Bytes  19.07.2014 06:46:08

XBV00142.VDF   : 8.11.163.16    62464 Bytes  20.07.2014 06:46:08

XBV00143.VDF   : 8.11.163.20   202752 Bytes  20.07.2014 06:46:09

XBV00144.VDF   : 8.11.163.22     2048 Bytes  20.07.2014 06:46:09

XBV00145.VDF   : 8.11.163.26    50176 Bytes  21.07.2014 06:46:09

XBV00146.VDF   : 8.11.163.28    23040 Bytes  21.07.2014 06:46:09

XBV00147.VDF   : 8.11.163.42     6144 Bytes  21.07.2014 16:57:12

XBV00148.VDF   : 8.11.163.44     2560 Bytes  21.07.2014 16:57:12

XBV00149.VDF   : 8.11.163.56     5120 Bytes  21.07.2014 16:57:12

XBV00150.VDF   : 8.11.163.68     8192 Bytes  21.07.2014 16:57:12

XBV00151.VDF   : 8.11.163.74   213504 Bytes  21.07.2014 16:57:13

XBV00152.VDF   : 8.11.163.78    22528 Bytes  22.07.2014 16:57:13

XBV00153.VDF   : 8.11.163.82     2560 Bytes  22.07.2014 16:57:13

XBV00154.VDF   : 8.11.163.84   181248 Bytes  22.07.2014 16:57:14

XBV00155.VDF   : 8.11.163.86     9728 Bytes  22.07.2014 16:57:14

XBV00156.VDF   : 8.11.163.92     2560 Bytes  22.07.2014 16:57:14

XBV00157.VDF   : 8.11.163.98   230400 Bytes  22.07.2014 16:57:14

XBV00158.VDF   : 8.11.163.100     2048 Bytes  22.07.2014 16:57:14

XBV00159.VDF   : 8.11.163.102     2048 Bytes  22.07.2014 16:57:14

XBV00160.VDF   : 8.11.163.108    22528 Bytes  22.07.2014 08:47:36

XBV00161.VDF   : 8.11.163.112    17920 Bytes  22.07.2014 08:47:36

XBV00162.VDF   : 8.11.163.116     2048 Bytes  23.07.2014 08:47:36

XBV00163.VDF   : 8.11.163.130   194048 Bytes  23.07.2014 08:47:36

XBV00164.VDF   : 8.11.163.142    20992 Bytes  23.07.2014 08:47:37

XBV00165.VDF   : 8.11.163.154    11776 Bytes  23.07.2014 09:32:50

XBV00166.VDF   : 8.11.163.158    17920 Bytes  23.07.2014 09:32:50

XBV00167.VDF   : 8.11.163.164     2048 Bytes  23.07.2014 09:32:50

XBV00168.VDF   : 8.11.163.170    14848 Bytes  23.07.2014 09:32:50

XBV00169.VDF   : 8.11.163.174   193024 Bytes  23.07.2014 09:32:50

XBV00170.VDF   : 8.11.163.176     3072 Bytes  23.07.2014 09:32:50

XBV00171.VDF   : 8.11.163.178     3072 Bytes  23.07.2014 09:32:50

XBV00172.VDF   : 8.11.163.184   199168 Bytes  24.07.2014 09:32:51

XBV00173.VDF   : 8.11.163.186   421376 Bytes  24.07.2014 09:32:51

XBV00174.VDF   : 8.11.163.198     2048 Bytes  24.07.2014 09:32:51

XBV00175.VDF   : 8.11.163.200     2048 Bytes  24.07.2014 09:32:51

XBV00176.VDF   : 8.11.163.212   212992 Bytes  24.07.2014 09:32:51

XBV00177.VDF   : 8.11.163.222    34816 Bytes  24.07.2014 09:32:51

XBV00178.VDF   : 8.11.163.226     2048 Bytes  24.07.2014 09:32:52

XBV00179.VDF   : 8.11.163.230    21504 Bytes  24.07.2014 09:32:52

XBV00180.VDF   : 8.11.163.234    18944 Bytes  25.07.2014 09:32:52

XBV00181.VDF   : 8.11.163.236     6656 Bytes  25.07.2014 09:32:52

XBV00182.VDF   : 8.11.163.238     2048 Bytes  25.07.2014 09:32:52

XBV00183.VDF   : 8.11.163.240   198144 Bytes  25.07.2014 09:32:52

XBV00184.VDF   : 8.11.163.244    38400 Bytes  25.07.2014 05:13:32

XBV00185.VDF   : 8.11.163.246     2048 Bytes  25.07.2014 05:13:32

XBV00186.VDF   : 8.11.163.248     6144 Bytes  25.07.2014 05:13:32

XBV00187.VDF   : 8.11.163.252    11776 Bytes  25.07.2014 05:13:32

XBV00188.VDF   : 8.11.163.254     2048 Bytes  25.07.2014 05:13:32

XBV00189.VDF   : 8.11.164.2      2048 Bytes  26.07.2014 05:13:32

XBV00190.VDF   : 8.11.164.6      5120 Bytes  26.07.2014 11:13:26

XBV00191.VDF   : 8.11.164.8      2048 Bytes  26.07.2014 11:13:26

XBV00192.VDF   : 8.11.164.20    32768 Bytes  26.07.2014 08:54:39

XBV00193.VDF   : 8.11.164.30     2048 Bytes  26.07.2014 08:54:39

XBV00194.VDF   : 8.11.164.42    37376 Bytes  27.07.2014 08:54:39

XBV00195.VDF   : 8.11.164.52     5632 Bytes  27.07.2014 08:54:39

XBV00196.VDF   : 8.11.164.54    40960 Bytes  28.07.2014 08:54:39

XBV00197.VDF   : 8.11.164.56     2048 Bytes  28.07.2014 08:54:39

XBV00198.VDF   : 8.11.164.58     4096 Bytes  28.07.2014 08:54:39

XBV00199.VDF   : 8.11.164.60     4608 Bytes  28.07.2014 08:54:39

LOCAL000.VDF   : 8.11.164.60 109010944 Bytes  28.07.2014 08:55:14

Engineversion  : 8.3.22.12 

AEVDF.DLL      : 8.3.0.4       118976 Bytes  02.07.2014 11:06:41

AESCRIPT.DLL   : 8.2.0.12      426184 Bytes  22.07.2014 16:57:12

AESCN.DLL      : 8.3.2.2       139456 Bytes  22.07.2014 16:57:11

AESBX.DLL      : 8.2.20.24    1409224 Bytes  02.07.2014 11:06:41

AERDL.DLL      : 8.2.0.138     704888 Bytes  02.07.2014 11:06:41

AEPACK.DLL     : 8.4.0.42      786632 Bytes  11.07.2014 06:55:34

AEOFFICE.DLL   : 8.3.0.14      213192 Bytes  22.07.2014 16:57:11

AEHEUR.DLL     : 8.1.4.1166   7233736 Bytes  22.07.2014 16:57:11

AEHELP.DLL     : 8.3.1.0       278728 Bytes  02.07.2014 11:06:41

AEGEN.DLL      : 8.1.7.28      450752 Bytes  02.07.2014 11:06:41

AEEXP.DLL      : 8.4.2.6       237760 Bytes  02.07.2014 11:06:41

AEEMU.DLL      : 8.1.3.2       393587 Bytes  02.07.2014 11:06:41

AEDROID.DLL    : 8.4.2.24      442568 Bytes  02.07.2014 11:06:41

AECORE.DLL     : 8.3.2.2       241864 Bytes  22.07.2014 16:57:03

AEBB.DLL       : 8.1.1.4        53619 Bytes  02.07.2014 11:06:41

AVWINLL.DLL    : 14.0.5.320     24144 Bytes  02.07.2014 11:06:44

AVPREF.DLL     : 14.0.5.320     50256 Bytes  02.07.2014 11:06:43

AVREP.DLL      : 14.0.5.320    219216 Bytes  02.07.2014 11:06:43

AVARKT.DLL     : 14.0.5.368    226384 Bytes  02.07.2014 11:06:42

AVEVTLOG.DLL   : 14.0.5.320    182352 Bytes  02.07.2014 11:06:42

SQLITE3.DLL    : 14.0.5.320    452176 Bytes  02.07.2014 11:06:47

AVSMTP.DLL     : 14.0.5.320     76368 Bytes  02.07.2014 11:06:44

NETNT.DLL      : 14.0.5.320     13392 Bytes  02.07.2014 11:06:46

RCIMAGE.DLL    : 14.0.5.320   4998224 Bytes  02.07.2014 11:06:46

RCTEXT.DLL     : 14.0.5.322     73808 Bytes  02.07.2014 11:06:46
 

Konfiguration für den aktuellen Suchlauf:

Job Name..............................: Vollständige Systemprüfung

Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp

Protokollierung.......................: standard

Primäre Aktion........................: Interaktiv

Sekundäre Aktion......................: Ignorieren

Durchsuche Masterbootsektoren.........: ein

Durchsuche Bootsektoren...............: ein

Bootsektoren..........................: C:, 

Durchsuche aktive Programme...........: ein

Laufende Programme erweitert..........: ein

Durchsuche Registrierung..............: ein

Suche nach Rootkits...................: ein

Integritätsprüfung von Systemdateien..: aus

Prüfe alle Dateien....................: Alle Dateien

Durchsuche Archive....................: ein

Rekursionstiefe einschränken..........: 20

Archiv Smart Extensions...............: ein

Makrovirenheuristik...................: ein

Dateiheuristik........................: erweitert
 

Beginn des Suchlaufs: Montag, 28. Juli 2014  16:54
 

Der Suchlauf über die Bootsektoren wird begonnen:

Bootsektor 'HDD0(C:)'

    [INFO]      Es wurde kein Virus gefunden!
 

Der Suchlauf nach versteckten Objekten wird begonnen.

Fehler in der ARK Library
 

Der Suchlauf über gestartete Prozesse wird begonnen:

Durchsuche Prozess 'svchost.exe' - '45' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '29' Modul(e) wurden durchsucht

Durchsuche Prozess 'dwm.exe' - '37' Modul(e) wurden durchsucht

Durchsuche Prozess 'atiesrxx.exe' - '16' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '93' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '157' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '57' Modul(e) wurden durchsucht

Durchsuche Prozess 'atieclxx.exe' - '44' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '100' Modul(e) wurden durchsucht

Durchsuche Prozess 'STacSV64.exe' - '43' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '78' Modul(e) wurden durchsucht

Durchsuche Prozess 'GFNEXSrv.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'spoolsv.exe' - '72' Modul(e) wurden durchsucht

Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '86' Modul(e) wurden durchsucht

Durchsuche Prozess 'AdaptiveSleepService.exe' - '27' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'taskhostex.exe' - '48' Modul(e) wurden durchsucht

Durchsuche Prozess 'Explorer.EXE' - '208' Modul(e) wurden durchsucht

Durchsuche Prozess 'GoogleUpdate.exe' - '50' Modul(e) wurden durchsucht

Durchsuche Prozess 'armsvc.exe' - '27' Modul(e) wurden durchsucht

Durchsuche Prozess 'avguard.exe' - '99' Modul(e) wurden durchsucht

Durchsuche Prozess 'AppleMobileDeviceService.exe' - '61' Modul(e) wurden durchsucht

Durchsuche Prozess 'adminservice.exe' - '27' Modul(e) wurden durchsucht

Durchsuche Prozess 'mDNSResponder.exe' - '28' Modul(e) wurden durchsucht

Durchsuche Prozess 'dts_apo_service.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'dashost.exe' - '27' Modul(e) wurden durchsucht

Durchsuche Prozess 'mfevtps.exe' - '25' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht

Durchsuche Prozess 'mbam.exe' - '82' Modul(e) wurden durchsucht

Durchsuche Prozess 'TODDSrv.exe' - '18' Modul(e) wurden durchsucht

Durchsuche Prozess 'mfefire.exe' - '34' Modul(e) wurden durchsucht

Durchsuche Prozess 'TecoService.exe' - '49' Modul(e) wurden durchsucht

Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht

Durchsuche Prozess 'wmiprvse.exe' - '56' Modul(e) wurden durchsucht

Durchsuche Prozess 'unsecapp.exe' - '23' Modul(e) wurden durchsucht

Durchsuche Prozess 'SearchIndexer.exe' - '65' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '32' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'Apoint.exe' - '53' Modul(e) wurden durchsucht

Durchsuche Prozess 'TCrdMain_Win8.exe' - '57' Modul(e) wurden durchsucht

Durchsuche Prozess 'TecoResident.exe' - '38' Modul(e) wurden durchsucht

Durchsuche Prozess 'AmIcoSinglun64.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'ApMsgFwd.exe' - '24' Modul(e) wurden durchsucht

Durchsuche Prozess 'readLM.exe' - '38' Modul(e) wurden durchsucht

Durchsuche Prozess 'ToshibaServiceStation.exe' - '101' Modul(e) wurden durchsucht

Durchsuche Prozess 'iTunesHelper.exe' - '74' Modul(e) wurden durchsucht

Durchsuche Prozess 'avgnt.exe' - '96' Modul(e) wurden durchsucht

Durchsuche Prozess 'Apntex.exe' - '26' Modul(e) wurden durchsucht

Durchsuche Prozess 'conhost.exe' - '16' Modul(e) wurden durchsucht

Durchsuche Prozess 'HidFind.exe' - '21' Modul(e) wurden durchsucht

Durchsuche Prozess 'iPodService.exe' - '32' Modul(e) wurden durchsucht

Durchsuche Prozess 'TMachInfo.exe' - '47' Modul(e) wurden durchsucht

Durchsuche Prozess 'TPCHSrv.exe' - '40' Modul(e) wurden durchsucht

Durchsuche Prozess 'TPCHWMsg.exe' - '42' Modul(e) wurden durchsucht

Durchsuche Prozess 'Toshiba.Tempro.UI.CommonNotifier.exe' - '87' Modul(e) wurden durchsucht

Durchsuche Prozess 'MOM.exe' - '80' Modul(e) wurden durchsucht

Durchsuche Prozess 'CCC.exe' - '227' Modul(e) wurden durchsucht

Durchsuche Prozess 'thunderbird.exe' - '139' Modul(e) wurden durchsucht

Durchsuche Prozess 'pdf24.exe' - '49' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '124' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '75' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'SearchProtocolHost.exe' - '44' Modul(e) wurden durchsucht

Durchsuche Prozess 'chrome.exe' - '60' Modul(e) wurden durchsucht

Durchsuche Prozess 'SearchFilterHost.exe' - '39' Modul(e) wurden durchsucht

Durchsuche Prozess 'avcenter.exe' - '105' Modul(e) wurden durchsucht

Durchsuche Prozess 'avscan.exe' - '106' Modul(e) wurden durchsucht

Durchsuche Prozess 'update.exe' - '59' Modul(e) wurden durchsucht

Durchsuche Prozess 'updrgui.exe' - '48' Modul(e) wurden durchsucht

Durchsuche Prozess 'vssvc.exe' - '39' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '30' Modul(e) wurden durchsucht

Durchsuche Prozess 'update.exe' - '49' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '8' Modul(e) wurden durchsucht

Durchsuche Prozess 'wininit.exe' - '15' Modul(e) wurden durchsucht

Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht

Durchsuche Prozess 'lsass.exe' - '62' Modul(e) wurden durchsucht
 

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:

Die Registry wurde durchsucht ( '1282' Dateien ).
 
 

Der Suchlauf über die ausgewählten Dateien wird begonnen:
 

Beginne mit der Suche in 'C:\' <TI31198700A>

C:\swapfile.sys

  [WARNUNG]   Die Datei konnte nicht geöffnet werden!

C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\setup_fst_de[1].exe

    [0] Archivtyp: Inno Setup

    --> {pf}\fst_de_19\fst_de_19.exe

        [FUND]      Enthält Erkennungsmuster der Adware ADWARE/EoRezo.Gen

        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

    --> {localappdata}\fst_de_19\upfst_de_19.exe

        [FUND]      Enthält Erkennungsmuster der Adware ADWARE/EoRezo.BB.98

        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

    --> {pf}\fst_de_19\freeSoftToday_widget.exe

        [FUND]      Enthält Erkennungsmuster der Adware ADWARE/EoRezo.A.514

        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\GenesisInstaller[1].exe

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/Graftor.138672.5

C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\OptimizerPro[1].exe

  [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen2

C:\Users\Name\AppData\Local\Temp\genesisinstaller.exe

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/Graftor.138672.5

C:\Users\Name\AppData\Local\Temp\optimizerpro.exe

  [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen2

C:\Users\Name\AppData\Local\Temp\optprosetup.exe

    [0] Archivtyp: Inno Setup

    --> {app}\OptProCrash.dll

        [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen2

        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden

C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.P6f9a5e83#\fa80abba40aa22e55e8f602e8c38c775\Microsoft.PowerShell.Security.Activities.ni.dll

  [FUND]      Ist das Trojanische Pferd TR/Trash.Gen
 

Beginne mit der Desinfektion:

C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.P6f9a5e83#\fa80abba40aa22e55e8f602e8c38c775\Microsoft.PowerShell.Security.Activities.ni.dll

  [FUND]      Ist das Trojanische Pferd TR/Trash.Gen

  [WARNUNG]   Die Datei wurde ignoriert.

C:\Users\Name\AppData\Local\Temp\optprosetup.exe

  [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen2

  [WARNUNG]   Die Datei wurde ignoriert.

C:\Users\Name\AppData\Local\Temp\optimizerpro.exe

  [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen2

  [WARNUNG]   Die Datei wurde ignoriert.

C:\Users\Name\AppData\Local\Temp\genesisinstaller.exe

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/Graftor.138672.5

  [WARNUNG]   Die Datei wurde ignoriert.

C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\OptimizerPro[1].exe

  [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen2

  [WARNUNG]   Die Datei wurde ignoriert.

C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\RKUW25LB\GenesisInstaller[1].exe

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/Graftor.138672.5

  [WARNUNG]   Die Datei wurde ignoriert.

C:\Users\Name\AppData\Local\Microsoft\Windows\INetCache\IE\ILWFWK32\setup_fst_de[1].exe

  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/EoRezo.A.514

  [WARNUNG]   Die Datei wurde ignoriert.
 
 

Ende des Suchlaufs: Montag, 28. Juli 2014  20:43

Benötigte Zeit:  2:41:02 Stunde(n)
 

Der Suchlauf wurde vollständig durchgeführt.
 

  44755 Verzeichnisse wurden überprüft

 402554 Dateien wurden geprüft

      9 Viren bzw. unerwünschte Programme wurden gefunden

      0 Dateien wurden als verdächtig eingestuft

      0 Dateien wurden gelöscht

      0 Viren bzw. unerwünschte Programme wurden repariert

      0 Dateien wurden in die Quarantäne verschoben

      0 Dateien wurden umbenannt

      1 Dateien konnten nicht durchsucht werden

 402544 Dateien ohne Befall

   8243 Archive wurden durchsucht

     12 Warnungen

      0 Hinweise

     88 Objekte wurden beim Rootkitscan durchsucht

      0 Versteckte Objekte wurden gefunden

HAst Du die Temps geleert?

meinst du dieses?

C:\temp

Wenn ja: dort sind drei Dateien vorhanden. Soll ich diese löschen?