Hi schrauber,
alle Scans sind durchgeführt. Hier die Logfiles:
MBAM: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 22.10.2014
Suchlauf-Zeit: 20:44:44
Logdatei: mbam.txt
Administrator: Ja
Version: 2.00.3.1025
Malware Datenbank: v2014.10.22.08
Rootkit Datenbank: v2014.10.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Chris
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 407720
Verstrichene Zeit: 14 Min, 16 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(Keine schädliche Elemente erkannt)
Module: 0
(Keine schädliche Elemente erkannt)
Registrierungsschlüssel: 1
PUP.Optional.Softonic.A, HKU\S-1-5-21-3461466893-888975716-1916642457-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\softonicToolbar, In Quarantäne, [7848e235285454e248e9b791fc07f010],
Registrierungswerte: 0
(Keine schädliche Elemente erkannt)
Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)
Ordner: 8
PUP.Optional.OpenCandy, C:\Users\Chris\AppData\Roaming\OpenCandy, In Quarantäne, [97292ee97efe65d18c4303ec679b57a9],
PUP.Optional.OpenCandy, C:\Users\Chris\AppData\Roaming\OpenCandy\D5E769DD8C24442D96EC40DF12959BC8, In Quarantäne, [97292ee97efe65d18c4303ec679b57a9],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\components, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SystemSpeedup, C:\Users\Chris\AppData\Roaming\systweak\ssd, In Quarantäne, [c6fa72a5ed8fbb7b8ae0cd3b35ce847c],
Dateien: 94
PUP.Optional.OpenCandy.A, C:\Users\Chris\AppData\Roaming\OpenCandy\D5E769DD8C24442D96EC40DF12959BC8\Setupsft_chr_p1v7.exe, In Quarantäne, [b0103ed9ccb05dd9a46153a806fe53ad],
PUP.Optional.Solimba, C:\Users\Chris\Downloads\Ccleaner.exe, In Quarantäne, [10b061b60f6dc07641b51f18e61aea16],
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\searchplugins\softonic.xml, In Quarantäne, [5c6473a47ffd6acc260764e4758e857b],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\chrome.manifest, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\install.rdf, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\components\FFDisp.dll, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\dpk.htm, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\hlprs.js, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\loader.xul, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\mtstart.js, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\serp.js, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\softonic.css, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\softonic.xul, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\tmplt.js, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\arwDwn.gif, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\closeo.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\help_16.gif, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\home.gif, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\icon_seperator.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\logo.PNG, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\privecy_16_hot.gif, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\sign.jpg, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\specialoffer.gif, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\tellafriend.gif, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\uninstall.gif, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\ae.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\bg.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\ch.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\cn.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\cz.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\de.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\eg.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\en.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\es.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\fr.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\gr.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\he.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\il.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\it.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\ja.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\jp.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\nl.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\no.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\pl.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\pt.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\ro.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\ru.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\sa.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\se.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\sv.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\tr.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\ua.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SoftTonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com\content\imgs\flgs\us.png, In Quarantäne, [7b451304384462d445e62acd6b97be42],
PUP.Optional.SystemSpeedup, C:\Users\Chris\AppData\Roaming\systweak\ssd\SSDPTstub.exe, In Quarantäne, [c6fa72a5ed8fbb7b8ae0cd3b35ce847c],
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), Ersetzt,[ad13e4336f0d85b19f51b9a4d72e5aa6]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
), Ersetzt,[b10f76a1d2aaf640529e60fddf26aa56]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
*
* If you make changes to this file ), Ersetzt,[dde3bc5bafcde74f955b0b5255b0e51b]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (e.
*
* If you make changes to this file while t), Ersetzt,[2f9137e0d1ab44f20de3a8b59c6929d7]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If y), Ersetzt,[f0d00d0a2557d85ec52b75e850b517e9]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (eferences
/* Do not edit this file.
*
* ), Ersetzt,[dee2eb2caece73c3856bdb8206ff06fa]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
* If ), Ersetzt,[823ecc4b27558caae40c0a5334d1b947]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If), Ersetzt,[635dcb4cd6a67eb8cc240c5161a4cc34]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/
user_pref("accessibility.blockautorefresh", true);
user_pref("accessibility.typeaheadfind", true);
user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("app.update.auto", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1404332924);
user_pref("app.update.lastUpdateTime.background-update-timer", 1404331993);
user), Ersetzt,[823e30e70676b086bf3125389f6613ed]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (e.background-update-timer", 1404331993);
user_pref("app.upd), Ersetzt,[952b1afdcbb139fd11dfcc914abbbc44]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file.
*
* If you make chan), Ersetzt,[99274fc8057771c590603a2390757c84]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (rences
/* Do not edit this file.
*
* If you m), Ersetzt,[aa16cb4c5a22d06632be15484abbe818]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (es
/* Do not edit this file.
*
* If you make changes to this file whi), Ersetzt,[18a8f522d7a5c6705b951746e520d62a]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (s file.
*
* If you make changes to this ), Ersetzt,[5a66ba5d8eee4de9b9372f2e52b334cc]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be ove), Ersetzt,[378920f7cbb147efc62a34299d6851af]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (tion is running,
* the changes will be overwritten when the application exits.
*
* To mak), Ersetzt,[2c94b0672a52d264d41c223b9d68728e]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (you make changes to this file while the application is running,
* the ), Ersetzt,[8f3156c1ef8dac8a925e184559ace51b]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: ( this file.
*
* If you make changes to this fil), Ersetzt,[5c6448cff28ae15558989cc14cb930d0]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make c), Ersetzt,[e9d7b067423a9e98d51bff5e7e87da26]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make changes to this file while the application), Ersetzt,[ebd536e1097300368769d68747beaa56]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (If you make changes to this file while the application is running), Ersetzt,[665a54c385f739fd14dc8fce3ec70df3]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ot edit this file.
*
* If you make changes), Ersetzt,[813f12052d4f3cfaf1ff550854b102fe]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ferences
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwrit), Ersetzt,[3f8123f407753df92dc3d984a065af51]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (n is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/
user_pref("accessibi), Ersetzt,[fac6cb4cbbc14fe7d020c59858adb24e]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (itten when the application exits.
*
* To make a), Ersetzt,[f9c74acd57254ee8bd334c118580b749]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make ), Ersetzt,[c6faa86f4e2e58debe327fde5baafd03]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (s
/* Do not edit this file.
*
* If you m), Ersetzt,[a719be598bf1e74fac4463faae575ea2]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (erences
/* Do not edit this file.
*
*), Ersetzt,[1da340d7cab2300639b78fcee3229c64]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (references
/* Do not edit this file.
*
* I), Ersetzt,[239df5224e2e3ef8658b0e4fa75eef11]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ences
/* Do not edit this file.
*
* If you make changes to this f), Ersetzt,[338d8d8a1666d660c42cc19ca461c63a]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: ( this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when), Ersetzt,[3f816fa8ea9263d3ea061449b055d62a]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ile the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to prefere), Ersetzt,[16aa4acdbfbd290d98584d103dc8c23e]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (lication is running,
* the changes will be overwritten ), Ersetzt,[f8c8a86f74086bcb17d95ffe45c0e917]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (
/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the a), Ersetzt,[dae6fd1abebeac8a00f0c598e71e40c0]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (s running,
* the changes will be overwritten when), Ersetzt,[4878928583f971c55997baa345c01ee2]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (ces
/* Do not edit this file.
*
* If you make changes ), Ersetzt,[358b64b3e09cb87e42ae6cf151b4f907]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (Do not edit this file.
*
* If you make changes t), Ersetzt,[bf0175a20577c175be32075625e0f20e]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=13&cc=&mi=121978d7000000000000002314b77990");), Ersetzt,[1ca464b31b6164d2e61481dcc14436ca]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (er_pref("app.update.lastUpdateTime.background-update-timer", 1404331993);
user_pref("app.update.lastUpdateTime.blocklist-background-update-timer), Ersetzt,[d9e7cb4c7b01c37359a1adb0aa5b08f8]
PUP.Optional.Softonic.A, C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\prefs.js, Gut: (), Schlecht: (dateTime.places-maintenance-timer", 1343692771);
user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1404331873);
user_pref("app.upd), Ersetzt,[e6dada3d1b6140f6a1594d107491916f]
Physische Sektoren: 0
(Keine schädliche Elemente erkannt)
(end)
AdwCleaner: Code:
# AdwCleaner v4.001 - Bericht erstellt am 22/10/2014 um 21:18:20
# DB v2014-10-21.1
# Aktualisiert 20/10/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Chris - CHRIS-VAIO
# Gestartet von : C:\Users\Chris\Desktop\AdwCleaner_4.001.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Chris\AppData\LocalLow\FlagFox
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Chris\AppData\LocalLow\Softonic
Ordner Gelöscht : C:\Users\Chris\AppData\Roaming\Systweak
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\searchplugins\11-suche.xml
Datei Gelöscht : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\user.js
Datei Gelöscht : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{50F7F0BE-31BA-4145-BD8B-6B0DECFED804}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{06E58E5E-F8CB-4049-991E-A41C03BD419E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{43D9E6F0-1776-4897-AE14-ECEDECBAFEC0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5A074B29-F830-49DE-A31B-5BB9D7F6B407}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{DCC70A83-E184-40A3-906B-779AF5E941C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{06E58E5E-F8CB-4049-991E-A41C03BD419E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{43D9E6F0-1776-4897-AE14-ECEDECBAFEC0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5A074B29-F830-49DE-A31B-5BB9D7F6B407}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{DCC70A83-E184-40A3-906B-779AF5E941C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17344
-\\ Mozilla Firefox v
-\\ Google Chrome v37.0.2062.124
*************************
AdwCleaner[R0].txt - [8198 octets] - [22/10/2014 21:14:41]
AdwCleaner[S0].txt - [7864 octets] - [22/10/2014 21:18:20]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7924 octets] ##########
JRT: Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.21.2014:1)
OS: Windows 7 Home Premium x64
Ran by Chris on 22.10.2014 at 21:26:19,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F1CDE91D-3B6C-44B4-BAF8-9719505573B7}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\CodedColor Common
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.10.2014 at 21:31:36,28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-10-2014
Ran by Chris (administrator) on CHRIS-VAIO on 22-10-2014 21:38:30
Running from C:\Users\Chris\Desktop
Loaded Profiles: Chris & UpdatusUser (Available profiles: Chris & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [212480 2010-03-17] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-11-21] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [316784 2010-01-15] (Sony Corporation)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2010-01-21] (Sony Corporation)
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-3461466893-888975716-1916642457-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-06-17] (Google Inc.)
HKU\S-1-5-21-3461466893-888975716-1916642457-1001\...\MountPoints2: {faa2d1b3-e211-11e2-803a-f07bcbdfce16} - D:\Setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [MOBK] -> {3c3f3c1a-9153-7c05-f938-622e7003894d} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll (McAfee, Inc.)
ShellIconOverlayIdentifiers: [MOBK2] -> {e6ea1d7d-144e-b977-98c4-84c53c1a69d0} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll (McAfee, Inc.)
ShellIconOverlayIdentifiers: [MOBK3] -> {b4caf489-1eec-c617-49ad-8d7088598c06} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll (McAfee, Inc.)
BootExecute: autocheck autochk *
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SVED&bmod=EU01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKCU - {0166E18D-59B5-46E5-BC35-98170E9AFF8B} URL = hxxp://de.shopping.com/?linkin_id=8056363
SearchScopes: HKCU - {0173D216-15FE-4C55-8059-3FD5417D5B7C} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
SearchScopes: HKCU - {25AC93C8-8AFB-41C2-AE29-951815BFEAA9} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {37838F35-F33B-43FF-966B-6C2F81F29222} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {40FCEB9A-88A3-429D-8D6F-9561273B211F} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.com/search?q={searchTerms}&rlz=1I7SVED_deDE398
SearchScopes: HKCU - {BC2A6D13-9B47-4F6E-A7F1-216142CAD8B2} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {E7DD11D1-255F-4AE5-9338-4EAABADBCC7C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}
SearchScopes: HKCU - {FD42AB9D-6DC3-4D09-B759-0BC1BCAED841} URL = https://de.search.yahoo.com/search?fr=mcafee&type=A011DE649&p={SearchTerms}
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Flagfox -> {A02B5E09-122E-4A2D-B996-D997485B8C9E} -> C:\Users\Chris\AppData\LocalLow\Flagfox\IE\Flagfox.dll No File
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\Sony\MSS\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Chris\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\Extensions\2020Player_IKEA@2020Technologies.com [2012-04-15]
FF Extension: Flagfox - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\Extensions\info@flagfox.net [2012-03-15]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2013-11-13]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2013-11-13]
FF Extension: No Name - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\xy1naqif.default\extensions\ffxtlbra@softonic.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
Chrome:
=======
CHR HomePage: Default -> hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=48&cc=&mi=121978d7000000000000002314b77990
CHR StartupUrls: Default -> "https://www.facebook.com/?ref=logo"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-18]
CHR Extension: (Google-Suche) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-18]
CHR Extension: (SiteAdvisor) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2011-02-08]
CHR Extension: (Google Wallet) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm [2012-03-14]
CHR Extension: (Google Mail) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-18]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2014-10-16]
CHR HKLM-x32\...\Chrome\Extension: [ildldcbkkbkhnjghnbidklpepakbepnd] - C:\Users\Chris\AppData\LocalLow\Flagfox\CHROME\Flagfox.crx [2014-10-16]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [603424 2014-06-12] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
R2 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-11-25] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-11-25] (Sonic Solutions)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2013-11-01] (Intel Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2013-11-01] (Intel Corporation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2010-04-08] (Sony Corporation) [File not signed]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [852336 2010-03-18] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [845312 2010-08-11] (Sony Corporation) [File not signed]
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)
S2 FlagfoxUpdater; "C:\Users\Chris\AppData\LocalLow\Flagfox\IE\FlagfoxUpdater.exe" -service [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 61883; C:\Windows\System32\DRIVERS\61883.sys [60288 2009-07-14] (Microsoft Corporation)
S3 AF9035BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [514144 2009-10-02] (ITETech )
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-22] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
R3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2014-04-18] ()
S3 TVICHW32; C:\Windows\system32\DRIVERS\TVICHW32.SYS [21200 2010-09-21] (EnTech Taiwan)
S3 TVICHW32; C:\Windows\SysWOW64\DRIVERS\TVICHW32.SYS [29536 2010-09-21] (EnTech Taiwan)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-22 21:38 - 2014-10-22 21:38 - 00000000 ____D () C:\Users\Chris\Desktop\FRST-OlderVersion
2014-10-22 21:31 - 2014-10-22 21:31 - 00001429 _____ () C:\Users\Chris\Desktop\JRT.txt
2014-10-22 21:26 - 2014-10-22 21:26 - 00000000 ____D () C:\Windows\ERUNT
2014-10-22 21:24 - 2014-10-22 21:24 - 01706144 _____ (Thisisu) C:\Users\Chris\Downloads\JRT.exe
2014-10-22 21:24 - 2014-10-22 21:24 - 01706144 _____ (Thisisu) C:\Users\Chris\Desktop\JRT.exe
2014-10-22 21:24 - 2014-10-22 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-10-22 21:21 - 2014-10-22 21:21 - 00008092 _____ () C:\Users\Chris\Desktop\AdwCleaner.txt
2014-10-22 21:14 - 2014-10-22 21:18 - 00000000 ____D () C:\AdwCleaner
2014-10-22 21:13 - 2014-10-22 21:12 - 01962496 _____ () C:\Users\Chris\Desktop\AdwCleaner_4.001.exe
2014-10-22 21:12 - 2014-10-22 21:12 - 01962496 _____ () C:\Users\Chris\Downloads\AdwCleaner_4.001.exe
2014-10-22 21:10 - 2014-10-22 21:10 - 00024408 _____ () C:\Users\Chris\Desktop\mbam.txt
2014-10-22 20:43 - 2014-10-22 21:22 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-22 20:42 - 2014-10-22 20:42 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-22 20:42 - 2014-10-22 20:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-22 20:42 - 2014-10-22 20:42 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-22 20:42 - 2014-10-22 20:42 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-22 20:42 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-22 20:42 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-22 20:42 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-22 20:39 - 2014-10-22 20:39 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Chris\Downloads\mbam-setup-2.0.3.1025.exe
2014-10-21 17:59 - 2014-10-21 17:57 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Chris\Desktop\tdsskiller.exe
2014-10-21 17:57 - 2014-10-21 17:57 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Chris\Downloads\tdsskiller.exe
2014-10-21 16:40 - 2014-10-21 16:41 - 00050327 _____ () C:\Users\Chris\Desktop\Addition.txt
2014-10-21 16:38 - 2014-10-22 21:38 - 00028069 _____ () C:\Users\Chris\Desktop\FRST.txt
2014-10-21 16:38 - 2014-10-22 21:38 - 00000000 ____D () C:\FRST
2014-10-21 16:37 - 2014-10-22 21:38 - 02112000 _____ (Farbar) C:\Users\Chris\Desktop\FRST64.exe
2014-10-21 16:35 - 2014-10-21 16:35 - 00000472 _____ () C:\Users\Chris\Desktop\defogger_disable.log
2014-10-21 16:35 - 2014-10-21 16:35 - 00000000 _____ () C:\Users\Chris\defogger_reenable
2014-10-21 16:34 - 2014-10-21 16:34 - 00050477 _____ () C:\Users\Chris\Downloads\Defogger.exe
2014-10-21 16:34 - 2014-10-21 16:34 - 00050477 _____ () C:\Users\Chris\Desktop\Defogger.exe
2014-10-21 14:53 - 2014-10-21 18:02 - 00024731 _____ () C:\Users\Chris\Documents\Lasagne Rezept.odt
2014-10-16 19:37 - 2014-09-29 02:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 19:37 - 2014-08-29 04:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 19:37 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-16 19:37 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-16 19:37 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-16 19:37 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-16 19:37 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-16 19:37 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-16 19:37 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-16 19:37 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-16 19:37 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-16 19:37 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-16 19:37 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-10-16 19:37 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-16 19:37 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 19:37 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-16 19:37 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-16 19:37 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 19:37 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-16 19:37 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 19:36 - 2014-10-10 04:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-16 19:36 - 2014-10-10 04:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-16 19:36 - 2014-10-10 04:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-16 19:36 - 2014-10-07 04:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 19:36 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-16 19:36 - 2014-09-26 00:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 19:36 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-16 19:36 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-16 19:36 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-16 19:36 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-16 19:36 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-16 19:36 - 2014-09-26 00:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 19:36 - 2014-09-19 04:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 19:36 - 2014-09-19 03:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 19:36 - 2014-09-19 03:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 19:36 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-16 19:36 - 2014-09-19 03:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 19:36 - 2014-09-19 03:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 19:36 - 2014-09-19 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 19:36 - 2014-09-19 03:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 19:36 - 2014-09-19 03:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 19:36 - 2014-09-19 03:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 19:36 - 2014-09-19 03:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 19:36 - 2014-09-19 03:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 19:36 - 2014-09-19 03:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 19:36 - 2014-09-19 03:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 19:36 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-16 19:36 - 2014-09-19 03:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 19:36 - 2014-09-19 03:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 19:36 - 2014-09-19 03:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 19:36 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-16 19:36 - 2014-09-19 03:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 19:36 - 2014-09-19 03:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 19:36 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-16 19:36 - 2014-09-19 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 19:36 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-16 19:36 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-16 19:36 - 2014-09-19 03:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 19:36 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-16 19:36 - 2014-09-19 02:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 19:36 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-16 19:36 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-16 19:36 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-16 19:36 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-16 19:36 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-16 19:36 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-16 19:36 - 2014-09-19 02:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 19:36 - 2014-09-19 02:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 19:36 - 2014-09-19 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 19:36 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-16 19:36 - 2014-09-19 02:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 19:36 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-16 19:36 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-16 19:36 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-16 19:36 - 2014-09-19 02:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 19:36 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-16 19:36 - 2014-09-19 01:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 19:36 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-16 19:36 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-16 19:33 - 2014-09-18 04:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 19:33 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-16 19:32 - 2014-09-13 03:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-16 19:32 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-16 19:32 - 2014-09-05 04:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 19:32 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-16 19:32 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 19:32 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-16 19:32 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 19:32 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 19:32 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 19:32 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 19:32 - 2014-07-17 04:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 19:32 - 2014-07-17 04:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 19:32 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-16 19:32 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-16 19:32 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-16 19:32 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 19:32 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 11:03 - 2014-10-15 11:03 - 00000418 _____ () C:\Users\Chris\Downloads\GDA-ORGAcheck 15-10-2014 (1).gda
2014-10-15 11:02 - 2014-10-15 11:02 - 00000418 _____ () C:\Users\Chris\Downloads\GDA-ORGAcheck 15-10-2014.gda
2014-10-01 14:48 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 14:48 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-30 08:10 - 2014-09-30 08:10 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk
2014-09-29 08:02 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-29 08:02 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-22 21:44 - 2014-09-22 21:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-09-22 21:43 - 2014-09-22 21:44 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-22 21:43 - 2014-09-22 21:44 - 00000000 ____D () C:\Program Files\iTunes
2014-09-22 21:43 - 2014-09-22 21:44 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-09-22 21:43 - 2014-09-22 21:43 - 00000000 ____D () C:\Program Files\iPod
2014-09-22 09:51 - 2014-09-22 09:52 - 00000000 ____D () C:\Users\Chris\Documents\2014-09-22 Datensicherung Fotos iPhone
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-22 21:37 - 2010-06-17 07:32 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-22 21:37 - 2010-06-17 07:32 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-22 21:28 - 2009-07-14 06:45 - 00018928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-22 21:28 - 2009-07-14 06:45 - 00018928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-22 21:27 - 2013-02-28 20:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-22 21:25 - 2010-06-17 07:24 - 01166926 _____ () C:\Windows\WindowsUpdate.log
2014-10-22 21:19 - 2014-03-02 18:08 - 00045764 _____ () C:\Windows\PFRO.log
2014-10-22 21:19 - 2014-03-02 18:08 - 00011671 _____ () C:\Windows\setupact.log
2014-10-22 21:19 - 2010-03-26 00:17 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-22 21:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-22 21:10 - 2013-07-21 03:05 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3461466893-888975716-1916642457-1001UA.job
2014-10-22 18:51 - 2010-09-20 21:06 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2939C52E-8CED-4836-BCA9-A203DC71A142}
2014-10-21 21:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-21 16:35 - 2010-09-20 20:57 - 00000000 ____D () C:\Users\Chris
2014-10-17 20:48 - 2009-07-14 06:45 - 00315136 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-17 20:45 - 2014-05-06 22:46 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-16 21:43 - 2013-08-15 22:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-16 21:37 - 2010-09-20 21:48 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-08 16:31 - 2010-06-17 17:19 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-10-08 16:31 - 2010-06-17 17:19 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-10-08 16:31 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-07 20:57 - 2011-10-06 23:48 - 00000000 ____D () C:\Users\Chris\Documents\Bewerbung
2014-10-01 14:39 - 2010-09-20 21:21 - 00000000 ____D () C:\Update
2014-09-30 08:17 - 2010-06-17 07:34 - 00000000 ____D () C:\Program Files\Sony
2014-09-30 08:11 - 2011-04-13 23:58 - 00000000 ____D () C:\Windows\System32\Tasks\Sony Corporation
2014-09-30 08:11 - 2010-03-26 01:44 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-09-30 08:10 - 2010-03-26 00:14 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-30 08:01 - 2014-01-29 15:50 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-30 07:57 - 2013-02-28 20:27 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-29 08:27 - 2013-01-04 12:20 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-29 08:27 - 2011-12-20 09:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-22 14:26 - 2011-11-07 20:57 - 00000000 ____D () C:\Program Files\Common Files\McAfee
Some content of TEMP:
====================
C:\Users\Chris\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Chris\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Chris\AppData\Local\Temp\Quarantine.exe
C:\Users\Chris\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-16 21:11
==================== End Of Log ============================
--- --- --- |
TDSSKiller.exe und speichere diese Datei auf dem Desktop
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
