| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
17.09.2013, 23:49
| #1 |
| |  Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) Hallo, seit Kurzem tauchen überall Werbe-PopUps auf allen möglichen Seiten auf, auch, wenn ich gerade nichts gemacht/geklickt habe. Darunter finden sich zum Beispiel folgende: 1. „Machen Sie einen kostenlosen Windows-Scan, um FEHLER zu beheben" 2. „Potentielle Spyware wurde auf Ihrem System erkannt. … … jetzt beheben“ 3. „Wichtige Nachricht - Reparieren Sie Ihren PC“ 4. „In Ihrem System wurde eine Spyware entdeckt … … „ 5. „WARNUNG – Der erweiterte Systemschutz hat 2 Element gefunden. Wir empfehlen dringend, diese umgehend zu löschen. Jetzt bereinigen“ 6. „Es steht Ihnen nur noch sehr wenig Speicherplatz zur Verfügung. Um freien Speicherplatz zu schaffen, müssen Sie Ihre WindowsErrors reparieren – Repair Windows Errors" ---------------------------------------------------------------------------------------- defogger_disable by jpshortstuff (23.02.10.1) Log created at 23:37 on 17/09/2013 (Annie) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 03 Ran by Annie (administrator) on ANNIE-PC on 17-09-2013 23:40:12 Running from C:\Users\Annie\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\windows\system32\atiesrxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (AMD) C:\windows\system32\atieclxx.exe (ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\Synchredible\synchredible.exe () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe () C:\Program Files (x86)\spotimote\spotimote.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Huawei Technologies Co., Ltd.) C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager\ouc.exe (Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Huawei Technologies Co., Ltd.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe () C:\Users\Annie\Downloads\Defogger.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated) HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-11-21] (Lenovo) HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2011-11-21] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-11-21] (Lenovo(beijing) Limited) HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-11-21] (Google Inc.) HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung) HKCU\...\Run: [Easy Driver Pro] - C:\Users\Annie\Downloads\Easy Driver Pro\DPLauncher.exe [147272 2012-04-30] (Probit Software) HKCU\...\Run: [EA Core] - "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung) HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung) HKCU\...\Run: [Facebook Update] - C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-14] (Facebook Inc.) HKCU\...\Run: [spotimote] - C:\Program Files (x86)\spotimote\spotimote.exe [2103344 2013-01-16] () HKCU\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.) HKCU\...\Run: [NTRedirect] - C:\windows\SysWOW64\rundll32.exe "C:\Users\Annie\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run MountPoints2: {0a44ab87-0b5c-11e3-acfd-dc0ea1676e3b} - E:\AutoRun.exe MountPoints2: {34faa313-01f9-11e3-bb61-dc0ea1676e3b} - E:\AutoRun.exe MountPoints2: {34faa386-01f9-11e3-bb61-dc0ea1676e3b} - E:\AutoRun.exe HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-10] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [536576 2010-01-15] (Vimicro) HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.) HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.) HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-11-21] (Lenovo) HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.) HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2013-08-21] (Huawei Technologies Co., Ltd.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) AppInit_DLLs-x32: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll [2700768 2013-09-13] () Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984 HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984 HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/ URLSearchHook: (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984 BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: DealPly Shopping - {9cf699ca-2174-4ed8-bec1-ba82095edce0} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default FF user.js: detected! => C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\user.js FF NewTab: user_pref("browser.newtab.url", ""); FF Homepage: https://www.google.com/ FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Annie\Downloads\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd) FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Annie\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Lyrics Seeker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\133 FF Extension: personas - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\personas@christopher.beard.xpi FF Extension: youtubeunblocker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\youtubeunblocker@unblocker.yt.xpi FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore FF HKCU\...\Firefox\Extensions: [{72273571-743d-427e-a1c1-0538fbc2ddd3}] - C:\Program Files (x86)\LyricsSeeker\133.xpi FF Extension: No Name - C:\Program Files (x86)\LyricsSeeker\133.xpi Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (DealPly Shopping) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi\3.5.0.0_0 CHR Extension: (Coupons Malibu) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnofepcmbghfcimfbjicplikedjcnalm\2.0.1.9 CHR Extension: (\x4c\x79\x72\x69\x63\x73\x20\x53\x65\x65\x6b\x65\x72) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133 CHR HKLM\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Annie\AppData\Roaming\BabSolution\CR\Delta.crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx CHR HKLM-x32\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx CHR HKLM-x32\...\Chrome\Extension: [lgoiojnjnacbjngolldkokokgpcjbgjj] - C:\Program Files (x86)\LyricsSeeker\133.crx ==================== Services (Whitelisted) ================= S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-21] (Adobe Systems) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-08-10] (Advanced Micro Devices, Inc.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG) R2 BitGuard; C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3029472 2013-09-13] () S2 dealplylive; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-24] (DealPly Technologies Ltd) S3 dealplylivem; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-24] (DealPly Technologies Ltd) S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [x] ==================== Drivers (Whitelisted) ==================== R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-08-20] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-21] (Avira Operations GmbH & Co. KG) S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-08-20] () S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2010-12-21] (MCCI Corporation) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228224 2010-10-21] (Vimicro Corporation) R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation) U3 BcmSqlStartupSvc; U2 CLKMSVC10_3A60B698; U2 CLKMSVC10_C3B3B687; U2 DriverService; U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.) U2 IAStorDataMgrSvc; U2 iATAgentService; U2 idealife Update Service; U3 IGRS; U2 IviRegMgr; U2 nvUpdatusService; U2 Oasis2Service; U2 PCCarerService; U2 ReadyComm.DirectRouter; U2 RichVideo; U2 RtLedService; U2 SeaPort; U2 SoftwareService; U2 Stereo Service; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST 2013-09-17 23:36 - 2013-09-17 23:36 - 01950524 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe 2013-09-17 23:33 - 2013-09-17 23:37 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log 2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable 2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe 2013-09-17 23:16 - 2013-09-17 23:24 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-09-17 23:15 - 2013-09-17 23:16 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2013-09-17 23:14 - 2013-09-17 23:15 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe 2013-09-17 17:53 - 2013-09-17 17:53 - 97949955 _____ C:\windows\SysWOW64\阮㝙ངŒ 2013-09-17 11:53 - 2013-09-17 11:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{42E754A7-67B4-49F8-81B1-A051F01D4D4F} 2013-09-16 13:05 - 2013-09-16 13:05 - 00000000 ____D C:\Users\Annie\AppData\Local\{FF1D48D8-C587-4D66-BC8F-532C70DCEAC9} 2013-09-15 13:51 - 2013-09-15 13:51 - 00000000 ____D C:\Users\Annie\AppData\Local\{A513517A-7BC2-4E9C-858D-AC191E481289} 2013-09-14 23:59 - 2013-09-14 23:59 - 00000000 ____D C:\Users\Annie\AppData\Local\{66ED8044-1A59-4EA5-8DDD-6095592C3A94} 2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle 2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe 2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe 2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe 2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll 2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java 2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Local\{9B6CD9B9-A6D3-4DB5-9C91-991F28529389} 2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\ProgramData\BitGuard 2013-09-13 13:48 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-09-13 13:48 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-09-13 13:48 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-09-13 13:48 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-09-13 13:48 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-09-13 13:48 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-09-13 13:48 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-09-13 13:48 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-09-13 13:48 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-09-13 13:48 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-09-13 13:48 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-09-13 13:48 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-09-13 13:48 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2013-09-13 13:48 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe 2013-09-13 13:28 - 2013-09-13 13:29 - 00000000 ____D C:\Users\Annie\AppData\Local\{6C59E847-641E-46FA-833D-7C5C0FF43036} 2013-09-12 13:55 - 2013-09-17 13:45 - 00000388 _____ C:\windows\Tasks\Lyrics Seeker Update.job 2013-09-12 13:55 - 2013-09-12 13:56 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker 2013-09-12 13:55 - 2013-09-12 13:55 - 00003036 _____ C:\windows\System32\Tasks\Lyrics Seeker Update 2013-09-12 13:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2013-09-12 13:27 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys 2013-09-12 13:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2013-09-12 13:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2013-09-12 13:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll 2013-09-12 13:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll 2013-09-12 13:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll 2013-09-12 13:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll 2013-09-12 13:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll 2013-09-12 13:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll 2013-09-12 13:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe 2013-09-12 13:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe 2013-09-12 13:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll 2013-09-12 13:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll 2013-09-12 13:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll 2013-09-12 13:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe 2013-09-12 13:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe 2013-09-12 13:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe 2013-09-12 13:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll 2013-09-12 13:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe 2013-09-12 13:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe 2013-09-12 13:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-09-12 13:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-09-12 13:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2013-09-12 13:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll 2013-09-12 13:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2013-09-12 13:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll 2013-09-12 13:20 - 2013-09-12 13:20 - 00000000 ____D C:\Users\Annie\AppData\Local\{07616BF8-8974-491F-831D-57C7DDE6977B} 2013-09-11 13:09 - 2013-09-11 13:09 - 00000000 ____D C:\Users\Annie\AppData\Local\{CEDD2B7C-0215-4321-8F9D-B43A43AB1E21} 2013-09-10 14:13 - 2013-09-10 14:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{B6205571-1031-42E6-B3DB-F45810F01049} 2013-09-09 13:12 - 2013-09-09 13:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{9ADABC2B-FB12-454E-86BD-59159DE777AD} 2013-09-08 20:41 - 2013-09-08 20:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{1C3B0BA4-9BB4-49C6-B80A-DC78B4D6D114} 2013-09-08 08:41 - 2013-09-08 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{D172EFDA-6B3F-4926-A920-3132B075254D} 2013-09-07 20:00 - 2013-09-07 20:00 - 00000000 ____D C:\Users\Annie\AppData\Local\{090AEA61-D6C1-489C-9E9F-BA0889C83F1A} 2013-09-07 01:44 - 2013-09-07 01:44 - 00000000 ____D C:\Users\Annie\AppData\Local\{7863AD67-A25E-4CCB-8022-E99A77D58762} 2013-09-06 07:49 - 2013-09-06 07:49 - 00000000 ____D C:\Users\Annie\AppData\Local\{DC4747FF-544C-48F8-B6AE-9BB9914D19C4} 2013-09-05 13:46 - 2013-09-05 13:46 - 00000000 ____D C:\Users\Annie\AppData\Local\{D2D3A21A-C767-4C1F-BF16-7C9AB59CF9DB} 2013-09-04 11:11 - 2013-09-04 11:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{E7685CCF-189E-40EC-9222-6358A551B2FB} 2013-09-03 20:42 - 2013-09-03 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{40B75F17-DDAC-4D70-9F97-4FB0AAB0F442} 2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt 2013-09-03 08:41 - 2013-09-03 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{339A7813-F2B4-4DDA-B659-B39B8C87BFD3} 2013-09-02 16:10 - 2013-09-02 16:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{4E3BF912-B8C1-4A41-AB21-3E4127B5F32C} 2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx 2013-08-29 13:11 - 2013-08-29 13:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{51FC3DE8-0E08-4681-817A-52D0C80CF707} 2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt 2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt 2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Annie\AppData\Local\{A840E7D3-FCC3-46A5-B926-AFF28EFDFDF7} 2013-08-27 13:13 - 2013-08-27 13:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{7A4CFE1A-F442-4D74-9139-F2A655586CC2} 2013-08-26 21:19 - 2013-08-26 21:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CBC1ABA0-9E7E-4522-9587-7375AF10574A} 2013-08-26 09:19 - 2013-09-04 11:12 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys 2013-08-26 09:18 - 2013-08-26 09:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{78E5F678-E156-49EC-B25E-624F4284061F} 2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe 2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker 2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo 2013-08-25 20:05 - 2013-09-17 12:20 - 00000112 _____ C:\Users\Annie\AppData\Roaming\WB.CFG 2013-08-25 20:05 - 2013-09-17 12:20 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT 2013-08-25 20:02 - 2013-08-25 20:17 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov 2013-08-25 20:02 - 2013-08-25 20:05 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov 2013-08-25 19:53 - 2013-08-25 19:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{0EFD7009-B75D-42A4-86C4-5735FC287F21} 2013-08-24 14:06 - 2013-09-17 23:11 - 00000904 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-08-24 14:06 - 2013-09-17 15:58 - 00000900 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job 2013-08-24 14:06 - 2013-08-24 14:06 - 00003900 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-24 14:06 - 2013-08-24 14:06 - 00003648 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore 2013-08-24 14:06 - 2013-08-24 14:06 - 00003388 _____ C:\windows\System32\Tasks\EPUpdater 2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Users\Annie\AppData\Roaming\BabSolution 2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Program Files (x86)\Delta 2013-08-24 14:05 - 2013-09-17 23:05 - 00000290 _____ C:\windows\Tasks\Dealply.job 2013-08-24 14:05 - 2013-09-17 23:05 - 00000286 _____ C:\windows\Tasks\DSite.job 2013-08-24 14:05 - 2013-09-12 13:55 - 00000000 ____D C:\Program Files (x86)\LyriXeeker 2013-08-24 14:05 - 2013-08-24 14:05 - 00003366 _____ C:\windows\System32\Tasks\DealPlyUpdate 2013-08-24 14:05 - 2013-08-24 14:05 - 00003230 _____ C:\windows\System32\Tasks\Dealply 2013-08-24 14:05 - 2013-08-24 14:05 - 00003226 _____ C:\windows\System32\Tasks\DSite 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\DSite 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dealply 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Babylon 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Local\DealPlyLive 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\DealPlyLive 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\Babylon 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPlyLive 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPly 2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI 2013-08-24 09:57 - 2013-09-17 13:10 - 00000000 ___RD C:\Users\Annie\Dropbox 2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk 2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-08-24 09:51 - 2013-09-17 21:58 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox 2013-08-24 09:43 - 2013-08-24 09:46 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe 2013-08-24 09:36 - 2013-08-24 09:39 - 00000000 ____D C:\Users\Annie\AppData\Local\{33A90813-A2EE-49A3-81F6-C9A66AB698AB} 2013-08-22 22:48 - 2013-08-22 22:48 - 00000000 ____D C:\Users\Annie\AppData\Local\{945C9112-0679-4A4A-A788-1232AA19D78F} 2013-08-22 22:17 - 2013-08-22 22:17 - 00000000 ____D C:\Users\Annie\AppData\Local\{0A2516D9-F55D-4A1C-A73B-EE2793C921CF} 2013-08-22 21:05 - 2013-08-22 21:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Avira 2013-08-22 21:02 - 2013-08-22 21:02 - 00000000 ____D C:\Users\Annie\AppData\Local\{C690950D-812C-416C-ABC1-881842A4C0CC} 2013-08-22 20:59 - 2013-08-22 20:59 - 00001994 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-08-22 20:58 - 2013-09-04 11:12 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys 2013-08-22 20:58 - 2013-09-04 11:12 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys 2013-08-22 20:58 - 2013-08-22 20:59 - 00000000 ____D C:\ProgramData\Avira 2013-08-22 20:58 - 2013-08-22 20:58 - 00000000 ____D C:\Program Files (x86)\Avira 2013-08-22 20:58 - 2013-08-21 21:20 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys 2013-08-22 20:23 - 2013-08-22 20:23 - 00000000 ____D C:\Users\Annie\AppData\Local\{40AEEE72-B491-4967-990A-0D456E2786E6} 2013-08-21 20:42 - 2013-08-21 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{E773580B-4FC8-49B4-9F1B-445556FED42A} 2013-08-21 20:07 - 2013-08-21 20:22 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager 2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile 2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Program Files (x86)\T-Mobile 2013-08-21 20:03 - 2009-10-21 17:16 - 00243200 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbnet.sys 2013-08-21 20:03 - 2009-10-12 15:23 - 00114304 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbdev.sys 2013-08-21 20:03 - 2009-09-10 15:31 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys 2013-08-21 20:03 - 2008-10-09 13:52 - 00294912 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\bminstall.dll 2013-08-21 20:03 - 2008-10-09 13:51 - 00126976 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\bmdumpd.bin 2013-08-21 20:03 - 2008-10-09 13:50 - 00022528 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\Drivers\BMLoad.sys 2013-08-21 20:03 - 2008-10-09 13:50 - 00018816 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\Drivers\tcpipBM.sys 2013-08-21 20:03 - 2008-02-11 17:05 - 00719360 _____ (Microsoft Corporation) C:\windows\SysWOW64\bmutil.dll 2013-08-21 20:03 - 2008-02-11 17:05 - 00008464 _____ (Microsoft Corporation) C:\windows\SysWOW64\sporder.dll 2013-08-21 20:03 - 2007-08-09 04:10 - 00029696 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys 2013-08-21 08:42 - 2013-08-21 08:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{43572B26-4886-49B0-8472-C9D1DB742817} 2013-08-20 15:19 - 2013-08-20 15:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{E9038588-06F4-41DD-A60D-415678B56571} 2013-08-19 21:14 - 2013-08-19 21:14 - 00000000 ____D C:\Users\Annie\AppData\Local\{AACCFD28-BC3E-4EB1-9638-2219F1B2819A} 2013-08-19 20:31 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL 2013-08-19 20:31 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL 2013-08-19 20:31 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2013-08-19 20:31 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2013-08-19 20:31 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2013-08-19 20:31 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2013-08-19 20:31 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2013-08-19 20:31 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll 2013-08-19 20:31 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll 2013-08-19 20:31 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2013-08-19 20:31 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2013-08-19 20:31 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll 2013-08-19 20:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll 2013-08-19 20:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll 2013-08-19 20:31 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2013-08-19 20:31 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys ==================== One Month Modified Files and Folders ======= 2013-09-17 23:40 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-17 23:40 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST 2013-09-17 23:37 - 2013-09-17 23:33 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log 2013-09-17 23:36 - 2013-09-17 23:36 - 01950524 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe 2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable 2013-09-17 23:33 - 2012-05-09 16:06 - 00000000 ____D C:\Users\Annie 2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe 2013-09-17 23:24 - 2013-09-17 23:16 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-09-17 23:24 - 2012-05-09 16:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2013-09-17 23:20 - 2011-11-21 22:41 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-17 23:17 - 2012-09-29 11:45 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Spotify 2013-09-17 23:16 - 2013-09-17 23:15 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2013-09-17 23:15 - 2013-09-17 23:14 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe 2013-09-17 23:11 - 2013-08-24 14:06 - 00000904 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job 2013-09-17 23:05 - 2013-08-24 14:05 - 00000290 _____ C:\windows\Tasks\Dealply.job 2013-09-17 23:05 - 2013-08-24 14:05 - 00000286 _____ C:\windows\Tasks\DSite.job 2013-09-17 22:59 - 2012-05-09 16:06 - 02070762 _____ C:\FaceProv.log 2013-09-17 22:36 - 2013-02-14 20:31 - 00000928 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job 2013-09-17 21:58 - 2013-08-24 09:51 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox 2013-09-17 21:20 - 2011-11-21 22:41 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-17 19:36 - 2013-02-14 20:31 - 00000906 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job 2013-09-17 18:38 - 2011-11-21 13:38 - 00699682 _____ C:\windows\system32\perfh007.dat 2013-09-17 18:38 - 2011-11-21 13:38 - 00149790 _____ C:\windows\system32\perfc007.dat 2013-09-17 18:38 - 2009-07-14 07:13 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI 2013-09-17 17:53 - 2013-09-17 17:53 - 97949955 _____ C:\windows\SysWOW64\阮㝙ངŒ 2013-09-17 17:38 - 2011-11-21 22:03 - 01374208 _____ C:\windows\WindowsUpdate.log 2013-09-17 16:53 - 2012-05-09 16:11 - 00000000 ____D C:\Users\Annie\AppData\Local\Google 2013-09-17 16:06 - 2012-12-06 18:05 - 00000000 ____D C:\Users\Annie\Documents\Songtexte 2013-09-17 16:01 - 2011-11-21 22:53 - 00000000 ____D C:\ProgramData\VeriFace 2013-09-17 15:58 - 2013-08-24 14:06 - 00000900 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job 2013-09-17 13:45 - 2013-09-12 13:55 - 00000388 _____ C:\windows\Tasks\Lyrics Seeker Update.job 2013-09-17 13:10 - 2013-08-24 09:57 - 00000000 ___RD C:\Users\Annie\Dropbox 2013-09-17 12:20 - 2013-08-25 20:05 - 00000112 _____ C:\Users\Annie\AppData\Roaming\WB.CFG 2013-09-17 12:20 - 2013-08-25 20:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT 2013-09-17 11:53 - 2013-09-17 11:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{42E754A7-67B4-49F8-81B1-A051F01D4D4F} 2013-09-16 13:05 - 2013-09-16 13:05 - 00000000 ____D C:\Users\Annie\AppData\Local\{FF1D48D8-C587-4D66-BC8F-532C70DCEAC9} 2013-09-15 13:51 - 2013-09-15 13:51 - 00000000 ____D C:\Users\Annie\AppData\Local\{A513517A-7BC2-4E9C-858D-AC191E481289} 2013-09-14 23:59 - 2013-09-14 23:59 - 00000000 ____D C:\Users\Annie\AppData\Local\{66ED8044-1A59-4EA5-8DDD-6095592C3A94} 2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle 2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe 2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe 2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe 2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll 2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java 2013-09-14 13:27 - 2013-05-22 22:40 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll 2013-09-14 13:27 - 2013-05-22 22:40 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll 2013-09-14 13:18 - 2011-11-21 23:04 - 01136741 _____ C:\windows\system32\fastboot.set 2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-09-14 11:45 - 2010-11-21 05:47 - 00279432 _____ C:\windows\PFRO.log 2013-09-14 11:45 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-09-14 11:45 - 2009-07-14 06:51 - 00062046 _____ C:\windows\setupact.log 2013-09-14 11:45 - 2009-07-14 06:45 - 00309312 _____ C:\windows\system32\FNTCACHE.DAT 2013-09-14 10:26 - 2012-05-09 16:53 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater 2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Local\{9B6CD9B9-A6D3-4DB5-9C91-991F28529389} 2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\ProgramData\BitGuard 2013-09-14 10:25 - 2012-05-09 16:53 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2013-09-14 10:25 - 2012-05-09 16:53 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-13 13:48 - 2013-07-21 12:15 - 00000000 ____D C:\windows\system32\MRT 2013-09-13 13:41 - 2012-07-19 14:53 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-09-13 13:29 - 2013-09-13 13:28 - 00000000 ____D C:\Users\Annie\AppData\Local\{6C59E847-641E-46FA-833D-7C5C0FF43036} 2013-09-12 20:56 - 2012-05-30 20:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Skype 2013-09-12 19:35 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Annie\AppData\Local\Spotify 2013-09-12 13:56 - 2013-09-12 13:55 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker 2013-09-12 13:55 - 2013-09-12 13:55 - 00003036 _____ C:\windows\System32\Tasks\Lyrics Seeker Update 2013-09-12 13:55 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\LyriXeeker 2013-09-12 13:20 - 2013-09-12 13:20 - 00000000 ____D C:\Users\Annie\AppData\Local\{07616BF8-8974-491F-831D-57C7DDE6977B} 2013-09-11 13:09 - 2013-09-11 13:09 - 00000000 ____D C:\Users\Annie\AppData\Local\{CEDD2B7C-0215-4321-8F9D-B43A43AB1E21} 2013-09-10 14:13 - 2013-09-10 14:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{B6205571-1031-42E6-B3DB-F45810F01049} 2013-09-09 15:58 - 2012-06-07 19:33 - 00000000 ____D C:\Users\Annie\AppData\Roaming\vlc 2013-09-09 13:13 - 2013-09-09 13:12 - 00000000 ____D C:\Users\Annie\AppData\Local\{9ADABC2B-FB12-454E-86BD-59159DE777AD} 2013-09-08 20:41 - 2013-09-08 20:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{1C3B0BA4-9BB4-49C6-B80A-DC78B4D6D114} 2013-09-08 19:58 - 2012-09-14 22:07 - 00000000 ____D C:\Users\Annie\Documents\Youcam 2013-09-08 08:41 - 2013-09-08 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{D172EFDA-6B3F-4926-A920-3132B075254D} 2013-09-07 20:00 - 2013-09-07 20:00 - 00000000 ____D C:\Users\Annie\AppData\Local\{090AEA61-D6C1-489C-9E9F-BA0889C83F1A} 2013-09-07 01:44 - 2013-09-07 01:44 - 00000000 ____D C:\Users\Annie\AppData\Local\{7863AD67-A25E-4CCB-8022-E99A77D58762} 2013-09-06 07:49 - 2013-09-06 07:49 - 00000000 ____D C:\Users\Annie\AppData\Local\{DC4747FF-544C-48F8-B6AE-9BB9914D19C4} 2013-09-05 13:46 - 2013-09-05 13:46 - 00000000 ____D C:\Users\Annie\AppData\Local\{D2D3A21A-C767-4C1F-BF16-7C9AB59CF9DB} 2013-09-04 11:12 - 2013-08-26 09:19 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys 2013-09-04 11:12 - 2013-08-22 20:58 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys 2013-09-04 11:12 - 2013-08-22 20:58 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys 2013-09-04 11:11 - 2013-09-04 11:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{E7685CCF-189E-40EC-9222-6358A551B2FB} 2013-09-03 20:42 - 2013-09-03 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{40B75F17-DDAC-4D70-9F97-4FB0AAB0F442} 2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt 2013-09-03 08:41 - 2013-09-03 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{339A7813-F2B4-4DDA-B659-B39B8C87BFD3} 2013-09-02 16:13 - 2013-09-02 16:10 - 00000000 ____D C:\Users\Annie\AppData\Local\{4E3BF912-B8C1-4A41-AB21-3E4127B5F32C} 2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx 2013-08-29 13:11 - 2013-08-29 13:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{51FC3DE8-0E08-4681-817A-52D0C80CF707} 2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt 2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt 2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Annie\AppData\Local\{A840E7D3-FCC3-46A5-B926-AFF28EFDFDF7} 2013-08-27 13:13 - 2013-08-27 13:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{7A4CFE1A-F442-4D74-9139-F2A655586CC2} 2013-08-26 21:19 - 2013-08-26 21:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CBC1ABA0-9E7E-4522-9587-7375AF10574A} 2013-08-26 09:19 - 2013-08-26 09:18 - 00000000 ____D C:\Users\Annie\AppData\Local\{78E5F678-E156-49EC-B25E-624F4284061F} 2013-08-25 20:17 - 2013-08-25 20:02 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov 2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe 2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker 2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo 2013-08-25 20:05 - 2013-08-25 20:02 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov 2013-08-25 19:53 - 2013-08-25 19:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{0EFD7009-B75D-42A4-86C4-5735FC287F21} 2013-08-24 14:06 - 2013-08-24 14:06 - 00003900 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA 2013-08-24 14:06 - 2013-08-24 14:06 - 00003648 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore 2013-08-24 14:06 - 2013-08-24 14:06 - 00003388 _____ C:\windows\System32\Tasks\EPUpdater 2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Users\Annie\AppData\Roaming\BabSolution 2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Program Files (x86)\Delta 2013-08-24 14:06 - 2013-05-26 11:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-24 14:05 - 2013-08-24 14:05 - 00003366 _____ C:\windows\System32\Tasks\DealPlyUpdate 2013-08-24 14:05 - 2013-08-24 14:05 - 00003230 _____ C:\windows\System32\Tasks\Dealply 2013-08-24 14:05 - 2013-08-24 14:05 - 00003226 _____ C:\windows\System32\Tasks\DSite 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\DSite 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dealply 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Babylon 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Local\DealPlyLive 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\DealPlyLive 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\Babylon 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPlyLive 2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPly 2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI 2013-08-24 12:25 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache 2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk 2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-08-24 09:46 - 2013-08-24 09:43 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe 2013-08-24 09:39 - 2013-08-24 09:36 - 00000000 ____D C:\Users\Annie\AppData\Local\{33A90813-A2EE-49A3-81F6-C9A66AB698AB} 2013-08-22 22:48 - 2013-08-22 22:48 - 00000000 ____D C:\Users\Annie\AppData\Local\{945C9112-0679-4A4A-A788-1232AA19D78F} 2013-08-22 22:17 - 2013-08-22 22:17 - 00000000 ____D C:\Users\Annie\AppData\Local\{0A2516D9-F55D-4A1C-A73B-EE2793C921CF} 2013-08-22 21:05 - 2013-08-22 21:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Avira 2013-08-22 21:02 - 2013-08-22 21:02 - 00000000 ____D C:\Users\Annie\AppData\Local\{C690950D-812C-416C-ABC1-881842A4C0CC} 2013-08-22 20:59 - 2013-08-22 20:59 - 00001994 _____ C:\Users\Public\Desktop\Avira Control Center.lnk 2013-08-22 20:59 - 2013-08-22 20:58 - 00000000 ____D C:\ProgramData\Avira 2013-08-22 20:58 - 2013-08-22 20:58 - 00000000 ____D C:\Program Files (x86)\Avira 2013-08-22 20:52 - 2012-05-09 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-22 20:23 - 2013-08-22 20:23 - 00000000 ____D C:\Users\Annie\AppData\Local\{40AEEE72-B491-4967-990A-0D456E2786E6} 2013-08-21 21:20 - 2013-08-22 20:58 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys 2013-08-21 20:42 - 2013-08-21 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{E773580B-4FC8-49B4-9F1B-445556FED42A} 2013-08-21 20:22 - 2013-08-21 20:07 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager 2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile 2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Program Files (x86)\T-Mobile 2013-08-21 08:42 - 2013-08-21 08:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{43572B26-4886-49B0-8472-C9D1DB742817} 2013-08-20 15:19 - 2013-08-20 15:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{E9038588-06F4-41DD-A60D-415678B56571} 2013-08-19 21:14 - 2013-08-19 21:14 - 00000000 ____D C:\Users\Annie\AppData\Local\{AACCFD28-BC3E-4EB1-9638-2219F1B2819A} 2013-08-19 20:34 - 2011-11-21 22:41 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-19 20:22 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF Some content of TEMP: ==================== C:\Users\Annie\AppData\Local\Temp\AskSLib.dll C:\Users\Annie\AppData\Local\Temp\DataCard_Setup64.exe C:\Users\Annie\AppData\Local\Temp\drm_dyndata_7390006.dll C:\Users\Annie\AppData\Local\Temp\EAD2A2B.exe C:\Users\Annie\AppData\Local\Temp\EAD6F2.exe C:\Users\Annie\AppData\Local\Temp\EAD8555.exe C:\Users\Annie\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe C:\Users\Annie\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe C:\Users\Annie\AppData\Local\Temp\LyriXtmp.exe C:\Users\Annie\AppData\Local\Temp\SkypeSetup.exe C:\Users\Annie\AppData\Local\Temp\UninstallEADM.dll C:\Users\Annie\AppData\Local\Temp\_is8A16.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-24 12:17 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2013 03 Ran by Annie at 2013-09-17 23:43:09 Running from C:\Users\Annie\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) Adobe Bridge 1.0 (x32 Version: 001.000.001) Adobe Common File Installer (x32 Version: 1.00.001) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168) Adobe Help Center 1.0 (x32 Version: 1.0.1) Adobe Photoshop CS2 (x32 Version: 9.0) Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7) Adobe Stock Photos 1.0 (x32 Version: 1.0.1) AGEIA PhysX v6.12.02 (x32 Version: 6.12.02) AMD APP SDK Runtime (Version: 2.4.650.9) AMD Fuel (Version: 2011.0810.604.8985) AMD Media Foundation Decoders (Version: 1.0.60810.0551) AMD VISION Engine Control Center (x32 Version: 2011.0810.604.8985) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.33) ATI AVIVO64 Codecs (Version: 11.6.0.10810) ATI Catalyst Install Manager (Version: 3.0.829.0) Audacity 2.0.2 (x32 Version: 2.0.2) Avira Free Antivirus (x32 Version: 13.0.0.4052) Benutzerhandbuch (x32 Version: 1.0.0.6) BitGuard (x32) Brother MFL-Pro Suite MFC-J220 (x32 Version: 1.0.3.0) CardRecoveryPro 2.1.5 (x32 Version: 2.1.5) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0810.604.8985) Catalyst Control Center InstallProxy (x32 Version: 2011.0810.604.8985) Catalyst Control Center Localization All (x32 Version: 2011.0810.604.8985) Catalyst Control Center Profiles Mobile (x32 Version: 2011.0810.604.8985) CCC Help Chinese Standard (x32 Version: 2011.0810.0603.8985) CCC Help Chinese Traditional (x32 Version: 2011.0810.0603.8985) CCC Help Czech (x32 Version: 2011.0810.0603.8985) CCC Help Danish (x32 Version: 2011.0810.0603.8985) CCC Help Dutch (x32 Version: 2011.0810.0603.8985) CCC Help English (x32 Version: 2011.0810.0603.8985) CCC Help Finnish (x32 Version: 2011.0810.0603.8985) CCC Help French (x32 Version: 2011.0810.0603.8985) CCC Help German (x32 Version: 2011.0810.0603.8985) CCC Help Greek (x32 Version: 2011.0810.0603.8985) CCC Help Hungarian (x32 Version: 2011.0810.0603.8985) CCC Help Italian (x32 Version: 2011.0810.0603.8985) CCC Help Japanese (x32 Version: 2011.0810.0603.8985) CCC Help Korean (x32 Version: 2011.0810.0603.8985) CCC Help Norwegian (x32 Version: 2011.0810.0603.8985) CCC Help Polish (x32 Version: 2011.0810.0603.8985) CCC Help Portuguese (x32 Version: 2011.0810.0603.8985) CCC Help Russian (x32 Version: 2011.0810.0603.8985) CCC Help Spanish (x32 Version: 2011.0810.0603.8985) CCC Help Swedish (x32 Version: 2011.0810.0603.8985) CCC Help Thai (x32 Version: 2011.0810.0603.8985) CCC Help Turkish (x32 Version: 2011.0810.0603.8985) ccc-utility64 (Version: 2011.0810.604.8985) Conexant HD Audio (Version: 8.54.4.50) D3DX10 (x32 Version: 15.4.2368.0902) Dealply (HKCU) DealPly (remove only) (x32 Version: 4.8.7.3) Delta Chrome Toolbar (x32) Delta toolbar (x32 Version: 1.8.24.6) Die Sims™ 3 (x32 Version: 1.28.84) Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38) Die Sims™ 3 Traumsuite-Accessoires (x32 Version: 11.0.84) Dropbox (HKCU Version: 2.0.26) Easy Driver Pro v8.03 (x32 Version: 8.03) Energy Management (x32 Version: 6.0.2.0) Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20810.00) Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287) Free Audio Converter version 5.0.17.903 (x32 Version: 5.0.17.903) Free Studio version 5.7.6.1015 (x32 Version: 5.7.6.1015) Free YouTube to MP3 Converter version 3.11.32.918 (x32 Version: 3.11.32.918) Google Chrome (x32 Version: 7.0.517.43) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752) Google Update Helper (x32 Version: 1.3.21.153) Java 7 Update 40 (x32 Version: 7.0.400) Java Auto Updater (x32 Version: 2.1.9.8) Junk Mail filter update (x32 Version: 15.4.3502.0922) Lenovo EasyCamera (x32 Version: 13.10.1201.1) Lenovo EE Boot Optimizer (Version: 0.0.1.6) Lenovo Games Console (x32 Version: 1.2.6.436) Lenovo OneKey Recovery (Version: 7.0.1628) Lenovo OneKey Recovery (x32 Version: 7.0.1628) Lenovo YouCam (x32 Version: 3.1.3728) Lenovo_Wireless_Driver (x32 Version: 1.02.01) Lyrics Seeker (x32) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709) Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709) Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727) Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727) Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.0.30717.9005) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60) Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0) Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0) Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60) Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60) Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60) Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60) Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1) Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01) Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727) Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727) Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1) Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727) Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727) Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727.42) Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727) Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727) Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0) Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) Mozilla Thunderbird 17.0.2 (x86 de) (x32 Version: 17.0.2) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MyFreeCodec (HKCU) OpenOffice.org 3.4 (x32 Version: 3.4.9590) Origin (x32 Version: 8.6.0.357) PC Inspector smart recovery (x32 Version: 4.50) Pflanzen gegen Zombies (x32) Picasa 3 (x32 Version: 3.9) PixiePack Codec Pack (x32 Version: 1.1.1200.0) Power2Go (x32 Version: 5.6.0.7303) PowerXpressHybrid (x32 Version: 1.00.0000) RAD Video Tools (x32) Radiotracker (x32 Version: 6.2.13700.0) Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10003) Samsung Kies (x32 Version: 2.3.0.12035_16) SAMSUNG USB Driver for Mobile Phones (Version: 1.5.16.0) Security Task Manager 1.8d (x32 Version: 1.8d) Sherlock Holmes jagt Arsene Lupin (x32 Version: 1.00.0777) Skype™ 6.6 (x32 Version: 6.6.106) Spotify (HKCU Version: 0.9.1.57.ge7405149) spotimote (x32) Stellar Phoenix Photo Recovery (x32 Version: 4.0.0.0) Steuer 2012 (x32 Version: 20.00.8137) Synaptics Pointing Device Driver (Version: 15.1.12.0) Synchredible v3.3 (x32) T-Mobile Internet Manager (x32 Version: 11.301.05.00.108) Update for (KB2504637) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219) Update for Video Converter (HKCU) UserGuide (x32 Version: 1.0.0.6) VeriFace (x32 Version: 4.0.0.1224) VLC media player 2.0.1 (x32 Version: 2.0.1) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Software Development Kit (x32 Version: 8.59.25584) Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584) Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584) Windows-Treiberpaket - Lenovo (ACPIVPC) System (12/02/2010 6.1.0.1) (Version: 12/02/2010 6.1.0.1) ==================== Restore Points ========================= 22-08-2013 18:23:38 Windows Update 13-09-2013 11:29:34 Windows Update 14-09-2013 11:25:12 Installed Java 7 Update 40 17-09-2013 21:20:15 "DealPly Shopping for Internet Explorer" deinstallieren ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {082E157F-5398-47F8-8F92-5CD736FB9B6A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-21] (Google Inc.) Task: {08BE3DB5-DB5B-46F0-AF09-299E2DA407D0} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-14] (Facebook Inc.) Task: {092153E9-E06D-4250-9F6B-7E90B8E8A864} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24] (DealPly Technologies Ltd) Task: {21373232-9745-4D27-BBE4-96E5D324077A} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24] (DealPly Technologies Ltd) Task: {2C556F06-4B1F-49DD-98BD-F854DEDDCAA4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {37D06662-4D79-4B6B-8BB4-85803E67DC36} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation) Task: {4395AB2D-3E42-4A2B-9871-E8EB2BF53A92} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation) Task: {48BD04CE-8082-444C-9395-5E55A978D7F5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-21] (Google Inc.) Task: {58A47011-756C-40EA-8409-F5CAD13F9F50} - System32\Tasks\Dealply => C:\Users\Annie\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe [2013-04-12] () Task: {598B19A2-60D0-4BAF-A43E-01CE90107799} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29] (CyberLink) Task: {80F5A25A-BEEA-4E8C-9C51-5FB89BE448F9} - System32\Tasks\DSite => C:\Users\Annie\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-08-24] () Task: {9ACD51D6-7111-4CD3-BEF5-93A94604A38D} - System32\Tasks\{D9522347-5C5E-42BC-B645-561B12ABBA05} => C:\Users\Annie\Downloads\SMR.exe [2004-06-25] (Convar Deutschland GmbH) Task: {9BD31EDE-397E-4E1D-AE5F-DF64767F477C} - System32\Tasks\DealPlyUpdate => C:\Program Task: {A1721149-30CD-49CB-A189-726E36B6189B} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-14] (Facebook Inc.) Task: {A7FEAEBC-2A88-4C2D-9437-5C8C35039FA8} - System32\Tasks\Synchredible-Annie => C:\Program Files (x86)\ASCOMP Software\Synchredible\synchredible.exe [2012-04-23] (ASCOMP Software GmbH) Task: {ACC51A7D-C08E-4839-98BA-4DB16F794410} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation) Task: {B872E241-4255-457F-ABAC-B7FB202A3AC3} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-14] (Adobe Systems Incorporated) Task: {C0BD36B3-7F12-476A-B4B5-52382B5B7C80} - System32\Tasks\EPUpdater => C:\Users\Annie\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] () Task: {CC871D11-9FCE-4F4F-8558-1395A069EF24} - System32\Tasks\Lyrics Seeker Update => C:\Program Files (x86)\LyricsSeeker\Lupdate.exe [2013-09-11] () Task: {CF0E3FED-86E6-437E-9C60-E6E3490A695E} - System32\Tasks\{A48FC5D5-0D17-418B-B784-437586D4EDF1} => C:\Program Files (x86)\Electronic Arts\Die Sims 3 Traumsuite-Accessoires\Game\Bin\Sims3Launcher.exe [2011-10-24] (Electronic Arts, Inc.) Task: {F4299E30-71A1-47B8-8BFB-7AF461D0417B} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1960928456-1631978861-405587205-1002 => C:\Windows\System32\portabledeviceapi.dll [2010-11-21] (Microsoft Corporation) Task: {FD93DC1B-A7DE-4E21-93DC-3C4101028BE2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\Dealply.job => C:\Users\Annie\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE Task: C:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe Task: C:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe Task: C:\windows\Tasks\DSite.job => C:\Users\Annie\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\Lyrics Seeker Update.job => C:\Program Files (x86)\LyricsSeeker\Lupdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-10-13 16:32 - 2011-11-21 23:07 - 00029088 _____ (TODO: <Company name>) C:\Program Files (x86)\Lenovo\Energy Management\BatteryTestDLL.dll 2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\imaadp32.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\msg711.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\msgsm32.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\msadp32.acm 2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm 2013-06-05 19:17 - 2013-06-05 19:17 - 00164016 _____ (Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll 2011-11-21 22:53 - 2011-11-21 22:53 - 01508192 _____ () C:\windows\system32\IcnOvrly.dll 2011-11-21 22:30 - 2010-09-03 07:43 - 00400168 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll 2011-11-21 22:30 - 2010-09-03 07:44 - 00221480 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll 2008-12-20 05:20 - 2011-11-21 23:06 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll 2008-12-20 05:20 - 2011-11-21 23:06 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll 2009-01-20 15:51 - 2009-01-20 15:51 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll 2011-08-10 07:59 - 2011-08-10 07:59 - 00036864 _____ (AMD) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\FUEL.Implementation.dll 2011-08-10 07:59 - 2011-08-10 07:59 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2011-03-14 16:21 - 2011-03-14 16:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2011-08-10 08:02 - 2011-08-10 08:02 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2013-09-14 10:25 - 2013-09-13 17:00 - 02700768 _____ () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll 2013-01-16 13:37 - 2013-01-16 13:37 - 00084528 _____ () C:\Program Files (x86)\spotimote\msgdll.dll 2012-03-28 22:12 - 2012-03-28 22:12 - 00307200 _____ ( MarkAny.) C:\Program Files (x86)\Samsung\Kies\External\MACSSDK.dll 2012-09-13 11:45 - 2012-09-13 11:45 - 01477840 _____ () C:\Program Files (x86)\spotimote\libspotify.dll 2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Annie\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll 2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Annie\AppData\Roaming\Dropbox\bin\libcef.dll 2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Annie\AppData\Roaming\Dropbox\bin\icudt.dll 2011-11-21 22:53 - 2011-11-21 22:53 - 00013664 _____ () C:\Program Files (x86)\Lenovo\VeriFace\ChooseLang.dll 2012-03-31 04:36 - 2012-12-20 11:40 - 00250368 _____ (Windows (R) Codename Longhorn DDK provider) C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\UPNPDevice_Kies.dll 2012-05-30 09:27 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2013-09-14 10:25 - 2013-09-14 10:25 - 16244616 ____R (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_174.ocx 2013-05-26 11:44 - 2013-08-20 15:34 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-06-05 19:17 - 2013-06-05 19:17 - 00130736 _____ (Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll 2013-09-11 18:05 - 2013-09-11 18:05 - 16177544 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll 2012-12-11 20:09 - 2012-12-11 20:09 - 14586296 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll 2012-04-13 12:04 - 2012-04-13 12:04 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2012-04-13 12:00 - 2012-04-13 12:00 - 00180224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\libcurl.dll 2012-04-13 12:00 - 2012-04-13 12:00 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog) (User: ) Description: TWN BrtTWN: [2013/09/16 15:34:11.477]: [00004884]: Initialize TwdsMain Class failed! Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog) (User: ) Description: TWN BrtTWN: [2013/09/16 15:34:11.475]: [00004884]: ##### Fatal ERROR!! Create STI-device failed! ##### Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog) (User: ) Description: TWN BrtTWN: [2013/09/16 15:34:11.472]: [00004884]: GetDeviceList Failed! pStiInfo = 0x0.. Error: (09/16/2013 01:05:56 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (09/14/2013 11:59:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637 Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0xc34 Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0 Pfad der fehlerhaften Anwendung: rundll32.exe1 Pfad des fehlerhaften Moduls: rundll32.exe2 Berichtskennung: rundll32.exe3 Error: (09/14/2013 11:46:44 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/13/2013 01:39:06 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51dba4e7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000004e4e4 ID des fehlerhaften Prozesses: 0xc8c Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0 Pfad der fehlerhaften Anwendung: wmprph.exe1 Pfad des fehlerhaften Moduls: wmprph.exe2 Berichtskennung: wmprph.exe3 Error: (09/09/2013 01:23:08 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (09/07/2013 11:10:48 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018 Name des fehlerhaften Moduls: jscript.dll, Version: 5.8.9200.16660, Zeitstempel: 0x51f1e1a5 Ausnahmecode: 0xc000041d Fehleroffset: 0x0000000000025130 ID des fehlerhaften Prozesses: 0x1c64 Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0 Pfad der fehlerhaften Anwendung: wmprph.exe1 Pfad des fehlerhaften Moduls: wmprph.exe2 Berichtskennung: wmprph.exe3 Error: (09/07/2013 11:10:43 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018 Name des fehlerhaften Moduls: jscript.dll, Version: 5.8.9200.16660, Zeitstempel: 0x51f1e1a5 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000025130 ID des fehlerhaften Prozesses: 0x1c64 Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0 Pfad der fehlerhaften Anwendung: wmprph.exe1 Pfad des fehlerhaften Moduls: wmprph.exe2 Berichtskennung: wmprph.exe3 System errors: ============= Error: (09/15/2013 01:51:40 PM) (Source: DCOM) (User: ) Description: {F48FC5B2-094A-44C7-B48C-289738C9582D} Error: (09/15/2013 01:51:39 PM) (Source: DCOM) (User: ) Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69} Error: (09/15/2013 01:51:38 PM) (Source: DCOM) (User: ) Description: {89DAE4CD-9F17-4980-902A-99BA84A8F5C8} Error: (09/15/2013 01:51:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Google Software Updater" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 900000 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/15/2013 01:51:16 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Google Update Service (gupdate)" wurde mit folgendem Fehler beendet: %%-2147467243 Error: (09/15/2013 01:51:16 PM) (Source: Service Control Manager) (User: ) Description: Dienst "DealPly Live-Dienst (dealplylive)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (09/14/2013 11:42:27 AM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (09/13/2013 03:12:22 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR20 gefunden. Error: (09/13/2013 03:12:21 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR20 gefunden. Error: (09/13/2013 03:11:21 PM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR20 gefunden. Microsoft Office Sessions: ========================= Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog)(User: ) Description: TWNBrtTWN: [2013/09/16 15:34:11.477]: [00004884]: Initialize TwdsMain Class failed! Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog)(User: ) Description: TWNBrtTWN: [2013/09/16 15:34:11.475]: [00004884]: ##### Fatal ERROR!! Create STI-device failed! ##### Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog)(User: ) Description: TWNBrtTWN: [2013/09/16 15:34:11.472]: [00004884]: GetDeviceList Failed! pStiInfo = 0x0.. Error: (09/16/2013 01:05:56 PM) (Source: Windows Backup)(User: ) Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (09/14/2013 11:59:08 PM) (Source: Application Error)(User: ) Description: rundll32.exe6.1.7600.163854a5bc637ole32.dll6.1.7601.175144ce7b96fc000000500039342c3401ceb13c0cd4c97cC:\Windows\SysWOW64\rundll32.exeC:\windows\syswow6 4\ole32.dlle0834a2d-1d88-11e3-b407-dc0ea1676e3b Error: (09/14/2013 11:46:44 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/13/2013 01:39:06 PM) (Source: Application Error)(User: ) Description: wmprph.exe12.0.7600.163854a5bd018ntdll.dll6.1.7601.1820551dba4e7c0000005000000000004e4e4c8c01ceac13eea949abC:\Program Files\Windows Media Player\wmprph.exeC:\windows\SYSTEM32\ntdll.dll184bf1fd-1c69-11e3-bc18-dc0ea1676e3b Error: (09/09/2013 01:23:08 PM) (Source: Windows Backup)(User: ) Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (09/07/2013 11:10:48 PM) (Source: Application Error)(User: ) Description: wmprph.exe12.0.7600.163854a5bd018jscript.dll5.8.9200.1666051f1e1a5c000041d00000000000251301c6401ceac0d34277b52C:\Program Files\Windows Media Player\wmprph.exeC:\windows\system32\jscript.dllf7565888-1801-11e3-bc18-dc0ea1676e3b Error: (09/07/2013 11:10:43 PM) (Source: Application Error)(User: ) Description: wmprph.exe12.0.7600.163854a5bd018jscript.dll5.8.9200.1666051f1e1a5c000000500000000000251301c6401ceac0d34277b52C:\Program Files\Windows Media Player\wmprph.exeC:\windows\system32\jscript.dllf476fb94-1801-11e3-bc18-dc0ea1676e3b ==================== Memory info =========================== Percentage of memory in use: 51% Total physical RAM: 3690.9 MB Available physical RAM: 1786.23 MB Total Pagefile: 7379.99 MB Available Pagefile: 4912 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:421.81 GB) (Free:158.79 GB) NTFS Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:23.82 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 137973C4) Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=422 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=29 GB) - (Type=OF Extended) Partition 4: (Not Active) - (Size=15 GB) - (Type=12) ==================== End Of Log ============================ GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2013-09-18 00:08:48 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000069 ST950032 rev.0011 465,76GB Running: gmer_2.1.19163.exe; Driver: C:\Users\Annie\AppData\Local\Temp\uglorpod.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544 fffff80002fb5000 40 bytes [FF, FF, FF, FF, 0F, 00, 00, ...] INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 585 fffff80002fb5029 37 bytes [23, C1, 4C, 8D, 04, 40, 49, ...] ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Samsung\Kies\Kies.exe[3900] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 .text C:\Program Files (x86)\spotimote\spotimote.exe[3948] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 .text C:\Program Files (x86)\USB Camera\VM331_STI.EXE[4124] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 .text C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe[4144] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 .text C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4284] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 ? C:\windows\system32\mssprxy.dll [4284] entry point in ".rdata" section 0000000070b571e6 .text C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe[4408] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 .text C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe[4656] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 .text C:\Users\Annie\Downloads\gmer_2.1.19163.exe[7868] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80 .text C:\Users\Annie\Downloads\gmer_2.1.19163.exe[7868] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000774c1465 2 bytes [4C, 77] .text C:\Users\Annie\Downloads\gmer_2.1.19163.exe[7868] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000774c14bb 2 bytes [4C, 77] .text ... * 2 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0c6076fc1a13 Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0c6076fc1a13 (not active ControlSet) ---- EOF - GMER 2.1 ---- Ich hoffe ihr könnt mir irgendwie helfen. Schon einmal vielen Dank für die Mühe =) |
|
18.09.2013, 08:39
| #2 | |
| /// the machine /// TB-Ausbilder    | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) hi,
__________________ So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ |
|
18.09.2013, 12:39
| #3 |
| | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) FRST Logfile:
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 03
Ran by Annie (administrator) on ANNIE-PC on 17-09-2013 23:40:12
Running from C:\Users\Annie\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\windows\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\windows\system32\atieclxx.exe
(ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\Synchredible\synchredible.exe
() C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
() C:\Program Files (x86)\spotimote\spotimote.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Huawei Technologies Co., Ltd.) C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager\ouc.exe
(Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Huawei Technologies Co., Ltd.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
() C:\Users\Annie\Downloads\Defogger.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-11-21] (Lenovo)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2011-11-21] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-11-21] (Lenovo(beijing) Limited)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-11-21] (Google Inc.)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKCU\...\Run: [Easy Driver Pro] - C:\Users\Annie\Downloads\Easy Driver Pro\DPLauncher.exe [147272 2012-04-30] (Probit Software)
HKCU\...\Run: [EA Core] - "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKCU\...\Run: [Facebook Update] - C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-14] (Facebook Inc.)
HKCU\...\Run: [spotimote] - C:\Program Files (x86)\spotimote\spotimote.exe [2103344 2013-01-16] ()
HKCU\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.)
HKCU\...\Run: [NTRedirect] - C:\windows\SysWOW64\rundll32.exe "C:\Users\Annie\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run
MountPoints2: {0a44ab87-0b5c-11e3-acfd-dc0ea1676e3b} - E:\AutoRun.exe
MountPoints2: {34faa313-01f9-11e3-bb61-dc0ea1676e3b} - E:\AutoRun.exe
MountPoints2: {34faa386-01f9-11e3-bb61-dc0ea1676e3b} - E:\AutoRun.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [536576 2010-01-15] (Vimicro)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-11-21] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2013-08-21] (Huawei Technologies Co., Ltd.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
AppInit_DLLs-x32: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll [2700768 2013-09-13] ()
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DealPly Shopping - {9cf699ca-2174-4ed8-bec1-ba82095edce0} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default
FF user.js: detected! => C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\user.js
FF NewTab: user_pref("browser.newtab.url", "");
FF Homepage: https://www.google.com/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Annie\Downloads\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Annie\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Lyrics Seeker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\133
FF Extension: personas - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\personas@christopher.beard.xpi
FF Extension: youtubeunblocker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKCU\...\Firefox\Extensions: [{72273571-743d-427e-a1c1-0538fbc2ddd3}] - C:\Program Files (x86)\LyricsSeeker\133.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsSeeker\133.xpi
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (DealPly Shopping) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi\3.5.0.0_0
CHR Extension: (Coupons Malibu) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnofepcmbghfcimfbjicplikedjcnalm\2.0.1.9
CHR Extension: (\x4c\x79\x72\x69\x63\x73\x20\x53\x65\x65\x6b\x65\x72) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133
CHR HKLM\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Annie\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [lgoiojnjnacbjngolldkokokgpcjbgjj] - C:\Program Files (x86)\LyricsSeeker\133.crx
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-21] (Adobe Systems)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-08-10] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 BitGuard; C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3029472 2013-09-13] ()
S2 dealplylive; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-24] (DealPly Technologies Ltd)
S3 dealplylivem; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-08-24] (DealPly Technologies Ltd)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [x]
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-08-20] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-21] (Avira Operations GmbH & Co. KG)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-08-20] ()
S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2010-12-21] (MCCI Corporation)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228224 2010-10-21] (Vimicro Corporation)
R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation)
U3 BcmSqlStartupSvc;
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)
U2 IAStorDataMgrSvc;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U2 Stereo Service;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:36 - 2013-09-17 23:36 - 01950524 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe
2013-09-17 23:33 - 2013-09-17 23:37 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:16 - 2013-09-17 23:24 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:15 - 2013-09-17 23:16 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:14 - 2013-09-17 23:15 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-17 17:53 - 2013-09-17 17:53 - 97949955 _____ C:\windows\SysWOW64\阮㝙ངŒ
2013-09-17 11:53 - 2013-09-17 11:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{42E754A7-67B4-49F8-81B1-A051F01D4D4F}
2013-09-16 13:05 - 2013-09-16 13:05 - 00000000 ____D C:\Users\Annie\AppData\Local\{FF1D48D8-C587-4D66-BC8F-532C70DCEAC9}
2013-09-15 13:51 - 2013-09-15 13:51 - 00000000 ____D C:\Users\Annie\AppData\Local\{A513517A-7BC2-4E9C-858D-AC191E481289}
2013-09-14 23:59 - 2013-09-14 23:59 - 00000000 ____D C:\Users\Annie\AppData\Local\{66ED8044-1A59-4EA5-8DDD-6095592C3A94}
2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle
2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Local\{9B6CD9B9-A6D3-4DB5-9C91-991F28529389}
2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-13 13:48 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-13 13:48 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-13 13:48 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-13 13:28 - 2013-09-13 13:29 - 00000000 ____D C:\Users\Annie\AppData\Local\{6C59E847-641E-46FA-833D-7C5C0FF43036}
2013-09-12 13:55 - 2013-09-17 13:45 - 00000388 _____ C:\windows\Tasks\Lyrics Seeker Update.job
2013-09-12 13:55 - 2013-09-12 13:56 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker
2013-09-12 13:55 - 2013-09-12 13:55 - 00003036 _____ C:\windows\System32\Tasks\Lyrics Seeker Update
2013-09-12 13:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-12 13:27 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-09-12 13:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-12 13:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-12 13:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-12 13:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-12 13:20 - 2013-09-12 13:20 - 00000000 ____D C:\Users\Annie\AppData\Local\{07616BF8-8974-491F-831D-57C7DDE6977B}
2013-09-11 13:09 - 2013-09-11 13:09 - 00000000 ____D C:\Users\Annie\AppData\Local\{CEDD2B7C-0215-4321-8F9D-B43A43AB1E21}
2013-09-10 14:13 - 2013-09-10 14:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{B6205571-1031-42E6-B3DB-F45810F01049}
2013-09-09 13:12 - 2013-09-09 13:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{9ADABC2B-FB12-454E-86BD-59159DE777AD}
2013-09-08 20:41 - 2013-09-08 20:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{1C3B0BA4-9BB4-49C6-B80A-DC78B4D6D114}
2013-09-08 08:41 - 2013-09-08 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{D172EFDA-6B3F-4926-A920-3132B075254D}
2013-09-07 20:00 - 2013-09-07 20:00 - 00000000 ____D C:\Users\Annie\AppData\Local\{090AEA61-D6C1-489C-9E9F-BA0889C83F1A}
2013-09-07 01:44 - 2013-09-07 01:44 - 00000000 ____D C:\Users\Annie\AppData\Local\{7863AD67-A25E-4CCB-8022-E99A77D58762}
2013-09-06 07:49 - 2013-09-06 07:49 - 00000000 ____D C:\Users\Annie\AppData\Local\{DC4747FF-544C-48F8-B6AE-9BB9914D19C4}
2013-09-05 13:46 - 2013-09-05 13:46 - 00000000 ____D C:\Users\Annie\AppData\Local\{D2D3A21A-C767-4C1F-BF16-7C9AB59CF9DB}
2013-09-04 11:11 - 2013-09-04 11:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{E7685CCF-189E-40EC-9222-6358A551B2FB}
2013-09-03 20:42 - 2013-09-03 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{40B75F17-DDAC-4D70-9F97-4FB0AAB0F442}
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-09-03 08:41 - 2013-09-03 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{339A7813-F2B4-4DDA-B659-B39B8C87BFD3}
2013-09-02 16:10 - 2013-09-02 16:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{4E3BF912-B8C1-4A41-AB21-3E4127B5F32C}
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-29 13:11 - 2013-08-29 13:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{51FC3DE8-0E08-4681-817A-52D0C80CF707}
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Annie\AppData\Local\{A840E7D3-FCC3-46A5-B926-AFF28EFDFDF7}
2013-08-27 13:13 - 2013-08-27 13:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{7A4CFE1A-F442-4D74-9139-F2A655586CC2}
2013-08-26 21:19 - 2013-08-26 21:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CBC1ABA0-9E7E-4522-9587-7375AF10574A}
2013-08-26 09:19 - 2013-09-04 11:12 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-08-26 09:18 - 2013-08-26 09:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{78E5F678-E156-49EC-B25E-624F4284061F}
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-09-17 12:20 - 00000112 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-08-25 20:05 - 2013-09-17 12:20 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-08-25 20:02 - 2013-08-25 20:17 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:02 - 2013-08-25 20:05 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-25 19:53 - 2013-08-25 19:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{0EFD7009-B75D-42A4-86C4-5735FC287F21}
2013-08-24 14:06 - 2013-09-17 23:11 - 00000904 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-08-24 14:06 - 2013-09-17 15:58 - 00000900 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-08-24 14:06 - 2013-08-24 14:06 - 00003900 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
2013-08-24 14:06 - 2013-08-24 14:06 - 00003648 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
2013-08-24 14:06 - 2013-08-24 14:06 - 00003388 _____ C:\windows\System32\Tasks\EPUpdater
2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Users\Annie\AppData\Roaming\BabSolution
2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Program Files (x86)\Delta
2013-08-24 14:05 - 2013-09-17 23:05 - 00000290 _____ C:\windows\Tasks\Dealply.job
2013-08-24 14:05 - 2013-09-17 23:05 - 00000286 _____ C:\windows\Tasks\DSite.job
2013-08-24 14:05 - 2013-09-12 13:55 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-24 14:05 - 2013-08-24 14:05 - 00003366 _____ C:\windows\System32\Tasks\DealPlyUpdate
2013-08-24 14:05 - 2013-08-24 14:05 - 00003230 _____ C:\windows\System32\Tasks\Dealply
2013-08-24 14:05 - 2013-08-24 14:05 - 00003226 _____ C:\windows\System32\Tasks\DSite
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\DSite
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dealply
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Babylon
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Local\DealPlyLive
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\Babylon
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPlyLive
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 09:57 - 2013-09-17 13:10 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:51 - 2013-09-17 21:58 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-08-24 09:43 - 2013-08-24 09:46 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
2013-08-24 09:36 - 2013-08-24 09:39 - 00000000 ____D C:\Users\Annie\AppData\Local\{33A90813-A2EE-49A3-81F6-C9A66AB698AB}
2013-08-22 22:48 - 2013-08-22 22:48 - 00000000 ____D C:\Users\Annie\AppData\Local\{945C9112-0679-4A4A-A788-1232AA19D78F}
2013-08-22 22:17 - 2013-08-22 22:17 - 00000000 ____D C:\Users\Annie\AppData\Local\{0A2516D9-F55D-4A1C-A73B-EE2793C921CF}
2013-08-22 21:05 - 2013-08-22 21:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Avira
2013-08-22 21:02 - 2013-08-22 21:02 - 00000000 ____D C:\Users\Annie\AppData\Local\{C690950D-812C-416C-ABC1-881842A4C0CC}
2013-08-22 20:59 - 2013-08-22 20:59 - 00001994 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-22 20:58 - 2013-09-04 11:12 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-08-22 20:58 - 2013-09-04 11:12 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-08-22 20:58 - 2013-08-22 20:59 - 00000000 ____D C:\ProgramData\Avira
2013-08-22 20:58 - 2013-08-22 20:58 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-22 20:58 - 2013-08-21 21:20 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-08-22 20:23 - 2013-08-22 20:23 - 00000000 ____D C:\Users\Annie\AppData\Local\{40AEEE72-B491-4967-990A-0D456E2786E6}
2013-08-21 20:42 - 2013-08-21 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{E773580B-4FC8-49B4-9F1B-445556FED42A}
2013-08-21 20:07 - 2013-08-21 20:22 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Program Files (x86)\T-Mobile
2013-08-21 20:03 - 2009-10-21 17:16 - 00243200 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbnet.sys
2013-08-21 20:03 - 2009-10-12 15:23 - 00114304 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbdev.sys
2013-08-21 20:03 - 2009-09-10 15:31 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys
2013-08-21 20:03 - 2008-10-09 13:52 - 00294912 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\bminstall.dll
2013-08-21 20:03 - 2008-10-09 13:51 - 00126976 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\bmdumpd.bin
2013-08-21 20:03 - 2008-10-09 13:50 - 00022528 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\Drivers\BMLoad.sys
2013-08-21 20:03 - 2008-10-09 13:50 - 00018816 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\Drivers\tcpipBM.sys
2013-08-21 20:03 - 2008-02-11 17:05 - 00719360 _____ (Microsoft Corporation) C:\windows\SysWOW64\bmutil.dll
2013-08-21 20:03 - 2008-02-11 17:05 - 00008464 _____ (Microsoft Corporation) C:\windows\SysWOW64\sporder.dll
2013-08-21 20:03 - 2007-08-09 04:10 - 00029696 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys
2013-08-21 08:42 - 2013-08-21 08:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{43572B26-4886-49B0-8472-C9D1DB742817}
2013-08-20 15:19 - 2013-08-20 15:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{E9038588-06F4-41DD-A60D-415678B56571}
2013-08-19 21:14 - 2013-08-19 21:14 - 00000000 ____D C:\Users\Annie\AppData\Local\{AACCFD28-BC3E-4EB1-9638-2219F1B2819A}
2013-08-19 20:31 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-08-19 20:31 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-08-19 20:31 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-08-19 20:31 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-08-19 20:31 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-19 20:31 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-19 20:31 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-19 20:31 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-19 20:31 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-08-19 20:31 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-19 20:31 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-19 20:31 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-19 20:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-08-19 20:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-08-19 20:31 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-19 20:31 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
==================== One Month Modified Files and Folders =======
2013-09-17 23:40 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-17 23:40 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:37 - 2013-09-17 23:33 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:36 - 2013-09-17 23:36 - 01950524 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:33 - 2012-05-09 16:06 - 00000000 ____D C:\Users\Annie
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:24 - 2013-09-17 23:16 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:24 - 2012-05-09 16:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-17 23:20 - 2011-11-21 22:41 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-17 23:17 - 2012-09-29 11:45 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Spotify
2013-09-17 23:16 - 2013-09-17 23:15 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:15 - 2013-09-17 23:14 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-17 23:11 - 2013-08-24 14:06 - 00000904 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-09-17 23:05 - 2013-08-24 14:05 - 00000290 _____ C:\windows\Tasks\Dealply.job
2013-09-17 23:05 - 2013-08-24 14:05 - 00000286 _____ C:\windows\Tasks\DSite.job
2013-09-17 22:59 - 2012-05-09 16:06 - 02070762 _____ C:\FaceProv.log
2013-09-17 22:36 - 2013-02-14 20:31 - 00000928 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job
2013-09-17 21:58 - 2013-08-24 09:51 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-09-17 21:20 - 2011-11-21 22:41 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-17 19:36 - 2013-02-14 20:31 - 00000906 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job
2013-09-17 18:38 - 2011-11-21 13:38 - 00699682 _____ C:\windows\system32\perfh007.dat
2013-09-17 18:38 - 2011-11-21 13:38 - 00149790 _____ C:\windows\system32\perfc007.dat
2013-09-17 18:38 - 2009-07-14 07:13 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-17 17:53 - 2013-09-17 17:53 - 97949955 _____ C:\windows\SysWOW64\阮㝙ངŒ
2013-09-17 17:38 - 2011-11-21 22:03 - 01374208 _____ C:\windows\WindowsUpdate.log
2013-09-17 16:53 - 2012-05-09 16:11 - 00000000 ____D C:\Users\Annie\AppData\Local\Google
2013-09-17 16:06 - 2012-12-06 18:05 - 00000000 ____D C:\Users\Annie\Documents\Songtexte
2013-09-17 16:01 - 2011-11-21 22:53 - 00000000 ____D C:\ProgramData\VeriFace
2013-09-17 15:58 - 2013-08-24 14:06 - 00000900 _____ C:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-09-17 13:45 - 2013-09-12 13:55 - 00000388 _____ C:\windows\Tasks\Lyrics Seeker Update.job
2013-09-17 13:10 - 2013-08-24 09:57 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-09-17 12:20 - 2013-08-25 20:05 - 00000112 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-09-17 12:20 - 2013-08-25 20:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-09-17 11:53 - 2013-09-17 11:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{42E754A7-67B4-49F8-81B1-A051F01D4D4F}
2013-09-16 13:05 - 2013-09-16 13:05 - 00000000 ____D C:\Users\Annie\AppData\Local\{FF1D48D8-C587-4D66-BC8F-532C70DCEAC9}
2013-09-15 13:51 - 2013-09-15 13:51 - 00000000 ____D C:\Users\Annie\AppData\Local\{A513517A-7BC2-4E9C-858D-AC191E481289}
2013-09-14 23:59 - 2013-09-14 23:59 - 00000000 ____D C:\Users\Annie\AppData\Local\{66ED8044-1A59-4EA5-8DDD-6095592C3A94}
2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle
2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-14 13:27 - 2013-05-22 22:40 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-09-14 13:27 - 2013-05-22 22:40 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-09-14 13:18 - 2011-11-21 23:04 - 01136741 _____ C:\windows\system32\fastboot.set
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-14 11:45 - 2010-11-21 05:47 - 00279432 _____ C:\windows\PFRO.log
2013-09-14 11:45 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-14 11:45 - 2009-07-14 06:51 - 00062046 _____ C:\windows\setupact.log
2013-09-14 11:45 - 2009-07-14 06:45 - 00309312 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-14 10:26 - 2012-05-09 16:53 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\Users\Annie\AppData\Local\{9B6CD9B9-A6D3-4DB5-9C91-991F28529389}
2013-09-14 10:25 - 2013-09-14 10:25 - 00000000 ____D C:\ProgramData\BitGuard
2013-09-14 10:25 - 2012-05-09 16:53 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 10:25 - 2012-05-09 16:53 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-13 13:48 - 2013-07-21 12:15 - 00000000 ____D C:\windows\system32\MRT
2013-09-13 13:41 - 2012-07-19 14:53 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-13 13:29 - 2013-09-13 13:28 - 00000000 ____D C:\Users\Annie\AppData\Local\{6C59E847-641E-46FA-833D-7C5C0FF43036}
2013-09-12 20:56 - 2012-05-30 20:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Skype
2013-09-12 19:35 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Annie\AppData\Local\Spotify
2013-09-12 13:56 - 2013-09-12 13:55 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker
2013-09-12 13:55 - 2013-09-12 13:55 - 00003036 _____ C:\windows\System32\Tasks\Lyrics Seeker Update
2013-09-12 13:55 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-09-12 13:20 - 2013-09-12 13:20 - 00000000 ____D C:\Users\Annie\AppData\Local\{07616BF8-8974-491F-831D-57C7DDE6977B}
2013-09-11 13:09 - 2013-09-11 13:09 - 00000000 ____D C:\Users\Annie\AppData\Local\{CEDD2B7C-0215-4321-8F9D-B43A43AB1E21}
2013-09-10 14:13 - 2013-09-10 14:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{B6205571-1031-42E6-B3DB-F45810F01049}
2013-09-09 15:58 - 2012-06-07 19:33 - 00000000 ____D C:\Users\Annie\AppData\Roaming\vlc
2013-09-09 13:13 - 2013-09-09 13:12 - 00000000 ____D C:\Users\Annie\AppData\Local\{9ADABC2B-FB12-454E-86BD-59159DE777AD}
2013-09-08 20:41 - 2013-09-08 20:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{1C3B0BA4-9BB4-49C6-B80A-DC78B4D6D114}
2013-09-08 19:58 - 2012-09-14 22:07 - 00000000 ____D C:\Users\Annie\Documents\Youcam
2013-09-08 08:41 - 2013-09-08 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{D172EFDA-6B3F-4926-A920-3132B075254D}
2013-09-07 20:00 - 2013-09-07 20:00 - 00000000 ____D C:\Users\Annie\AppData\Local\{090AEA61-D6C1-489C-9E9F-BA0889C83F1A}
2013-09-07 01:44 - 2013-09-07 01:44 - 00000000 ____D C:\Users\Annie\AppData\Local\{7863AD67-A25E-4CCB-8022-E99A77D58762}
2013-09-06 07:49 - 2013-09-06 07:49 - 00000000 ____D C:\Users\Annie\AppData\Local\{DC4747FF-544C-48F8-B6AE-9BB9914D19C4}
2013-09-05 13:46 - 2013-09-05 13:46 - 00000000 ____D C:\Users\Annie\AppData\Local\{D2D3A21A-C767-4C1F-BF16-7C9AB59CF9DB}
2013-09-04 11:12 - 2013-08-26 09:19 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-09-04 11:12 - 2013-08-22 20:58 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-09-04 11:12 - 2013-08-22 20:58 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-09-04 11:11 - 2013-09-04 11:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{E7685CCF-189E-40EC-9222-6358A551B2FB}
2013-09-03 20:42 - 2013-09-03 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{40B75F17-DDAC-4D70-9F97-4FB0AAB0F442}
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-09-03 08:41 - 2013-09-03 08:41 - 00000000 ____D C:\Users\Annie\AppData\Local\{339A7813-F2B4-4DDA-B659-B39B8C87BFD3}
2013-09-02 16:13 - 2013-09-02 16:10 - 00000000 ____D C:\Users\Annie\AppData\Local\{4E3BF912-B8C1-4A41-AB21-3E4127B5F32C}
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-29 13:11 - 2013-08-29 13:11 - 00000000 ____D C:\Users\Annie\AppData\Local\{51FC3DE8-0E08-4681-817A-52D0C80CF707}
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Annie\AppData\Local\{A840E7D3-FCC3-46A5-B926-AFF28EFDFDF7}
2013-08-27 13:13 - 2013-08-27 13:13 - 00000000 ____D C:\Users\Annie\AppData\Local\{7A4CFE1A-F442-4D74-9139-F2A655586CC2}
2013-08-26 21:19 - 2013-08-26 21:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CBC1ABA0-9E7E-4522-9587-7375AF10574A}
2013-08-26 09:19 - 2013-08-26 09:18 - 00000000 ____D C:\Users\Annie\AppData\Local\{78E5F678-E156-49EC-B25E-624F4284061F}
2013-08-25 20:17 - 2013-08-25 20:02 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-08-25 20:02 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-25 19:53 - 2013-08-25 19:53 - 00000000 ____D C:\Users\Annie\AppData\Local\{0EFD7009-B75D-42A4-86C4-5735FC287F21}
2013-08-24 14:06 - 2013-08-24 14:06 - 00003900 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
2013-08-24 14:06 - 2013-08-24 14:06 - 00003648 _____ C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
2013-08-24 14:06 - 2013-08-24 14:06 - 00003388 _____ C:\windows\System32\Tasks\EPUpdater
2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Users\Annie\AppData\Roaming\BabSolution
2013-08-24 14:06 - 2013-08-24 14:06 - 00000000 ____D C:\Program Files (x86)\Delta
2013-08-24 14:06 - 2013-05-26 11:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-24 14:05 - 2013-08-24 14:05 - 00003366 _____ C:\windows\System32\Tasks\DealPlyUpdate
2013-08-24 14:05 - 2013-08-24 14:05 - 00003230 _____ C:\windows\System32\Tasks\Dealply
2013-08-24 14:05 - 2013-08-24 14:05 - 00003226 _____ C:\windows\System32\Tasks\DSite
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\DSite
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dealply
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Babylon
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Local\DealPlyLive
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\ProgramData\Babylon
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPlyLive
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 12:25 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:46 - 2013-08-24 09:43 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
2013-08-24 09:39 - 2013-08-24 09:36 - 00000000 ____D C:\Users\Annie\AppData\Local\{33A90813-A2EE-49A3-81F6-C9A66AB698AB}
2013-08-22 22:48 - 2013-08-22 22:48 - 00000000 ____D C:\Users\Annie\AppData\Local\{945C9112-0679-4A4A-A788-1232AA19D78F}
2013-08-22 22:17 - 2013-08-22 22:17 - 00000000 ____D C:\Users\Annie\AppData\Local\{0A2516D9-F55D-4A1C-A73B-EE2793C921CF}
2013-08-22 21:05 - 2013-08-22 21:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Avira
2013-08-22 21:02 - 2013-08-22 21:02 - 00000000 ____D C:\Users\Annie\AppData\Local\{C690950D-812C-416C-ABC1-881842A4C0CC}
2013-08-22 20:59 - 2013-08-22 20:59 - 00001994 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-08-22 20:59 - 2013-08-22 20:58 - 00000000 ____D C:\ProgramData\Avira
2013-08-22 20:58 - 2013-08-22 20:58 - 00000000 ____D C:\Program Files (x86)\Avira
2013-08-22 20:52 - 2012-05-09 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-22 20:23 - 2013-08-22 20:23 - 00000000 ____D C:\Users\Annie\AppData\Local\{40AEEE72-B491-4967-990A-0D456E2786E6}
2013-08-21 21:20 - 2013-08-22 20:58 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys
2013-08-21 20:42 - 2013-08-21 20:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{E773580B-4FC8-49B4-9F1B-445556FED42A}
2013-08-21 20:22 - 2013-08-21 20:07 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Program Files (x86)\T-Mobile
2013-08-21 08:42 - 2013-08-21 08:42 - 00000000 ____D C:\Users\Annie\AppData\Local\{43572B26-4886-49B0-8472-C9D1DB742817}
2013-08-20 15:19 - 2013-08-20 15:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{E9038588-06F4-41DD-A60D-415678B56571}
2013-08-19 21:14 - 2013-08-19 21:14 - 00000000 ____D C:\Users\Annie\AppData\Local\{AACCFD28-BC3E-4EB1-9638-2219F1B2819A}
2013-08-19 20:34 - 2011-11-21 22:41 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-19 20:22 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
Some content of TEMP:
====================
C:\Users\Annie\AppData\Local\Temp\AskSLib.dll
C:\Users\Annie\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Annie\AppData\Local\Temp\drm_dyndata_7390006.dll
C:\Users\Annie\AppData\Local\Temp\EAD2A2B.exe
C:\Users\Annie\AppData\Local\Temp\EAD6F2.exe
C:\Users\Annie\AppData\Local\Temp\EAD8555.exe
C:\Users\Annie\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe
C:\Users\Annie\AppData\Local\Temp\jre-7u40-windows-i586-iftw.exe
C:\Users\Annie\AppData\Local\Temp\LyriXtmp.exe
C:\Users\Annie\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Annie\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Annie\AppData\Local\Temp\_is8A16.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-24 12:17
==================== End Of Log ============================
--- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2013 03
Ran by Annie at 2013-09-17 23:43:09
Running from C:\Users\Annie\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Bridge 1.0 (x32 Version: 001.000.001)
Adobe Common File Installer (x32 Version: 1.00.001)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.174)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Help Center 1.0 (x32 Version: 1.0.1)
Adobe Photoshop CS2 (x32 Version: 9.0)
Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1)
AGEIA PhysX v6.12.02 (x32 Version: 6.12.02)
AMD APP SDK Runtime (Version: 2.4.650.9)
AMD Fuel (Version: 2011.0810.604.8985)
AMD Media Foundation Decoders (Version: 1.0.60810.0551)
AMD VISION Engine Control Center (x32 Version: 2011.0810.604.8985)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.33)
ATI AVIVO64 Codecs (Version: 11.6.0.10810)
ATI Catalyst Install Manager (Version: 3.0.829.0)
Audacity 2.0.2 (x32 Version: 2.0.2)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Benutzerhandbuch (x32 Version: 1.0.0.6)
BitGuard (x32)
Brother MFL-Pro Suite MFC-J220 (x32 Version: 1.0.3.0)
CardRecoveryPro 2.1.5 (x32 Version: 2.1.5)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0810.604.8985)
Catalyst Control Center InstallProxy (x32 Version: 2011.0810.604.8985)
Catalyst Control Center Localization All (x32 Version: 2011.0810.604.8985)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0810.604.8985)
CCC Help Chinese Standard (x32 Version: 2011.0810.0603.8985)
CCC Help Chinese Traditional (x32 Version: 2011.0810.0603.8985)
CCC Help Czech (x32 Version: 2011.0810.0603.8985)
CCC Help Danish (x32 Version: 2011.0810.0603.8985)
CCC Help Dutch (x32 Version: 2011.0810.0603.8985)
CCC Help English (x32 Version: 2011.0810.0603.8985)
CCC Help Finnish (x32 Version: 2011.0810.0603.8985)
CCC Help French (x32 Version: 2011.0810.0603.8985)
CCC Help German (x32 Version: 2011.0810.0603.8985)
CCC Help Greek (x32 Version: 2011.0810.0603.8985)
CCC Help Hungarian (x32 Version: 2011.0810.0603.8985)
CCC Help Italian (x32 Version: 2011.0810.0603.8985)
CCC Help Japanese (x32 Version: 2011.0810.0603.8985)
CCC Help Korean (x32 Version: 2011.0810.0603.8985)
CCC Help Norwegian (x32 Version: 2011.0810.0603.8985)
CCC Help Polish (x32 Version: 2011.0810.0603.8985)
CCC Help Portuguese (x32 Version: 2011.0810.0603.8985)
CCC Help Russian (x32 Version: 2011.0810.0603.8985)
CCC Help Spanish (x32 Version: 2011.0810.0603.8985)
CCC Help Swedish (x32 Version: 2011.0810.0603.8985)
CCC Help Thai (x32 Version: 2011.0810.0603.8985)
CCC Help Turkish (x32 Version: 2011.0810.0603.8985)
ccc-utility64 (Version: 2011.0810.604.8985)
Conexant HD Audio (Version: 8.54.4.50)
D3DX10 (x32 Version: 15.4.2368.0902)
Dealply (HKCU)
DealPly (remove only) (x32 Version: 4.8.7.3)
Delta Chrome Toolbar (x32)
Delta toolbar (x32 Version: 1.8.24.6)
Die Sims™ 3 (x32 Version: 1.28.84)
Die Sims™ 3 Luxus-Accessoires (x32 Version: 3.0.38)
Die Sims™ 3 Traumsuite-Accessoires (x32 Version: 11.0.84)
Dropbox (HKCU Version: 2.0.26)
Easy Driver Pro v8.03 (x32 Version: 8.03)
Energy Management (x32 Version: 6.0.2.0)
Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20810.00)
Erforderliche Komponenten für SSDT (x32 Version: 11.0.2100.60)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
Free Audio Converter version 5.0.17.903 (x32 Version: 5.0.17.903)
Free Studio version 5.7.6.1015 (x32 Version: 5.7.6.1015)
Free YouTube to MP3 Converter version 3.11.32.918 (x32 Version: 3.11.32.918)
Google Chrome (x32 Version: 7.0.517.43)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Lenovo EasyCamera (x32 Version: 13.10.1201.1)
Lenovo EE Boot Optimizer (Version: 0.0.1.6)
Lenovo Games Console (x32 Version: 1.2.6.436)
Lenovo OneKey Recovery (Version: 7.0.1628)
Lenovo OneKey Recovery (x32 Version: 7.0.1628)
Lenovo YouCam (x32 Version: 3.1.3728)
Lenovo_Wireless_Driver (x32 Version: 1.02.01)
Lyrics Seeker (x32)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727)
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.0.30717.9005)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server 2012 Command Line Utilities (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Data-Tier App Framework (Version: 11.0.2316.0)
Microsoft SQL Server 2012 Data-Tier App Framework (x32 Version: 11.0.2316.0)
Microsoft SQL Server 2012 Express LocalDB (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Native Client (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL Compiler Service (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (Version: 11.0.2100.60)
Microsoft SQL Server 2012 T-SQL Language Service (x32 Version: 11.0.2100.60)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU (Version: 4.0.8876.1)
Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1)
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727.42)
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.2 (x86 de) (x32 Version: 17.0.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyFreeCodec (HKCU)
OpenOffice.org 3.4 (x32 Version: 3.4.9590)
Origin (x32 Version: 8.6.0.357)
PC Inspector smart recovery (x32 Version: 4.50)
Pflanzen gegen Zombies (x32)
Picasa 3 (x32 Version: 3.9)
PixiePack Codec Pack (x32 Version: 1.1.1200.0)
Power2Go (x32 Version: 5.6.0.7303)
PowerXpressHybrid (x32 Version: 1.00.0000)
RAD Video Tools (x32)
Radiotracker (x32 Version: 6.2.13700.0)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10003)
Samsung Kies (x32 Version: 2.3.0.12035_16)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.16.0)
Security Task Manager 1.8d (x32 Version: 1.8d)
Sherlock Holmes jagt Arsene Lupin (x32 Version: 1.00.0777)
Skype™ 6.6 (x32 Version: 6.6.106)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
spotimote (x32)
Stellar Phoenix Photo Recovery (x32 Version: 4.0.0.0)
Steuer 2012 (x32 Version: 20.00.8137)
Synaptics Pointing Device Driver (Version: 15.1.12.0)
Synchredible v3.3 (x32)
T-Mobile Internet Manager (x32 Version: 11.301.05.00.108)
Update for (KB2504637) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219)
Update for Video Converter (HKCU)
UserGuide (x32 Version: 1.0.0.6)
VeriFace (x32 Version: 4.0.0.1224)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Software Development Kit (x32 Version: 8.59.25584)
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584)
Windows-Treiberpaket - Lenovo (ACPIVPC) System (12/02/2010 6.1.0.1) (Version: 12/02/2010 6.1.0.1)
==================== Restore Points =========================
22-08-2013 18:23:38 Windows Update
13-09-2013 11:29:34 Windows Update
14-09-2013 11:25:12 Installed Java 7 Update 40
17-09-2013 21:20:15 "DealPly Shopping for Internet Explorer" deinstallieren
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {082E157F-5398-47F8-8F92-5CD736FB9B6A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-21] (Google Inc.)
Task: {08BE3DB5-DB5B-46F0-AF09-299E2DA407D0} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-14] (Facebook Inc.)
Task: {092153E9-E06D-4250-9F6B-7E90B8E8A864} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24] (DealPly Technologies Ltd)
Task: {21373232-9745-4D27-BBE4-96E5D324077A} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24] (DealPly Technologies Ltd)
Task: {2C556F06-4B1F-49DD-98BD-F854DEDDCAA4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {37D06662-4D79-4B6B-8BB4-85803E67DC36} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {4395AB2D-3E42-4A2B-9871-E8EB2BF53A92} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {48BD04CE-8082-444C-9395-5E55A978D7F5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-21] (Google Inc.)
Task: {58A47011-756C-40EA-8409-F5CAD13F9F50} - System32\Tasks\Dealply => C:\Users\Annie\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {598B19A2-60D0-4BAF-A43E-01CE90107799} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29] (CyberLink)
Task: {80F5A25A-BEEA-4E8C-9C51-5FB89BE448F9} - System32\Tasks\DSite => C:\Users\Annie\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe [2013-08-24] ()
Task: {9ACD51D6-7111-4CD3-BEF5-93A94604A38D} - System32\Tasks\{D9522347-5C5E-42BC-B645-561B12ABBA05} => C:\Users\Annie\Downloads\SMR.exe [2004-06-25] (Convar Deutschland GmbH)
Task: {9BD31EDE-397E-4E1D-AE5F-DF64767F477C} - System32\Tasks\DealPlyUpdate => C:\Program
Task: {A1721149-30CD-49CB-A189-726E36B6189B} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-14] (Facebook Inc.)
Task: {A7FEAEBC-2A88-4C2D-9437-5C8C35039FA8} - System32\Tasks\Synchredible-Annie => C:\Program Files (x86)\ASCOMP Software\Synchredible\synchredible.exe [2012-04-23] (ASCOMP Software GmbH)
Task: {ACC51A7D-C08E-4839-98BA-4DB16F794410} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation)
Task: {B872E241-4255-457F-ABAC-B7FB202A3AC3} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-14] (Adobe Systems Incorporated)
Task: {C0BD36B3-7F12-476A-B4B5-52382B5B7C80} - System32\Tasks\EPUpdater => C:\Users\Annie\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] ()
Task: {CC871D11-9FCE-4F4F-8558-1395A069EF24} - System32\Tasks\Lyrics Seeker Update => C:\Program Files (x86)\LyricsSeeker\Lupdate.exe [2013-09-11] ()
Task: {CF0E3FED-86E6-437E-9C60-E6E3490A695E} - System32\Tasks\{A48FC5D5-0D17-418B-B784-437586D4EDF1} => C:\Program Files (x86)\Electronic Arts\Die Sims 3 Traumsuite-Accessoires\Game\Bin\Sims3Launcher.exe [2011-10-24] (Electronic Arts, Inc.)
Task: {F4299E30-71A1-47B8-8BFB-7AF461D0417B} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1960928456-1631978861-405587205-1002 => C:\Windows\System32\portabledeviceapi.dll [2010-11-21] (Microsoft Corporation)
Task: {FD93DC1B-A7DE-4E21-93DC-3C4101028BE2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\Dealply.job => C:\Users\Annie\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: C:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe
Task: C:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe
Task: C:\windows\Tasks\DSite.job => C:\Users\Annie\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job => C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\Lyrics Seeker Update.job => C:\Program Files (x86)\LyricsSeeker\Lupdate.exe
==================== Loaded Modules (whitelisted) =============
2010-10-13 16:32 - 2011-11-21 23:07 - 00029088 _____ (TODO: <Company name>) C:\Program Files (x86)\Lenovo\Energy Management\BatteryTestDLL.dll
2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\imaadp32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\msg711.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\msgsm32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\msadp32.acm
2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm
2013-06-05 19:17 - 2013-06-05 19:17 - 00164016 _____ (Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
2011-11-21 22:53 - 2011-11-21 22:53 - 01508192 _____ () C:\windows\system32\IcnOvrly.dll
2011-11-21 22:30 - 2010-09-03 07:43 - 00400168 _____ (Synaptics Incorporated) C:\windows\system32\SynCOM.dll
2011-11-21 22:30 - 2010-09-03 07:44 - 00221480 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll
2008-12-20 05:20 - 2011-11-21 23:06 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll
2008-12-20 05:20 - 2011-11-21 23:06 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll
2009-01-20 15:51 - 2009-01-20 15:51 - 00007168 _____ ( ) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll
2011-08-10 07:59 - 2011-08-10 07:59 - 00036864 _____ (AMD) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\FUEL.Implementation.dll
2011-08-10 07:59 - 2011-08-10 07:59 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-03-14 16:21 - 2011-03-14 16:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-08-10 08:02 - 2011-08-10 08:02 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-09-14 10:25 - 2013-09-13 17:00 - 02700768 _____ () C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll
2013-01-16 13:37 - 2013-01-16 13:37 - 00084528 _____ () C:\Program Files (x86)\spotimote\msgdll.dll
2012-03-28 22:12 - 2012-03-28 22:12 - 00307200 _____ ( MarkAny.) C:\Program Files (x86)\Samsung\Kies\External\MACSSDK.dll
2012-09-13 11:45 - 2012-09-13 11:45 - 01477840 _____ () C:\Program Files (x86)\spotimote\libspotify.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Annie\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Annie\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Annie\AppData\Roaming\Dropbox\bin\icudt.dll
2011-11-21 22:53 - 2011-11-21 22:53 - 00013664 _____ () C:\Program Files (x86)\Lenovo\VeriFace\ChooseLang.dll
2012-03-31 04:36 - 2012-12-20 11:40 - 00250368 _____ (Windows (R) Codename Longhorn DDK provider) C:\Program Files (x86)\Samsung\Kies\External\DeviceModules\UPNPDevice_Kies.dll
2012-05-30 09:27 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-09-14 10:25 - 2013-09-14 10:25 - 16244616 ____R (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_174.ocx
2013-05-26 11:44 - 2013-08-20 15:34 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-06-05 19:17 - 2013-06-05 19:17 - 00130736 _____ (Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
2013-09-11 18:05 - 2013-09-11 18:05 - 16177544 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
2012-12-11 20:09 - 2012-12-11 20:09 - 14586296 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll
2012-04-13 12:04 - 2012-04-13 12:04 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2012-04-13 12:00 - 2012-04-13 12:00 - 00180224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\libcurl.dll
2012-04-13 12:00 - 2012-04-13 12:00 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
==================== Alternate Data Streams (whitelisted) ==========
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog) (User: )
Description: TWN BrtTWN: [2013/09/16 15:34:11.477]: [00004884]: Initialize TwdsMain Class failed!
Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog) (User: )
Description: TWN BrtTWN: [2013/09/16 15:34:11.475]: [00004884]: ##### Fatal ERROR!! Create STI-device failed! #####
Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog) (User: )
Description: TWN BrtTWN: [2013/09/16 15:34:11.472]: [00004884]: GetDeviceList Failed! pStiInfo = 0x0..
Error: (09/16/2013 01:05:56 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (09/14/2013 11:59:08 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039342
ID des fehlerhaften Prozesses: 0xc34
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0
Pfad der fehlerhaften Anwendung: rundll32.exe1
Pfad des fehlerhaften Moduls: rundll32.exe2
Berichtskennung: rundll32.exe3
Error: (09/14/2013 11:46:44 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/13/2013 01:39:06 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51dba4e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004e4e4
ID des fehlerhaften Prozesses: 0xc8c
Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0
Pfad der fehlerhaften Anwendung: wmprph.exe1
Pfad des fehlerhaften Moduls: wmprph.exe2
Berichtskennung: wmprph.exe3
Error: (09/09/2013 01:23:08 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (09/07/2013 11:10:48 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018
Name des fehlerhaften Moduls: jscript.dll, Version: 5.8.9200.16660, Zeitstempel: 0x51f1e1a5
Ausnahmecode: 0xc000041d
Fehleroffset: 0x0000000000025130
ID des fehlerhaften Prozesses: 0x1c64
Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0
Pfad der fehlerhaften Anwendung: wmprph.exe1
Pfad des fehlerhaften Moduls: wmprph.exe2
Berichtskennung: wmprph.exe3
Error: (09/07/2013 11:10:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmprph.exe, Version: 12.0.7600.16385, Zeitstempel: 0x4a5bd018
Name des fehlerhaften Moduls: jscript.dll, Version: 5.8.9200.16660, Zeitstempel: 0x51f1e1a5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000025130
ID des fehlerhaften Prozesses: 0x1c64
Startzeit der fehlerhaften Anwendung: 0xwmprph.exe0
Pfad der fehlerhaften Anwendung: wmprph.exe1
Pfad des fehlerhaften Moduls: wmprph.exe2
Berichtskennung: wmprph.exe3
System errors:
=============
Error: (09/15/2013 01:51:40 PM) (Source: DCOM) (User: )
Description: {F48FC5B2-094A-44C7-B48C-289738C9582D}
Error: (09/15/2013 01:51:39 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (09/15/2013 01:51:38 PM) (Source: DCOM) (User: )
Description: {89DAE4CD-9F17-4980-902A-99BA84A8F5C8}
Error: (09/15/2013 01:51:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Software Updater" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 900000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/15/2013 01:51:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde mit folgendem Fehler beendet:
%%-2147467243
Error: (09/15/2013 01:51:16 PM) (Source: Service Control Manager) (User: )
Description: Dienst "DealPly Live-Dienst (dealplylive)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/14/2013 11:42:27 AM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (09/13/2013 03:12:22 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR20 gefunden.
Error: (09/13/2013 03:12:21 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR20 gefunden.
Error: (09/13/2013 03:11:21 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR20 gefunden.
Microsoft Office Sessions:
=========================
Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog)(User: )
Description: TWNBrtTWN: [2013/09/16 15:34:11.477]: [00004884]: Initialize TwdsMain Class failed!
Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog)(User: )
Description: TWNBrtTWN: [2013/09/16 15:34:11.475]: [00004884]: ##### Fatal ERROR!! Create STI-device failed! #####
Error: (09/16/2013 03:34:11 PM) (Source: Brother BrLog)(User: )
Description: TWNBrtTWN: [2013/09/16 15:34:11.472]: [00004884]: GetDeviceList Failed! pStiInfo = 0x0..
Error: (09/16/2013 01:05:56 PM) (Source: Windows Backup)(User: )
Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (09/14/2013 11:59:08 PM) (Source: Application Error)(User: )
Description: rundll32.exe6.1.7600.163854a5bc637ole32.dll6.1.7601.175144ce7b96fc000000500039342c3401ceb13c0cd4c97cC:\Windows\SysWOW64\rundll32.exeC:\windows\syswow64\ole32.dlle0834a2d-1d88-11e3-b407-dc0ea1676e3b
Error: (09/14/2013 11:46:44 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/13/2013 01:39:06 PM) (Source: Application Error)(User: )
Description: wmprph.exe12.0.7600.163854a5bd018ntdll.dll6.1.7601.1820551dba4e7c0000005000000000004e4e4c8c01ceac13eea949abC:\Program Files\Windows Media Player\wmprph.exeC:\windows\SYSTEM32\ntdll.dll184bf1fd-1c69-11e3-bc18-dc0ea1676e3b
Error: (09/09/2013 01:23:08 PM) (Source: Windows Backup)(User: )
Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (09/07/2013 11:10:48 PM) (Source: Application Error)(User: )
Description: wmprph.exe12.0.7600.163854a5bd018jscript.dll5.8.9200.1666051f1e1a5c000041d00000000000251301c6401ceac0d34277b52C:\Program Files\Windows Media Player\wmprph.exeC:\windows\system32\jscript.dllf7565888-1801-11e3-bc18-dc0ea1676e3b
Error: (09/07/2013 11:10:43 PM) (Source: Application Error)(User: )
Description: wmprph.exe12.0.7600.163854a5bd018jscript.dll5.8.9200.1666051f1e1a5c000000500000000000251301c6401ceac0d34277b52C:\Program Files\Windows Media Player\wmprph.exeC:\windows\system32\jscript.dllf476fb94-1801-11e3-bc18-dc0ea1676e3b
==================== Memory info ===========================
Percentage of memory in use: 51%
Total physical RAM: 3690.9 MB
Available physical RAM: 1786.23 MB
Total Pagefile: 7379.99 MB
Available Pagefile: 4912 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:421.81 GB) (Free:158.79 GB) NTFS
Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:23.82 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 137973C4)
Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=422 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=29 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=15 GB) - (Type=12)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-18 00:08:48
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000069 ST950032 rev.0011 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Annie\AppData\Local\Temp\uglorpod.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544 fffff80002fb5000 40 bytes [FF, FF, FF, FF, 0F, 00, 00, ...]
INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 585 fffff80002fb5029 37 bytes [23, C1, 4C, 8D, 04, 40, 49, ...]
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Samsung\Kies\Kies.exe[3900] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
.text C:\Program Files (x86)\spotimote\spotimote.exe[3948] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
.text C:\Program Files (x86)\USB Camera\VM331_STI.EXE[4124] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
.text C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe[4144] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
.text C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4284] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
? C:\windows\system32\mssprxy.dll [4284] entry point in ".rdata" section 0000000070b571e6
.text C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe[4408] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
.text C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe[4656] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
.text C:\Users\Annie\Downloads\gmer_2.1.19163.exe[7868] C:\windows\syswow64\USER32.dll!DialogBoxParamW 0000000075b4cfca 5 bytes JMP 0000000174e14a80
.text C:\Users\Annie\Downloads\gmer_2.1.19163.exe[7868] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000774c1465 2 bytes [4C, 77]
.text C:\Users\Annie\Downloads\gmer_2.1.19163.exe[7868] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000774c14bb 2 bytes [4C, 77]
.text ... * 2
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0c6076fc1a13
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0c6076fc1a13 (not active ControlSet)
---- EOF - GMER 2.1 ----
|
|
18.09.2013, 17:56
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) Dann jetzt bitte Combofix aus meiner obigen Anleitung.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.09.2013, 19:46
| #5 |
| | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) Während der Combofix lief sind folgende Fehlermeldungen mehrfach angezeigt worden: - Dienstprogramm "Find String" (QGREP) funktioniert nicht mehr - Freeware implementation of SC.EXE funktioniert nicht mehr - TCP/IP Route Befehl funktioniert nicht mehr - Freeware implementation of REG.EXE funktioniert nicht mehr - catchme.3XE funktioniert nicht mehr - WIndows-Befehlsprozessor funktioniert nicht mehr Code:
ATTFilter ComboFix 13-09-17.01 - Annie 18.09.2013 19:42:13.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3691.1911 [GMT 2:00]
ausgeführt von:: c:\users\Annie\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\program files (x86)\DealPly
c:\program files (x86)\DealPly\DealPly.crx
c:\program files (x86)\DealPly\DealPly.xpi
c:\program files (x86)\DealPly\DealPlyIE.dll
c:\program files (x86)\DealPly\DealPlyIE64.dll
c:\program files (x86)\DealPly\DealPlyUpdate.exe
c:\program files (x86)\DealPly\DealPlyUpdateRun.exe
c:\program files (x86)\DealPly\DealPlyUpdateVer.exe
c:\program files (x86)\DealPly\icon.ico
c:\program files (x86)\DealPly\uninst.exe
c:\program files (x86)\Delta\delta\1.8.24.6\bh\delta.dll
c:\program files (x86)\Delta\delta\1.8.24.6\deltaApp.dll
c:\program files (x86)\Delta\delta\1.8.24.6\deltaEng.dll
c:\program files (x86)\Delta\delta\1.8.24.6\deltasrv.exe
c:\program files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll
c:\windows\s.bat
c:\windows\SysWow64\System32\MASetupCleaner.exe
c:\windows\SysWow64\System32\muzapp.exe
D:\install.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-08-18 bis 2013-09-18 ))))))))))))))))))))))))))))))
.
.
2013-09-18 18:10 . 2013-09-18 18:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-18 06:07 . 2013-09-18 06:07 -------- d-----w- c:\programdata\AVAST Software
2013-09-17 22:40 . 2013-09-17 22:40 -------- d-----w- c:\windows\ERUNT
2013-09-17 22:24 . 2013-09-17 22:24 -------- d-----w- c:\users\Annie\AppData\Roaming\AVG2014
2013-09-17 22:21 . 2013-09-15 22:50 9694160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F8607C4D-C26D-4AC0-B65A-F174B3BA783A}\mpengine.dll
2013-09-17 22:20 . 2013-09-17 22:20 -------- d-----w- c:\users\Annie\AppData\Roaming\TuneUp Software
2013-09-17 22:19 . 2013-09-17 22:24 -------- d-----w- c:\programdata\AVG2014
2013-09-17 22:19 . 2013-09-17 22:19 -------- d-----w- C:\$AVG
2013-09-17 22:17 . 2013-09-17 22:17 -------- d-----w- c:\program files (x86)\AVG
2013-09-17 22:13 . 2013-09-18 17:07 -------- d-----w- c:\programdata\MFAData
2013-09-17 22:13 . 2013-09-17 22:55 -------- d-----w- c:\users\Annie\AppData\Local\Avg2014
2013-09-17 22:13 . 2013-09-17 22:13 -------- d--h--w- c:\programdata\Common Files
2013-09-17 22:13 . 2013-09-17 22:13 -------- d-----w- c:\users\Annie\AppData\Local\MFAData
2013-09-17 21:39 . 2013-09-17 21:39 -------- d-----w- C:\FRST
2013-09-17 21:16 . 2013-09-17 21:24 -------- d-----w- c:\programdata\SecTaskMan
2013-09-17 21:15 . 2013-09-17 21:16 -------- d-----w- c:\program files (x86)\Security Task Manager
2013-09-14 11:28 . 2013-09-14 11:28 -------- d-----w- c:\programdata\Oracle
2013-09-14 11:28 . 2013-09-14 11:28 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-09-14 11:27 . 2013-09-14 11:27 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-09-14 11:27 . 2013-09-14 11:27 -------- d-----w- c:\program files (x86)\Java
2013-09-14 08:25 . 2013-09-14 08:25 -------- d-----w- c:\programdata\BitGuard
2013-09-12 11:55 . 2013-09-18 06:35 -------- d-----w- c:\program files (x86)\LyricsSeeker
2013-08-25 18:16 . 2013-08-25 18:16 -------- d-----w- c:\program files (x86)\RADVideo
2013-08-24 12:06 . 2013-08-24 12:06 -------- d-----w- c:\program files (x86)\Delta
2013-08-24 12:06 . 2013-08-24 12:06 -------- d-----w- c:\users\Annie\AppData\Roaming\BabSolution
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\users\Annie\AppData\Local\DealPlyLive
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\programdata\DealPlyLive
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\program files (x86)\DealPlyLive
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\users\Annie\AppData\Roaming\Dealply
2013-08-24 12:05 . 2013-09-12 11:55 -------- d-----w- c:\program files (x86)\LyriXeeker
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\program files (x86)\VideoConverter
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\users\Annie\AppData\Roaming\DSite
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\programdata\Babylon
2013-08-24 12:05 . 2013-08-24 12:05 -------- d-----w- c:\users\Annie\AppData\Roaming\Babylon
2013-08-24 07:57 . 2013-09-18 17:34 -------- d-----r- c:\users\Annie\Dropbox
2013-08-24 07:51 . 2013-09-18 17:34 -------- d-----w- c:\users\Annie\AppData\Roaming\Dropbox
2013-08-22 21:25 . 2013-08-22 21:25 212280 ----a-w- c:\windows\system32\drivers\avgldx64.sys
2013-08-22 21:08 . 2013-08-22 21:08 294712 ----a-w- c:\windows\system32\drivers\avgloga.sys
2013-08-22 20:55 . 2013-08-22 20:55 241464 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys
2013-08-22 20:54 . 2013-08-22 20:54 192824 ----a-w- c:\windows\system32\drivers\avgidsha.sys
2013-08-22 18:58 . 2013-09-18 06:22 -------- d-----w- c:\programdata\Avira
2013-08-21 18:07 . 2013-08-21 18:22 -------- d-----w- c:\users\Annie\AppData\Roaming\T-Mobile Internet Manager
2013-08-21 18:03 . 2009-10-21 15:16 243200 ----a-w- c:\windows\system32\drivers\ewusbnet.sys
2013-08-21 18:03 . 2009-10-12 13:23 114304 ----a-w- c:\windows\system32\drivers\ewusbdev.sys
2013-08-21 18:03 . 2009-09-10 13:31 117248 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys
2013-08-21 18:03 . 2007-08-09 02:10 29696 ----a-w- c:\windows\system32\drivers\ewdcsc.sys
2013-08-21 18:03 . 2013-08-21 18:03 -------- d-----w- c:\users\Annie\AppData\Roaming\T-Mobile
2013-08-21 18:03 . 2008-10-09 11:52 294912 ----a-w- c:\windows\SysWow64\bminstall.dll
2013-08-21 18:03 . 2008-10-09 11:51 126976 ----a-w- c:\windows\SysWow64\bmdumpd.bin
2013-08-21 18:03 . 2008-10-09 11:50 22528 ----a-w- c:\windows\SysWow64\drivers\BMLoad.sys
2013-08-21 18:03 . 2008-10-09 11:50 18816 ----a-w- c:\windows\SysWow64\drivers\tcpipBM.sys
2013-08-21 18:03 . 2008-02-11 15:05 8464 ----a-w- c:\windows\SysWow64\sporder.dll
2013-08-21 18:03 . 2008-02-11 15:05 719360 ----a-w- c:\windows\SysWow64\bmutil.dll
2013-08-21 18:03 . 2013-08-21 18:03 -------- d-----w- c:\program files (x86)\T-Mobile
2013-08-20 20:53 . 2013-08-20 20:53 123704 ----a-w- c:\windows\system32\drivers\avgmfx64.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-14 11:27 . 2013-05-22 20:40 868264 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-09-14 11:27 . 2013-05-22 20:40 790440 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-09-14 08:25 . 2012-05-09 14:53 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-14 08:25 . 2012-05-09 14:53 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-13 11:41 . 2012-07-19 12:53 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-08-07 02:22 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-08-02 01:48 . 2013-09-12 11:27 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-08-01 14:07 . 2013-08-01 14:07 251192 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2013-08-01 14:06 . 2013-08-01 14:06 147768 ----a-w- c:\windows\system32\drivers\avgdiska.sys
2013-08-01 14:04 . 2013-08-01 14:04 31544 ----a-w- c:\windows\system32\drivers\avgrkx64.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-05 17:17 130736 ----a-w- c:\users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-05 17:17 130736 ----a-w- c:\users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-05 17:17 130736 ----a-w- c:\users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-11-21 39408]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2012-12-20 844296]
"Easy Driver Pro"="c:\users\Annie\Downloads\Easy Driver Pro\DPLauncher.exe" [2012-04-30 147272]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2012-12-20 1476104]
"Facebook Update"="c:\users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2013-02-14 138096]
"spotimote"="c:\program files (x86)\spotimote\spotimote.exe" [2013-01-16 2103344]
"HW_OPENEYE_OUC_T-Mobile Internet Manager"="c:\program files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe" [2009-12-31 110592]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-08-10 336384]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2010-01-15 536576]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2010-07-26 222504]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-28 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-28 228448]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2011-11-21 329056]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2012-12-20 310280]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2010-02-09 2621440]
"DataCardMonitor"="c:\program files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe" [2013-08-21 253952]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2013-08-26 4851248]
.
c:\users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
Dropbox.lnk - c:\users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-6-5 27370808]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~3\BitGuard\261673~1.238\{C16C1~1\BitGuard.dll
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dealplylive;DealPly Live-Dienst (dealplylive);c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe;c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dealplylivem;DealPly Live-Dienst (dealplylivem);c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe;c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe;c:\progra~1\mcafee\msc\mcawfwk.exe [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bbus.sys [x]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdfl.sys [x]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdm.sys [x]
R3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\DRIVERS\ss_bserd.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x]
S2 BitGuard;BitGuard;c:\programdata\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe;c:\programdata\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 vmuvcflt;Vimicro USB Camera Filter;c:\windows\system32\Drivers\vmuvcflt.sys;c:\windows\SYSNATIVE\Drivers\vmuvcflt.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]
2010-02-16 17:02 114688 ----a-w- c:\program files (x86)\PixiePack Codec Pack\InstallerHelper.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-09 08:25]
.
2013-09-18 c:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
- c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24 12:05]
.
2013-09-18 c:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
- c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-08-24 12:05]
.
2013-09-18 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job
- c:\users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-14 18:31]
.
2013-09-18 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job
- c:\users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-14 18:31]
.
2013-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-21 20:41]
.
2013-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-21 20:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-05 17:17 164016 ----a-w- c:\users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-05 17:17 164016 ----a-w- c:\users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-05 17:17 164016 ----a-w- c:\users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-05 17:17 164016 ----a-w- c:\users\Annie\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2011-11-21 20:53 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2011-11-21 114688]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2011-11-21 9753024]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2011-11-21 5908928]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Free YouTube Download - c:\users\Annie\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\users\Annie\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-09-12 13:55; {72273571-743d-427e-a1c1-0538fbc2ddd3}; c:\program files (x86)\LyricsSeeker\133.xpi
FF - user.js: extensions.delta.tlbrSrchUrl -
FF - user.js: extensions.delta.id - 7478170b000000000000000000000000
FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
FF - user.js: extensions.delta.instlDay - 15941
FF - user.js: extensions.delta.vrsn - 1.8.24.6
FF - user.js: extensions.delta.vrsni - 1.8.24.6
FF - user.js: extensions.delta.vrsnTs - 1.8.24.614:06
FF - user.js: extensions.delta.prtnrId - delta
FF - user.js: extensions.delta.prdct - delta
FF - user.js: extensions.delta.aflt - babsst
FF - user.js: extensions.delta.smplGrp - none
FF - user.js: extensions.delta.tlbrId - base
FF - user.js: extensions.delta.instlRef - sst
FF - user.js: extensions.delta.dfltLng - de
FF - user.js: extensions.delta.excTlbr - false
FF - user.js: extensions.delta.ffxUnstlRst - true
FF - user.js: extensions.delta.admin - false
FF - user.js: extensions.delta_i.babTrack - affID=119357&tsp=4984
FF - user.js: extensions.delta_i.babExt -
FF - user.js: extensions.delta_i.srcExt - ss
FF - user.js: extensions.delta.autoRvrt - false
FF - user.js: extensions.delta.rvrt - false
FF - user.js: extensions.delta.newTab - false
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{9cf699ca-2174-4ed8-bec1-ba82095edce0} - c:\program files (x86)\DealPly\DealPlyIE.dll
BHO-{C1AF5FA5-852C-4C90-812E-A7F75E011D87} - c:\program files (x86)\Delta\delta\1.8.24.6\bh\delta.dll
Toolbar-Locked - (no file)
Toolbar-{82E1477C-B154-48D3-9891-33D83C26BCD3} - c:\program files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll
Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-DealPly - c:\program files (x86)\DealPly\uninst.exe
AddRemove-Stellar Phoenix Photo Recovery_is1 - c:\users\Annie\Downloads\Stellar Phoenix Photo Recovery\unins000.exe
AddRemove-{CE13C819-54FF-44B0-8195-5A2095142CF0}_is1 - c:\users\Annie\Downloads\CardRecoveryPro\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-09-18 20:30:55
ComboFix-quarantined-files.txt 2013-09-18 18:30
.
Vor Suchlauf: 9 Verzeichnis(se), 191.077.289.984 Bytes frei
.
- - End Of File - - 5700216643002750A5363C5087D82278
A36C5E4F47E84449FF07ED3517B43A31
|
|
19.09.2013, 09:30
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) Hast Du nach COmbofix manuell rebootet? Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) |
|
19.09.2013, 14:45
| #7 |
| | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...)Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.19.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16686 Annie :: ANNIE-PC [Administrator] 19.09.2013 14:33:00 mbam-log-2013-09-19 (14-33-00).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 205017 Laufzeit: 17 Minute(n), 18 Sekunde(n) Infizierte Speicherprozesse: 1 C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> 5052 -> Löschen bei Neustart. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 82 HKLM\SYSTEM\CurrentControlSet\Services\BitGuard (PUP.Optional.PerformerSoft.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3COMClassService.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3COMClassService (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{1E0C9B2A-6447-452C-B012-2314A0C29412} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8} (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{34A8CEB6-89BB-49F1-B5E4-0D0D6C21F3B1} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CredentialDialogMachine.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CredentialDialogMachine (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{3A4DBD3A-98CC-41CE-AD21-352D42B6F754} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoCreateAsync.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoCreateAsync (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{4F8A50F6-69DE-4BE3-A33A-A1079B9AC0DB} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebMachineFallback (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{501CB57A-D4E2-4855-96AD-EDB0A9083395} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoreMachineClass.1 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoreMachineClass (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{6FF2C4DD-77A4-4BB5-BA4C-B42DEFBF9137} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.ProcessLauncher.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.ProcessLauncher (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{83ABA270-8390-4CA6-AE48-FC089F55629E} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{8B218A5F-1A3D-4347-94EF-A79575EB8094} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLive.OneClickCtrl.9 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLive.Update3WebControl.3 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{9BDB5E09-4BBA-4422-8C2B-529B281C32B8} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLive.OneClickProcessLauncherMachine.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLive.OneClickProcessLauncherMachine (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{CA5D945F-E738-4D0B-A0B5-25AC51C64659} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoreClass.1 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoreClass (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{F7698761-4ABA-45C2-A5BB-D2163922C725} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebSvc.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebSvc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{FFCC53E6-2655-47FC-A89B-54E8D7F305D1} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebMachine.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebMachine (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Typelib\{4599D05A-D545-4069-BB42-5895B4EAE05B} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{1231839B-064E-4788-B865-465A1B5266FD} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dealply (PUP.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DEALPLY (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DELTA\DELTA (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\delta LTD (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings (PUP.Optional.BProtector.A) -> Löschen bei Neustart. HKLM\SOFTWARE\babylontoolbar (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\DEALPLY (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\dealplylive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\dealplylivem (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} (PUP.Optional.BitGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 9 HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: Delta Toolbar -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DealPly|Partner (PUP.Optional.DealPly.A) -> Daten: iron -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Delta\Delta|tlbrSrchUrl (PUP.Optional.Delta.A) -> Daten: -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Daten: hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=7478DC0EA1676E3B&affID=119357&tsp=4984 -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Daten: {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} -> Löschen bei Neustart. HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\DealPly|ChromeCrxPath (PUP.Optional.DealPly.A) -> Daten: C:\Program Files (x86)\DealPly\DealPly.crx -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\BitGuard|ImagePath (PUP.Optional.BitGuard.A) -> Daten: C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 1 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.PerformerSoft.A) -> Bösartig: (c:\PROGRA~3\BitGuard\261673~1.238\{C16C1~1\BitGuard.dll) Gut: () -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 26 c:\windows\temp\cookies (Backdoor.Agent) -> Löschen bei Neustart. C:\Users\Annie\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\Download (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\Install (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\Offline (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\Offline\{DBC71D81-DF5C-42CC-8A03-F7C31E91D10A} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\bh (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BitGuard\2.6.1673.238 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8} (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension (PUP.Optional.BitGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. Infizierte Dateien: 124 C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll (PUP.Optional.PerformerSoft.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> Löschen bei Neustart. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psmachine.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe (PUP.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\Downloads\wirelesskeyview.zip (PUP.WirelessKeyView) -> Erfolgreich gelöscht und in Quarantäne gestellt. c:\windows\temp\clientbar.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\minihook.dll (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\windowsnw.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\history\firefox.ex (Backdoor.Zapchast) -> Löschen bei Neustart. c:\windows\temp\kdata (Malware.Trace) -> Löschen bei Neustart. c:\windows\temp\history\firefox.exe (Trojan.Downloader) -> Löschen bei Neustart. c:\windows\temp\managee.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\cookies\venton.exe (Backdoor.Agent) -> Löschen bei Neustart. c:\windows\temp\temporary\makeout.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\as.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\_ex-68.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\system32.exe (Backdoor.Agent) -> Löschen bei Neustart. c:\windows\temp\volume.exe (Backdoor.Agent) -> Löschen bei Neustart. c:\windows\temp\xregist.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\explorer.exe-min (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\internt.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\adobe_update.exe (Trojan.Agent) -> Löschen bei Neustart. c:\windows\temp\loadqq.exe (Trojan.ChinAd) -> Löschen bei Neustart. c:\windows\temp\udpmon.txt (Backdoor.Trace) -> Löschen bei Neustart. c:\windows\temp\ahnlab.exe (Trojan.Banker) -> Löschen bei Neustart. C:\Users\Annie\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.url (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.url (PUP.OPtional.Dealply.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Dealply\UpdateProc\STTL.DAT (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\Dealply\UpdateProc\TTL.DAT (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveBroker.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHandler.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHelper.msi (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveOnDemand.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdate.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_am.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ar.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bg.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bn.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ca.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_cs.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_da.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_de.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_el.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en-GB.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es-419.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_et.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fa.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fi.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fil.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fr.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_gu.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hi.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hr.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hu.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_id.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_is.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_it.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_iw.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ja.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_kn.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ko.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lt.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lv.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ml.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_mr.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ms.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_nl.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_no.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pl.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-BR.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-PT.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ro.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ru.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sk.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sl.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sr.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sv.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sw.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ta.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_te.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_th.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_tr.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_uk.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ur.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_vi.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-CN.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-TW.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psuser.dll (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\chu.js (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\Delta.ico (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\enhancedNT.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\SetupParams.ini (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Annie\AppData\Roaming\BabSolution\Shared\sqlite3.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\GUninstaller.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Delta\delta\1.8.24.6\uninstall.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23 (PUP.Optional.BitGuard.A) -> Löschen bei Neustart. (Ende) Code:
ATTFilter # AdwCleaner v3.004 - Bericht erstellt am 19/09/2013 um 15:07:29
# Updated 15/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Annie - ANNIE-PC
# Gestartet von : C:\Users\Annie\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BitGuard
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\delta
Ordner Gelöscht : C:\Program Files (x86)\LyriXeeker
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\Annie\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Annie\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Datei Gelöscht : C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\user.js
Datei Gelöscht : C:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
Datei Gelöscht : C:\windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
Datei Gelöscht : C:\windows\System32\Tasks\DealPlyUpdate
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKCU\Software\5c2d9d1b53bec13
Schlüssel Gelöscht : HKLM\SOFTWARE\5c2d9d1b53bec13
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_audacity_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_audacity_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9CF699CA-2174-4ED8-BEC1-BA82095EDCE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CF699CA-2174-4ED8-BEC1-BA82095EDCE0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyrixeeker
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16686
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v23.0.1 (de)
[ Datei : C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.bbDpng", "25");
Zeile gelöscht : user_pref("extensions.delta.cntry", "DE");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.hdrMd5", "");
Zeile gelöscht : user_pref("extensions.delta.id", "7478170b000000000000000000000000");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15941");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.lastVrsnTs", "");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.sg", "er");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.614:06:09");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=4984");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.ffxtlbr@delta.com.install-event-fired", true);
*************************
AdwCleaner[R0].txt - [8509 octets] - [19/09/2013 15:06:19]
AdwCleaner[S0].txt - [8083 octets] - [19/09/2013 15:07:29]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8143 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Windows 7 Home Premium x64
Ran by Annie on 19.09.2013 at 15:21:19,24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1960928456-1631978861-405587205-1002\Software\SweetIM
~~~ Files
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0031D3D2-7DD8-4448-9434-D564A7C71417}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{008F0F44-B3D6-4C09-80D1-F9FC30F31564}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{013AF444-B684-49EA-ADFB-DF005C22488E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{016FB706-A03E-497D-8671-EED2BFF8F1E5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{01A41950-2930-42A2-96EB-1241161C763D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{022E9070-05D9-4104-A391-B0D9D65A5B12}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{02662882-0917-4659-87E1-7C9F07E29BE6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{02D31804-10B2-4A1D-B594-F023DE55C8EB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{02E78520-EFF4-4763-9449-0787CAB9F3AA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{03D00BD6-4CA0-400C-B2B1-47CD3EB33EA2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{03EFB0A0-16EB-45A9-B2E6-39B919E12272}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0444706E-9C25-4048-8C95-59FE969241DD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{044E685F-CAF8-435D-9699-AA7D4E84B305}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0451873B-1001-493D-A13E-57849D3CBA66}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{04849603-25C2-4775-8471-09AE5E0224C4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{049CBBA4-D1A8-4D6C-BDEF-65A454923329}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{04A669D6-29F8-4854-ABBC-903083149C83}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{04BB6092-DE15-4AC2-87E6-F1BFBE43F956}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{05DF87FC-1FCD-4E31-9715-C94FDA0A76F1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{06397C64-B7AF-49A4-A881-5309E2175C54}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0683DC43-4415-41DC-B63D-208E9F6B2CE6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{07616BF8-8974-491F-831D-57C7DDE6977B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{07CCC94A-8EDF-4A6A-B858-7A9C915F7A58}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{07D7E795-BD59-49DA-9655-B791891B0082}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0874B30D-812D-432F-8A3A-74D2D3C20DEA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{090349C0-4CB3-4B5A-8B18-3264F8C0F06D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{090AEA61-D6C1-489C-9E9F-BA0889C83F1A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{095286A7-FB9F-48EA-A91B-CB94C25ABB86}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{098FC711-516B-40ED-B6CB-41EC3AC2F392}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0A2516D9-F55D-4A1C-A73B-EE2793C921CF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0A7256D7-CEBA-4862-AC7F-A5828E7D00CD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0B671127-8DCA-4159-8C59-0BF348F2D920}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0BD381B9-F5BB-472F-8276-38C92B90A4FB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0CD67463-6620-474B-A1DE-653B203F05C7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0CEC289F-34CA-4CFD-A11A-84554F852A6E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0D5129DF-3ED3-425C-9E7E-4C3E7C3AFF1A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0D93D7CC-251C-4BAC-BA7A-47840CA32AB3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0EFD7009-B75D-42A4-86C4-5735FC287F21}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0F4EE51B-33D7-440F-AA0D-9BC13FD09ED5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0F67285B-138A-4259-8524-11E799BA9C7F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{0FA9EF19-B9D3-4178-A96A-F3F3C5A473A4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{100C0B8F-6F9E-4EA0-BF78-1514F8A20C29}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{10CC9E12-D266-45AF-8156-E9EBBEB89C4E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{10F2EE1F-A6E3-4836-82CE-15BB0128E879}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{111F093E-8F3B-4E20-B9B1-3862A2E7AF4A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{112F06E3-F442-4FB8-B975-FC0A7BF2A636}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{11A9A023-736D-4A27-9FBE-F8DA80EA7A26}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{12999DFE-0436-485B-9FBF-FCB241167B97}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{129BAE8F-103D-4FD2-B0B2-B660AC4452F1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1321AB10-101E-4AA7-BDA7-157124B5E734}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{133C82BA-B28D-4F79-A945-F43904100F72}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{138034E6-38ED-479B-AC62-24A8359C2EF5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{138DC4ED-E42D-4A6B-9076-E778B766C4E4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{139F82B6-2AAE-456B-B72B-E693D5FC45D8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{13EE7F68-8A1F-4DB7-8DD3-1A3C78009A24}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{13FB9070-FA9C-44E4-ABE6-67174CAB8344}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{141EAC6C-BEC7-4CA3-B04F-DCD5A5C6EFB4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{148FA438-6C9D-480D-BB07-92D1E60A1204}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{14A9CB44-EA57-4106-8CA1-A8EF166C7FC1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{151E115E-4652-40BD-BD90-754060B5A1DE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{167C6688-A748-41B1-96BE-19A75990CC9F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{16C04E86-F229-4DA1-88CC-6B701841F25B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{18E3C083-DD5E-44E2-9F2E-4EBB76D44082}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1A65C46B-CC4F-4D81-B73E-B83AF1066142}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1A8FAF44-6A9D-4369-9AA1-5D45214E9EF5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1ABBA352-2BF5-4184-9365-E07E57B1C910}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1B9DE67F-CB46-4C47-8DA6-C6749E039FA0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1B9FE342-A07F-404D-8231-D9DB52C35234}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1C059687-96E8-468E-8478-74AA7A649BB8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1C0C0B7E-927A-4EA8-A44B-CF57901A62F8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1C11A454-9671-4C93-989E-E559DE944549}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1C3B0BA4-9BB4-49C6-B80A-DC78B4D6D114}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1CC86A8C-59ED-4610-AD1F-EF045469E80B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1D5235F1-7256-4467-8EAB-050261D710DA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1D73F288-D6BB-42CB-B9ED-D691DF61C97B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1E5AE231-BC18-4AF2-819B-ECFDAE70FB9B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1E9DDC4F-4AEE-4339-8CC7-DCB6459DD43D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1EBC35AD-0FC7-4FD1-87D9-7716A15CD746}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1F034311-D687-4C89-8304-91C3BD0406A0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1F03D2B5-AD7A-42AA-8450-90B4035DF1CF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1F42EA76-E979-471A-A4C0-019733B586C2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1F8EFE04-52AB-45F0-B051-F520199E469D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{1FD19608-DB47-4443-B4E3-EECA06FE7CB1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{205331C2-CFFB-41BD-AEF7-8AB121E84CB7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{20623489-33E6-4DE2-8809-C35E02B97B2B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2124E36A-FF5F-48A3-AE73-DBDF4277B35C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{222F5C67-ADA3-4449-AE65-5995DC0BB274}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{22A561C2-BAD9-4539-B741-F15BF0B2EC72}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{22DC09DE-AF34-47BD-8C3F-3FC3ADF8576C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2472FB90-F73E-4498-8B4C-C058CE1D98B3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2543C1F6-D944-4349-8D99-97E75A87DDD8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{256352B7-BD3C-4412-9DFE-15FD945BE59B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{25AC49B9-5E6F-474C-B120-E4D3F4E20FCA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{25E9622F-EA55-411F-8B92-14DAF7BDEB6A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{26D03AE1-6E28-43CC-9046-E46152ADB598}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2740D940-3A73-4AE2-A919-69B355C2DF62}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{28561B5D-FEA0-44FA-A049-77B282C073D5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{289A0736-9FEA-481F-91E3-550DDA0E90E5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{28CFF856-C2E4-4A67-A24A-6A1DE3BDF607}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{28D5BA44-B9D9-4FDE-923C-43229AADA41F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{29523FD3-0625-4522-B44D-F8192E6F6544}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{296962D7-BC6A-4F59-A9CD-EA52B482D5DE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{29C9F55B-FF4E-45C7-BA4F-BF5AD4F337EE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2A8E8452-885E-447B-A5BD-B82A75A7C6BC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2AEC6782-3E5E-4A6D-924B-4FB14F1554CA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2B33A301-A84F-49C8-A33F-8E76C089D805}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2B3AB887-C183-49C7-B91A-976C3FE1142B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2BAE8D2A-27EA-47AD-891B-44BAE2D4EAF9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2BD0BF6F-6BB6-4861-87B5-ED66B52F1AF7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2C0D5C94-07C8-445A-BA8E-09BD2A71083F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2C2AFEC4-241A-43CD-B645-68F315FEDE08}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2D56436C-7A0C-4DC8-B5A0-F76006344B7B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2E93D6E2-A0CC-48D6-ADBA-1A62CE160A1E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2EBEA835-4CA4-4487-B441-A9A5D5AD6640}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{2F292068-66ED-499C-814D-95BD8CCDD422}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{30FDEDC9-B82C-4BC6-B45E-938812965806}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3124F79E-42B9-4869-861F-2A3C34B77855}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3373D611-6E2C-4E94-913D-CC2CD2F2316C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{339A7813-F2B4-4DDA-B659-B39B8C87BFD3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{33A90813-A2EE-49A3-81F6-C9A66AB698AB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{33C10B06-0840-4F8B-9BFE-26BD6EFDE813}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{33C70212-9995-4B65-9C4F-FA1E94BC879D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{34573BC7-3E8A-4679-AEE5-F3E0A9811E2D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{34A25566-DD79-466C-8692-22F1A0CD1D90}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{34B03319-10FD-4B22-A1A9-6DB9D0B16BCA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3568E01F-B6B5-4634-BD25-E86B427FE06A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{356BA9A4-8E45-49F9-A439-64C221E38627}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{35922501-3E02-4850-B9B0-6C3B1951FF3A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{359A20B7-F7ED-45D0-AB1B-F817B6701AF2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{35B8D45A-28E4-4A01-AF94-A14FE68DE9E9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3612FBF0-3B43-468D-9F86-F60EB33F8F9E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3757211D-6286-4AE4-82A2-6A3773F6C699}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{37D8C284-4A88-43C9-B363-85C37BE43C46}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{37DBE029-3607-460D-8E8B-22A68C583870}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{383C907A-0765-401C-BFC3-0D8A364AF494}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{386DF15A-9460-4903-BD84-D69036F8B62D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{39100750-3A38-47CB-AFEF-125ABCFBBCF2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3930E7D7-794F-4B4A-80B2-6A880C0A57ED}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{393617AE-1E3A-438A-A8EF-08CCDA31D414}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{39630734-A823-42CC-95FA-3EE53FC9483C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3A06EB74-424E-42B8-BEC5-E15069FB2BDC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3A564425-D16B-4294-B3C1-4E4BC22B7214}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3B22AC4C-9222-4068-9617-D673FC048D0F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3C2BFB32-91CB-4B0F-A884-F6D693757DED}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3CAD68DE-DFFE-4602-B78B-39FF631CE8C7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3D58CB8B-8BC8-4D1E-9DAC-DFC13F216417}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3D81F0A9-D143-4625-AF84-57A313A09C38}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3DC85C7A-ED07-4CD7-8F8F-3D4DCE87CDD9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3DD7A693-479F-40FF-A0C2-6E742DCD6A01}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3E12DD1C-9E8F-467B-8962-40D4118B716A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3F98EF6C-DB4E-4CFF-9FCC-62865CDEEECB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{3FB4E2B8-94B4-403E-90B7-BD96D9A1E3CA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4090CC18-C144-4872-B32C-C4ACE0387F32}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{40AEEE72-B491-4967-990A-0D456E2786E6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{40B75F17-DDAC-4D70-9F97-4FB0AAB0F442}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{41734A8E-E894-4E04-8627-C6C8EB5611BD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4196D863-2BE5-4B9B-98AE-FEFDA1954811}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{41986681-8891-4F00-ACFF-CDFA57D39217}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{41A6F6AA-3E48-4897-A09E-C54DD5AF8275}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{42BDC8B5-7EDE-4A1A-974D-8244B8D5440E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{42E27B97-5453-4225-A22E-97D324EB3D8D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{42E754A7-67B4-49F8-81B1-A051F01D4D4F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{43572B26-4886-49B0-8472-C9D1DB742817}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{43876CD4-3513-4C7F-BCA7-7BC4373EC5AE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{43DF2F82-875D-4477-8421-21CC819CA4C9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4495759E-8C37-433B-8CDE-BDE9F80E2DB5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{44AC0468-F0CA-4C95-B3FB-16BDC654A66D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{458548E5-68DB-439C-ABE8-68DC22A7ECB9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{45B17702-ACC5-466E-A8A1-032DAD09EEDC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4706F983-56E6-4282-B1D2-97445EC0FAE2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{47DA0FD3-5E0D-44FA-A7FB-5253EDBE5DD6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{48041613-CE1E-48B6-8493-763AB62013B8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{48604FC4-48B3-40C2-9BB7-4A67F21ED1AE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4AA90746-BC37-44A0-8B94-63AF19102619}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4B411E65-D418-4424-AB93-9F73D39E0904}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4C11F807-511A-449D-AC68-B431832405D8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4C294013-B796-4922-84D4-97185FCA5D04}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4D6F220B-D486-4734-B911-BA61FF3B7A6F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4D74D7E6-FDE4-4916-B473-2D1744782747}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4E0A4579-8CCA-427F-BB94-FB457CF1C0D4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4E3BF912-B8C1-4A41-AB21-3E4127B5F32C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4E6C1DBD-26FE-4F22-A7ED-23343D6D3C06}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4E780A17-F3F8-487B-B135-8BD9C1A26716}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4FB867A4-EFA8-4326-AA05-890AFC3A832C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4FCA7183-5C95-4042-86BE-AE9830CE6D61}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{4FF7A2B9-B284-4209-9C7B-8AAD3A2FC636}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{50160C34-D7D1-4A5E-86B9-360D2380E956}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{50588802-115A-46FE-8A18-E3CFFAD23E9C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{506429AE-11E9-4FB1-A43A-3B767C3D0404}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{515FE0DF-CB11-4C93-9D24-A1B95D5D8710}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{51C0B2D6-7A02-461F-A62E-BF47DFCBF50A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{51CBA938-A71A-479C-9001-551A4FC84469}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{51CBAFEB-085A-40D7-85A1-F06F63C8515F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{51CF261D-9414-4AF4-8913-3689F3DCFE3D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{51EF496B-3742-426A-AA5B-3021636376D7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{51FC3DE8-0E08-4681-817A-52D0C80CF707}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{53313169-4613-4933-B6A8-9D18FC703040}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5347628D-13F9-47B6-9790-588AEC2852B3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5348BC5D-69AA-4FB8-AA0B-440B66D6BF6E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{538CFFAF-CCF3-40F2-B5CF-D1A0D3D15D13}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5455F271-712F-4142-833C-69C6513944F1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{548FE066-2AD7-458A-8A8C-FE8F3CB8F65F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{55088E01-B641-4FBF-B305-8B0262C13773}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5537B578-CA40-4369-A585-59355C5CCE2F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{55A490B9-DE6B-4F7D-B0D0-1593412E7F73}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{567156D9-2709-48CA-9454-8E2778E6C5D5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{58024C38-8C07-469C-9AAA-716BFDDDE9F5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{586E0A12-C988-4049-8647-671C1E9EC7A9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{599FFBD6-FE45-451E-B079-C05ECD5C5FE5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{59AA5C3D-B46E-4825-A438-C58FB4070DD5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5A0BA2F5-B737-4F24-9B1A-E71F7C2F85F3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5A12E86F-85FC-4A37-9DA0-CABD55E01EEC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5A8D9B4F-320F-4AEC-B916-F4B5690210B5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5B274E52-AF25-47F4-91CF-1FC6AF7675E2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5B91643B-0850-45B8-ABAC-3985D7780567}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5BC692C4-D342-4FA6-A152-344F60BEE3B7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5C335995-4C3B-4FC9-BAB9-30F90BB66619}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5C53D049-0BBF-4F82-B237-35D0C60037C7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5C961C81-42A3-4976-B797-10781E17BF64}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5CD70435-B03D-4EEE-A216-97A51C71F9D4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5D3C9471-DA85-4C67-A593-E8C941DCE2A6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5E362C99-C868-479F-B5B3-2C93EDD48150}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5E944456-62C1-4FA5-B6A3-60C2D663DF41}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5EFDA373-7C8C-4A49-9690-599A07ABDE2F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5F25C010-AE28-4873-906F-87D025F8FB1B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5F99C6D7-CC01-4365-8879-049128D44BC9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5FBBC715-0D75-4779-889E-A2584A14A2AC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{5FFCBABC-ED5F-4469-B1F4-AD75FB39B939}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{60652D9A-7458-4777-BED8-A5E1CF04AF2A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6079948F-CD00-47C4-ABC3-28629C67DE47}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{60F75FCB-1494-437D-B4B9-D8DC25D8F63D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{61091F65-D2F5-4A8B-AE8D-A681C01338F6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{627D6900-050C-48CB-88F7-1AB46A613117}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{628DC5BB-7FE0-4312-A6A0-68485E0479D9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{629F4412-7F4E-4DAD-ADB0-BA9CBCC9262D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{638E5C32-32A7-409D-BA13-E7448A664AA2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{64053D17-E40F-434E-854B-07F869105639}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{652D616C-5170-4812-ABBF-23950CB05CEC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{656B2874-B1DF-4FBB-8865-650E09505BFC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{65A204F1-356A-44C7-926F-FF5A729E0D97}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{65E6E8E3-883E-426D-88F7-E80B202B7F93}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{663C2DBB-968E-4F11-98B1-C276A1038C00}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6645582D-7856-4FE7-A8C9-878329C5976A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{666B5F15-8B06-4542-A115-57F5D9262747}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{66D14398-5BB5-4710-821E-BF6B2652EE9D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{66D2931A-5D05-4C8F-BE5C-63953EEDF067}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{66ED8044-1A59-4EA5-8DDD-6095592C3A94}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{670224EB-3A5E-422B-B190-4E1D2692C85F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{670FFD31-F34C-4A97-9189-59C5B7993483}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6799759C-94B3-466C-813D-E55B02B2385F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{67A810BE-3A22-42F5-9D17-463C90311F00}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{67C3F326-4C74-4FD7-A240-A743B721B0E3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{68259BAD-37D9-49E9-BD55-0629358DD368}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6882CD4C-92F0-433A-B85D-DDE04EC8B8B9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{688F98A7-0388-448D-9405-7F2AF9914E9B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{68AE530B-A550-4FAB-B85D-906EFC45835A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{68C866ED-AA1B-4C1D-867D-583B61CE96BC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{68DADF01-193B-49E4-8041-2EBF7007E151}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{692B5EDE-D58F-4CAE-9D44-DF516CAFD1EF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{69776724-F860-46FE-A9E2-9E614A8877D1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{698B1955-8B07-4549-9B5A-A46DF373BBD0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6A43792A-C8C3-4598-A9AC-F6EFED94969B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6A6D2D35-EB06-4485-A73D-E64DA7C23D4A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6A8B2A7F-8CC5-4126-AF2F-E6CA63355D61}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6AE002D3-4D9C-456B-9F1C-B7CC5D7122FC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6AEC7B42-7D80-4F5A-91E2-5104BCBA63CB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6C59E847-641E-46FA-833D-7C5C0FF43036}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6D15DFB0-07A1-4143-BB8A-3D21179852BB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6D4C80C8-E454-4F4E-968A-8025740BF16B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6D596298-C904-44DE-ADD4-F5D26D6DFD75}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6D87AD32-DAF2-4D7B-8EB0-BF3732B055BD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6D9D06A8-1B28-44FD-99BA-34320CC8188F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6DF05504-164A-4809-A970-A7E563172939}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6E08FEEE-85F5-469E-BF36-7705AF3CD573}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6E4B89E2-08EF-4A53-8C11-E48B7F6304DD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6F10D8BC-5B29-4E26-8A56-5276E48BE0CC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6F6E8886-3609-4E1B-A22F-56E7104A38B6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{6FBFDE90-6680-4509-9420-0F151ECB7172}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{71100C3D-9AAD-4828-8CBD-3E7B4DDC2E5A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{71BE942E-E1A6-4173-98EA-373F614522A5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{71DB1A8B-DC31-45C4-BBC0-80D8202997FE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7211ADFE-B8DF-4AF8-AF87-407B18E4AC19}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{72477698-97BF-4385-8AE6-E1EFEAD9C48C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{72538B70-2C1E-4F9A-9759-C7D794CFAA24}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{72BDD793-D516-492F-B4A9-D0B2D82021AD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7318F530-180C-481B-9515-664CD1802198}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{743CEC3F-D325-452D-863D-48B61DE24C03}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7441BEF2-C9B8-4B76-9A99-9E5E2A3E9E4C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{744582EB-B7FC-45C9-9862-37DC8638C200}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{75677CB0-8F2D-4F2B-AD58-8451F9ACA8FA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{75790B70-9E36-40B5-A76F-2D8FD997853B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{75B5A349-D8D3-4656-A664-4ECDC1BE3CA3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{75E35182-2A21-4933-AA4A-D23A7CBD80FA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{761A0813-8E79-4222-81E3-AFF54E5EEDD7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7622404A-7981-4529-B363-A0CAF7450A6F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7694A0F5-767A-4E4E-892D-FF24B67EDA6D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{77998D08-AD2F-4671-96C6-969D4A591744}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{77E950B3-9081-4410-AEFA-4883B48BD53D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7863AD67-A25E-4CCB-8022-E99A77D58762}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{78CB0CFA-D70E-44FB-BA46-242BBFDD7F6E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{78E5F678-E156-49EC-B25E-624F4284061F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{79D13BC6-E3E7-461B-96A4-DA373A570DEC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7A4CFE1A-F442-4D74-9139-F2A655586CC2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7BA8B663-9444-465A-928D-FB5D16BAB8EF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7C11FE18-4ECA-4633-9995-53F265D9B2F7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7C7B9CAE-E71B-4C16-8165-27BCDCE7B3F4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7CB429CB-EA23-4602-BC2D-3BBD73FD8451}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7D565E46-6B59-4B0A-B9B8-573AFAF23C47}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7E32B0E5-C87C-4F13-A92D-F1FDF7AB1C22}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7F0CD0BF-CE01-4794-B1AE-288FF207761B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7F0E18DF-9ADA-4781-83B8-F1B1D2E05BEA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7F8F1D7E-B520-4A24-B59E-BF82A907DF34}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{7FCD5D3B-52C7-48E9-888E-3BBD84F9C6B0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{802736A0-1BAF-4015-A8F9-DEDB54936B6D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{813AD501-34E4-4FA4-82DA-0C94570F7ED1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8189AEC8-B510-473E-9CE1-E890BAC23305}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{81C3E74F-F238-43B0-92DD-48D6AB27DA3E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{81F6E933-4826-4F9B-9C40-461D58D639DF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8224BBB8-5B94-4EB0-A723-6CDA19BB3827}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{82811CB2-0725-46AF-A314-145A057E2DA4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{82D09D37-716A-44DB-A419-ABB7C1C1F868}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{82D7532A-8796-40CA-8451-7FD5119C9214}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{83259127-3199-4EFD-B2EC-29E8EFEBF006}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8343A4AE-E06E-4F20-B6EE-ECFDFEFFBA5B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8363DA74-2FB8-4A10-B1B8-2CAD2955DF7E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{836BF681-3898-48E4-92E5-13EB5792AD53}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{83907096-8192-4CF7-A404-10565CFCB66A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{83DEE23D-3474-4497-98C1-D52A84DF6CA2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{844EEE29-6E31-4D92-96F1-4D6C17CD20C8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8460B3C9-B9F2-4CEF-9BE4-E79261E9B1A2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{84B647FD-0D56-4970-B5B2-6D4AA08CD115}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{84BF7399-A17F-4EE2-8113-1F56EEB930B5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{84D88D14-7AD4-48A7-BA69-D7668B8D96AA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{85174517-A4FE-4CE6-B4F8-33CB314CB4FE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{852C272E-2C47-4EAA-975F-A9251A2943B8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8568D7DB-F18B-49E7-B2EB-370C811B4528}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{857A3984-F2DE-44DB-8647-412A95A12993}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{85FD8380-E0AB-4B5F-8D35-82C70F8B73A2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{860A51A8-C2CC-4498-A41E-36E7501D8E37}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{86C1B9E3-444F-4D5D-B8DE-DD0C51FCD84F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{87026BF8-44D2-4612-A1CF-9F013CF31D37}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8797B1FE-51A7-4D09-ABCB-92D2D4CAB05B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8868513C-C481-4A5D-A2C3-E0EE14B4C37C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{89B49A5E-94F0-4A0A-B394-EE23A27B9373}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{89BB8E9B-3826-403E-9B9B-5597C254A4F1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{89F00253-35FC-4794-A832-C7F9832FCBF4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8A121E5B-6EFC-4B24-9757-B839CDAFB3F2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8A9EB023-84CF-4FE5-933D-DA7C460D6233}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8AA062A9-A0BD-4F4E-B0D6-8A7E938C5F0C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8ABA0019-DC3D-49E5-820E-37F2E3C51C1D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8B0D1494-8839-48C2-A8C7-7925BBB6CF19}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8C2183D5-4314-489D-B8E9-2602BD203A46}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8CF04E0C-EA43-4AF7-82C6-AB5E5F1DD7E3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8D0F7AC0-34A2-4FD8-859D-CE3B08703B58}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8DA43B2C-5638-41B2-B29D-8EF35EE7ACD0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8E0827C3-CCB8-4803-84DC-427ECB59CF8E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8E2A0C28-30DA-4340-8778-665D662CC221}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8F367A8D-C6BA-4654-847D-D0B2FDB1FED5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8F3A24BC-0E64-4E0F-8A72-FF48B1789D2F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{8FD90137-A0DF-4BBB-91C4-2DC1087A173F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{903E885B-48E0-43E9-9F0F-7D1DFFCF7D22}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9086CF7D-5915-42BD-A010-585D770480DD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{90A2E171-7BEF-427C-9675-FFDB33B0559C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{912D0889-343F-4E85-9F3A-236171B3D785}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9160BADE-E025-452A-B5C0-2F14857EF102}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{91BD915C-6783-47E5-83E9-05997751BDBD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9280E123-D179-40F1-BEFE-500E66AF1113}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{92F12759-7AAC-4409-AFC7-F875FC3A18AE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{934FEFB3-5113-4ECD-95BD-CACCE1F8112D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{93BC4FA5-44CF-4C69-AD19-00BC8F386163}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{945C9112-0679-4A4A-A788-1232AA19D78F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9460025B-D49A-4096-9DBA-38DB54433FC6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{94BEA130-0C07-4CB1-ACF0-4BC682821B21}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{95155535-FEA8-4EE3-B28B-CCFD26B48DC8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{954FB9B4-38D2-4C19-92AD-2A8553F0E435}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{95BC7E75-651C-4457-BC63-B2F0B8D5B25C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{95C8E68B-A1BC-4078-BE42-F3E39F3789D9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{95D89C52-00A6-441A-90BC-3DA988523296}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{97171EA0-9C31-4CF5-A773-472C8CBD37C3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9764F97C-8736-4631-B37F-4B7CE8B98522}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{97F8AB7F-597B-46DE-A400-FBA210B313F2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{98884DC3-2678-4187-A0A9-E7B3D18DF44B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{98C0315A-37EA-412D-B626-78E9FDEEA1AC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{99EEB7C2-BBCC-4B05-A4F9-78549C7395D9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9A0FE887-2CC9-4AF4-A8DF-C91857953341}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9A53F329-6425-4630-9715-66C73496CC27}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9ADABC2B-FB12-454E-86BD-59159DE777AD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9B6CD9B9-A6D3-4DB5-9C91-991F28529389}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9C539D54-4605-47C2-8B21-B8D3014267F8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9D02377F-F76C-493F-B4C2-94BDC5CE35AB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9DB0885D-CA03-4AEC-920B-6C5588A5945C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9E13DAE0-BB8D-4FFC-8036-230992B826D0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9E51A745-C4DF-4393-AC5E-862FFE006DED}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{9E80A0AE-DF52-4080-AAE0-BE9F863C2811}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A011F287-BEF7-4FBE-ADF6-29558E42F14B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A0E69080-A496-4B9B-ACD0-059B9F1571F8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A11F23D6-A0D0-4200-8CBC-A45632F7155E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A174575E-D6DF-4561-8BDF-009D246DC66E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A1ACB285-A870-4E1F-AE0B-CD7C415BCA2B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A1B389B7-2401-41DC-81CF-E0FCE5EE3AA7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A21AA35B-CAD2-4DC9-837D-36EBC3725578}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A274547E-29A9-4A99-86D9-E7F66D0822F0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A2910115-7353-471D-89AC-935307A6AEC2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A2916ADC-0287-4B10-A744-29F3B30D0252}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A29304FF-D33B-42CA-AE4A-32F625CE3022}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A3E354A4-48E3-473F-ADC5-F0676EBE1D97}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A3FC9FC8-4FEA-4C57-BB88-59DA9AD4A851}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A49B31EF-EA5C-4558-9E96-F1B1DE4DEDA3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A513517A-7BC2-4E9C-858D-AC191E481289}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A518C96C-15A5-4069-8E96-13DD966ED7EF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A53DABF5-7D55-4AAC-8DE0-53B48E3E3506}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A5E853C5-B321-4B38-82D3-57DDA126657D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A784E632-4C56-4BBF-ACA0-4A558B6F8FE0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A7BD86F1-7574-4437-9D8B-58FFC17896BD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A8012B97-E2E5-4A77-BA10-7B1C61AD84B2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A8323396-7DA5-47C9-99D5-FD66AF8629CE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A840E7D3-FCC3-46A5-B926-AFF28EFDFDF7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A85092B3-4FD1-4A3A-BBFA-B1D3133A88E2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A916DB1D-25AF-4AEE-B8D8-58304A726E68}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{A9AED5BC-9835-48CD-8DDF-83DA601A6943}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AA354A8C-2FB6-4962-96B5-26E4DB8FA991}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AAC0B508-0857-4C3E-91AC-F7D9A9B61FB3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AACCFD28-BC3E-4EB1-9638-2219F1B2819A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AC16F5F6-6C16-470A-BED0-508B16F410D1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AC5497AC-7A00-4B6D-9A20-24F469F16F27}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AD317280-3E26-4630-A3DB-7578CBEDD335}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AE27F4DB-8A06-42F8-A871-6C08F2478849}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AE4A0C7F-1CD7-4441-935A-BBE2012A7B55}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AE62DDF3-6D0C-4F4A-A999-B066F2D1048A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AE7D0481-BC86-4826-8DFB-39D82BC5C823}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AFB367BC-D0BE-4D53-8708-F05DED5D6529}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AFD97E9F-CF2F-4DAF-90B0-D851F1B787C4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{AFED01B9-F6CF-4E68-AA11-F3E1DD1A91C6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B04B852C-383B-4337-B01F-092034A44E72}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B0709A80-359F-480C-8D82-0D54408A1366}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B0A8BA43-758F-4909-9E96-66AC8E83DE50}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B0A9A6EF-753F-48AF-9A68-6FB33B7E5AF6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B0AAA692-9E62-4495-B433-706A88856330}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B0B0C30F-44B9-4EC2-8CFD-60FCDF8E0F05}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B154BA16-C913-4FDA-9059-F1322EF0EA7A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B268883C-80E6-4DEE-B76F-F3BBB2C9C09D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B321FA38-5BDF-4F51-A8CC-D5DBA793D6D7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B36CF8A8-0ABC-4535-9DC9-F8C918042A6D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B411963B-18C2-4252-A873-FBB22FEB4491}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B41476A2-CF51-4D09-B525-1CC15C379CD7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B44B26CB-FC35-421E-A19A-C962FD3F9F2E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B4C58FA5-A7AA-4EA9-BF47-DF92B0587095}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B575991E-6255-40AD-BFCB-5B727941CEDE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B5AE00DC-A65C-4FEF-B6DE-03976C5BC739}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B5D3205E-05D9-440A-B06D-E759FC2D6AE8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B5E9E868-A1B3-46CD-9067-1C38778CF047}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B6205571-1031-42E6-B3DB-F45810F01049}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B678291C-E0C5-492C-A424-AF2F78A778AE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B6FD36CA-82F3-48A4-8657-22B23A5CDDF5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B78A617E-3EA6-426E-8D35-1050E5C1ECCE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B802912E-9485-4D8F-A99D-3098B068C6A0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B841BEAA-02DD-4DA1-A03F-E7D868D1C1F6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B883FCA5-4895-4243-BED8-C5051F52C517}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B944F064-5C90-4333-A6FB-B87132E4981B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{B9F2DB3A-0C5A-44E4-BB9A-35909B17F61E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BA14FE54-1B69-40B5-9100-6D098719CB12}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BA7103B6-421C-4A89-95FF-EA911A9B4540}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BB29CCE7-3E6B-45FC-9689-5FD476375C65}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BB37C6CE-242B-47DD-9E7B-581A0E1B8EBC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BB79B7A1-DA25-49D2-B8C6-A48E23C73E37}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BB890BA0-8110-480D-9561-EF94D4997A00}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BC432279-3E23-4EBF-86D4-97CBE040D4E4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BCC1930B-A573-4282-BE8F-EC9E4CB0CC23}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BDCD55CA-A720-45DE-A296-34E48FC2E5E7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BE2E8C03-A499-4692-9D9B-62E0E713CAB8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BE32C3F8-4E1D-42C4-A756-ABE9B3598CC6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BE885AFE-5A35-477D-BA3E-2E40E5471F48}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BEB48AB2-D384-4F47-A3EF-A8E18EE0C94B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BF1A9E5C-A8B5-4D87-B626-F2293D852334}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{BF5E8DC5-CDDE-4325-A255-691AFA5FB475}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C0275FCC-519D-4696-92A8-EA07C3BF4F35}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C0B9961D-3739-45BA-9DE1-D9E37DEBFAC8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C161AE6C-E56C-4646-BDB8-2F3DC9C14C59}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C1E7B351-92F8-4577-8E33-AD3737E6D5A2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C2FAA7EC-069E-487C-AA76-F2DD825BF95D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C340FDA5-A8DA-4329-8904-A2D140F6E4A2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C345FA7B-AD8A-4567-AF97-8DB16989A1B7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C349189C-D11C-43C9-BFC5-05F44C132A89}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C3A962F2-7545-4624-8199-6D99E30F72E7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C43814C4-67BF-4EDF-8093-52205619C3BD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C43905C1-70F1-4D5D-97DC-679CD9B27165}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C449546B-C548-4030-A220-3F8166CF731E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C62ADDFF-26B1-4040-907D-210058ED6F92}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C63F5774-2634-4B7F-B4EC-49B6DB3DE89D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C690950D-812C-416C-ABC1-881842A4C0CC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C6FF4B29-0815-44E8-BCAD-90B43712E836}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C77B6DBC-B819-466E-9DAE-E789D1A63B7C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C7A68304-240A-4461-BE70-56B675AEA9A0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C7E5298E-F616-4313-B146-6B51AEC04F8A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C851880E-014D-47F7-B67F-A49F59624B95}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C8CFE48B-F928-4526-99C5-8C68F0704654}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C92F70B7-9517-4832-9DB7-54FF4AC1CA4C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C961DA09-F57D-4DE4-8EDB-D985F3298AD7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C9EA6DF9-40FC-430B-8B9A-4FAFF6575C1A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{C9EEF3B6-97E5-4F92-8B63-FDD0FD1B59E4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CAA18529-05F9-4CE9-BDA6-4F21CBA7CEB4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CAAEAE9C-71D8-4543-9494-C88D39034A8D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CAB68AAC-B468-44BB-B1DF-03F5F7E5ECE9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CABA0762-1AFB-4F0D-8BD8-CAAFFF7AF01D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CAE1DA89-9BF8-4C2F-8F5E-964C5C885AF4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CB557016-ED10-4299-BABE-49E676EE7E15}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CBC1ABA0-9E7E-4522-9587-7375AF10574A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CBD8A2B0-38F1-4D90-B34B-7861238816E6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CBFA2980-C3C2-4C40-8817-2055E69B23FB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CCA20C01-0446-4430-96D5-22377399A589}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CCF7C69C-58A6-43FD-94E1-42DDEC097771}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CD078BCB-16CE-4D32-A0A4-C46ABF786AEF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CD4E7442-53BB-4660-903A-3529F0FFA2AF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CD8C974B-C4E6-4F9E-B966-D7B26F76156C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CD9AD923-7AB2-406B-B832-9920E1D83CBC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CDFCFF66-DC4C-4544-A7BC-65B42B53EEDE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CEA5C91E-080B-4730-826F-1C6F28BE9385}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CEDD2B7C-0215-4321-8F9D-B43A43AB1E21}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CEE05758-1EC0-4952-B85B-D6F13FF92CF3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CF9D1979-B95F-4F27-9C63-241E6C25437C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{CFE773BE-8F9D-4488-82B7-2765A4A6A3B8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D0E7E68F-9748-4BDA-99D0-FF6020C0A1E0}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D1353FCF-88BC-406B-A54F-C35987499573}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D14DAF06-F3EC-4B0F-98D3-E2E0D265C010}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D16F9187-30B2-440C-97DA-885A20555612}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D1700920-BA50-46BF-9414-0941EBAD103A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D172EFDA-6B3F-4926-A920-3132B075254D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D1D46A98-F067-4D3B-8327-BB3B8282357E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D1FA18E6-71A8-4020-8299-501B7A533A02}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D2D3A21A-C767-4C1F-BF16-7C9AB59CF9DB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D35797D9-C2EA-40AF-B01A-EDC1A4D676AA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D3911FD0-1F6D-4E89-BF7A-B539B93D964F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D39628AE-9CBF-4428-9985-7ECEE029433A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D4A00C44-3DBB-4064-9044-0E17E220144A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D53D4C5B-5CD5-4F76-9489-C177CF50F525}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D55A864F-5157-40C4-849E-A723B780CA59}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D56DD110-ABC3-4C57-A2C9-5D1629B0AD76}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D5ABAA8B-1E14-417C-BDF8-E2420990A406}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D629CAB2-320A-4FB2-AC64-2783870DE445}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D656E789-67E4-4E42-A37F-903F05A885FA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D6CE1041-2059-4A42-A44C-29E108C1CC35}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D6E34345-B19B-47A0-A573-6B64B06545DA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D72CF7A5-D0D1-4C7B-8907-7D13814F3F1A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D7CD2282-C15F-444F-BC81-C914938C161D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D7EF55AE-FB16-461D-ADD1-F549784EB142}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D857EE0E-1873-420C-85FF-188E6DB4ACDE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D87B03A2-A3EF-43C8-AFB7-334FAC6D0317}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D8E543D0-D81B-407C-BE25-DCA84474831E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D9D14811-896E-4650-898A-006BBE773B3A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{D9DD2C2E-8842-4CAC-BEF2-398D45482574}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DA85817C-9823-4F86-B9B0-72C012D7C0BD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DACA2C7F-1DD4-4D7C-B17A-CC409A04AF3F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DB393DB8-BD0E-41C3-B2E8-ECD86B48254C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DB5E8340-201C-414A-878A-67BFF87AA29A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DB7E7DDC-7058-4584-B9F2-CC8D4E74F24A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DC4747FF-544C-48F8-B6AE-9BB9914D19C4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DC6C333B-ECB4-4400-9778-0B34529B9812}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DD880B7E-02BD-49A2-9B03-F08C303EC309}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DE17E8EA-36FB-4DC0-AE8A-599A4B01E95B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DE29F8D9-09C1-4778-AC49-B6AED9255A3E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DE95837B-5DEA-4BA8-8A36-A83F808CFDB9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DE962E0A-76AA-4695-985C-AA1B96C180A1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DE96A873-CEFD-422F-BDE8-9E1229FB6D4C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DEC2018B-95B9-4398-9485-70FF9665C091}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DF1BC2EF-7DD2-4704-AFF4-BE9BB46915D7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DF29349C-00CA-4E82-986F-74018747E43A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DF5DF194-D3EF-45DC-A22E-DD7490765437}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DF7E1C8C-5364-499C-8674-21E4B23DEE8C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{DF9DC1B9-FB2B-4937-A68B-A1005750C41E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E0058570-3CDF-455A-AEF3-82785CA3B9A2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E02A7EAF-73E4-4E83-B140-00E3DCF80276}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E05697AC-BCFA-4F37-880B-0CABD1C12670}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E07C86E4-FACE-47C3-9309-83C175969BBA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E17DB3BC-00A0-441F-9AD1-5373FD42A418}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E220E1A9-1824-4338-9F66-2CDF67C465A3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E2429EC0-28A7-423D-A3B2-35B6E8B5FA16}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E2602460-7539-4650-A413-0A88793819A6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E29DB0D5-23CE-4660-8B02-D3125F4CF014}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E2C8605F-470B-448D-B87F-A387A6EF0C2B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E2C913E4-6A14-47BE-BEC8-166261B38368}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E304BD50-EEF3-47A6-944F-C423BEDDF817}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E4154668-1E58-4623-9EF9-83791AB63707}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E4991F22-AAA9-428F-BCAD-B6791FDBDB0C}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E4D6BC44-5871-4363-91C3-CF250E77F267}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E54A8E81-ED03-4E94-8B86-F8C0A5062D13}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E623ACE7-6B82-42E4-99C1-9020ED8D574D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E64916FD-099F-4799-9A57-3D1CCAD50D76}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E6751FCA-6843-42F1-B9CA-97FC5B937348}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E67E6E6F-6010-4F30-A6AB-6E68E3C7A965}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E7685CCF-189E-40EC-9222-6358A551B2FB}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E773580B-4FC8-49B4-9F1B-445556FED42A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E777B2A8-ACDE-41D4-943C-B1EA7CB7BB7E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E784B2F6-7300-4CFA-AF7F-986C4F24FC4D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E7CA1BE5-4B3A-43E6-B92D-771D30A83176}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E7D54A34-D81F-4D6F-8AEF-77F598C110A7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E800E096-3F8F-46F9-85F4-E954CC3DE7A7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E854EB1A-8856-4599-B720-946D50A38C7A}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E8665C07-C697-4B83-AB37-787B4A05FBAA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E8B140E4-798C-49FE-92D7-8F22C4F6742E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E8CE2CF2-1FE7-40EE-B088-AFE144B8C045}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E9038588-06F4-41DD-A60D-415678B56571}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E90494E5-9DCE-4A15-8195-B4C979F793AC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E93F7909-2C85-4802-9BE3-C233F3EC4352}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E9546DCB-24F3-46E8-A103-855B1CC94151}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{E9B54CBD-2A96-4C45-B04A-030F93243988}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EA9CE559-7E72-4FA5-B871-346A8C9C27BA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EAEA8449-2361-415C-9EA2-92C40EFBBC16}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EC26FE36-CC0D-423A-8335-D54B8AF701C4}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{ED1D2B2D-5ABF-47A7-9AD0-FC2E74348448}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{ED5F9309-3F90-4B25-AB3E-D775420FE30D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{ED7FB74F-57A9-436C-BE6F-145AC8E6D9C2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EDAAE039-AFC9-490A-99C7-505A268225FA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EDB8BDDB-8812-443A-B983-D03D2B058172}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EDD2AAA1-0090-4925-930F-303115EDD51E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EE1738EA-6A6E-4108-B04B-D3FD58D6A2AC}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EE24486A-3754-4E5B-9D3E-121DCAF4F8B5}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EE6B8FD1-508B-4E51-BFCE-563B01E2FC9D}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{EF2EBB81-D737-4271-9382-8DAA38DBE501}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F18898CD-0A97-4449-B52F-D0B0CB4FF205}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F1B05FD6-DCAD-4741-8FE9-23F70293E0C8}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F1FB44FB-3433-4A30-B940-86F0E9A8BA10}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F2B15C5D-D0F8-4079-9473-28343BDCEF6B}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F2BE0ECE-61F2-462A-AF8E-75AD7FE55C62}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F2D63F79-38AE-4821-AE54-5DC6E5B4A220}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F32CDB6E-1E9B-4A67-B02B-D4076BE67D79}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F3C11828-A8B2-4D4D-AD15-BE22120F73F6}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F4A01613-DCF0-49EB-9936-5E447D824C3E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F5628602-4713-415D-A74E-3FA0688852BE}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F5730D1D-9DC6-48BA-ADA1-812C44524DD9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F6138683-7FD6-44F4-A0F7-066522DAD598}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F66752CF-6A0B-4BAE-AADD-5B9B3C0AD9AD}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F68AF45F-8D7D-401B-A62F-788AA9EDFAE3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F70C6A8E-D286-45B9-873C-11E58C92B8AF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F75677AF-FAB2-4FD9-ADD4-98B72B0C3996}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F80DB423-B90A-4CDE-84CA-B3A1E35C7001}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F863B139-901B-4317-9170-224F3BB343C7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F8FA6365-2E16-4F33-87EE-D9133137D382}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F9277C4E-4970-49D6-9339-8BA594473DC9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F999A80E-BDCE-44BA-9702-29B23A298FA3}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F9B95B1E-5132-43D6-965A-8BCD00878C76}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F9BCDCED-FBBB-497F-93D3-E5FD3DC213C2}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{F9F5B370-C6DA-48A7-9490-A31FC5416630}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FA583C6D-6C93-4C8D-AB8E-C19CA3CEB476}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FA85327C-5F50-4614-ADFB-86AB03A656E7}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FA8CDF80-2A8D-435B-9DEF-DF3E535703B9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FAEE5229-30F2-4431-AC5F-4B090B593ECA}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FB31647F-09C2-4244-944C-CFAD8C102445}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FB558139-F119-44C5-B7BD-B211EF4208E1}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FB6FD595-E074-4E90-8EEB-1050777B2846}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FC04F607-50AF-4DD9-AB7D-D850CB57D561}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FD11EB61-7ED3-40B9-98A9-370442625C5F}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FD57E95A-9EBC-4402-BB69-637C0CD28284}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FD5AA089-9AA0-4721-838B-1FF659A7D6FF}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FF1D48D8-C587-4D66-BC8F-532C70DCEAC9}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FF237213-B367-4C6A-B1FA-866562ADAB1E}
Successfully deleted: [Empty Folder] C:\Users\Annie\appdata\local\{FF6F4A30-0B2E-4D89-B533-7FF159BE6618}
~~~ FireFox
Emptied folder: C:\Users\Annie\AppData\Roaming\mozilla\firefox\profiles\cuxykdhl.default\minidumps [46 files]
~~~ Chrome
Successfully deleted: [Folder] C:\Users\Annie\appdata\local\Google\Chrome\User Data\Default\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.09.2013 at 15:37:33,60
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
19.09.2013, 14:50
| #8 |
| | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013
Ran by Annie (administrator) on ANNIE-PC on 19-09-2013 15:48:14
Running from C:\Users\Annie\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\Synchredible\synchredible.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
() C:\Program Files (x86)\spotimote\spotimote.exe
(Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Huawei Technologies Co., Ltd.) C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager\ouc.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Huawei Technologies Co., Ltd.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-11-21] (Lenovo)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2011-11-21] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-11-21] (Lenovo(beijing) Limited)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-11-21] (Google Inc.)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKCU\...\Run: [Easy Driver Pro] - C:\Users\Annie\Downloads\Easy Driver Pro\DPLauncher.exe [147272 2012-04-30] (Probit Software)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung)
HKCU\...\Run: [Facebook Update] - C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-14] (Facebook Inc.)
HKCU\...\Run: [spotimote] - C:\Program Files (x86)\spotimote\spotimote.exe [2103344 2013-01-16] ()
HKCU\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [536576 2010-01-15] (Vimicro)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-11-21] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2013-08-21] (Huawei Technologies Co., Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4851248 2013-08-26] (AVG Technologies CZ, s.r.o.)
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default
FF NewTab: user_pref("browser.newtab.url", "");
FF Homepage: https://www.google.com/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Annie\Downloads\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Annie\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Lyrics Seeker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\133
FF Extension: WOT - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: personas - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\personas@christopher.beard.xpi
FF Extension: youtubeunblocker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKCU\...\Firefox\Extensions: [{72273571-743d-427e-a1c1-0538fbc2ddd3}] - C:\Program Files (x86)\LyricsSeeker\133.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsSeeker\133.xpi
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Coupons Malibu) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnofepcmbghfcimfbjicplikedjcnalm\2.0.1.9
CHR Extension: (\x4c\x79\x72\x69\x63\x73\x20\x53\x65\x65\x6b\x65\x72) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133
CHR HKLM\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [lgoiojnjnacbjngolldkokokgpcjbgjj] - C:\Program Files (x86)\LyricsSeeker\133.crx
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-21] (Adobe Systems)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-08-10] (Advanced Micro Devices, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3534896 2013-08-27] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [300640 2013-08-20] (AVG Technologies CZ, s.r.o.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [x]
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-08-20] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-08-22] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-08-20] ()
S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2010-12-21] (MCCI Corporation)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228224 2010-10-21] (Vimicro Corporation)
R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
U3 BcmSqlStartupSvc;
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)
U2 IAStorDataMgrSvc;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U2 Stereo Service;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-19 15:47 - 2013-09-19 15:47 - 01950594 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe
2013-09-19 15:37 - 2013-09-19 15:37 - 00070809 _____ C:\Users\Annie\Desktop\JRT.txt
2013-09-19 15:16 - 2013-09-19 15:16 - 01029675 _____ (Thisisu) C:\Users\Annie\Desktop\JRT.exe
2013-09-19 15:11 - 2013-09-19 15:11 - 00008223 _____ C:\Users\Annie\Desktop\AdwCleaner[S0].txt
2013-09-19 15:06 - 2013-09-19 15:07 - 00000000 ____D C:\AdwCleaner
2013-09-19 15:04 - 2013-09-19 15:04 - 01039554 _____ C:\Users\Annie\Downloads\adwcleaner.exe
2013-09-19 14:29 - 2013-09-19 14:29 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-19 14:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-19 14:28 - 2013-09-19 14:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Annie\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 20:31 - 2013-09-18 20:31 - 00030814 _____ C:\ComboFix.txt
2013-09-18 19:38 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2013-09-18 19:38 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2013-09-18 19:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2013-09-18 19:37 - 2013-09-18 20:32 - 00000000 ____D C:\Qoobox
2013-09-18 19:31 - 2013-09-18 19:31 - 00003420 _____ C:\windows\System32\Tasks\BitGuard
2013-09-18 19:19 - 2013-09-18 20:25 - 00000000 ____D C:\windows\erdnt
2013-09-18 19:15 - 2013-09-18 19:15 - 05128653 ____R (Swearware) C:\Users\Annie\Desktop\ComboFix.exe
2013-09-18 08:07 - 2013-09-18 08:07 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-18 08:03 - 2013-09-18 08:06 - 131918888 _____ C:\Users\Annie\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 01029675 _____ (Thisisu) C:\Users\Annie\Downloads\JRT6.1.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 00000000 ____D C:\windows\ERUNT
2013-09-18 00:24 - 2013-09-18 00:24 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-18 00:24 - 2013-09-18 00:24 - 00000000 ____D C:\Users\Annie\AppData\Roaming\AVG2014
2013-09-18 00:20 - 2013-09-18 00:20 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-18 00:20 - 2013-09-18 00:20 - 00000000 ____D C:\Users\Annie\AppData\Roaming\TuneUp Software
2013-09-18 00:19 - 2013-09-19 15:05 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-18 00:19 - 2013-09-18 00:19 - 00000000 ____D C:\$AVG
2013-09-18 00:17 - 2013-09-18 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-18 00:13 - 2013-09-19 13:21 - 00000000 ____D C:\ProgramData\MFAData
2013-09-18 00:13 - 2013-09-18 00:55 - 00000000 ____D C:\Users\Annie\AppData\Local\Avg2014
2013-09-18 00:13 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\MFAData
2013-09-18 00:12 - 2013-09-18 00:12 - 04425448 _____ (AVG Technologies) C:\Users\Annie\Downloads\avg_free_stb_all_2014_4116.exe
2013-09-18 00:10 - 2013-09-18 00:11 - 02092792 _____ C:\Users\Annie\Downloads\avira_free_4052_antivirus.exe
2013-09-17 23:49 - 2013-09-17 23:49 - 00377856 _____ C:\Users\Annie\Downloads\gmer_2.1.19163.exe
2013-09-17 23:48 - 2013-09-17 23:48 - 00042731 _____ C:\Users\Annie\Desktop\HILFE.odt
2013-09-17 23:43 - 2013-09-17 23:46 - 00032712 _____ C:\Users\Annie\Downloads\Addition.txt
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:33 - 2013-09-17 23:37 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:16 - 2013-09-17 23:24 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:15 - 2013-09-17 23:16 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:14 - 2013-09-17 23:15 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle
2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-13 13:48 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-13 13:48 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-13 13:48 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 13:55 - 2013-09-18 08:35 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker
2013-09-12 13:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-12 13:27 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-09-12 13:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-12 13:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-12 13:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-12 13:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-09-18 00:05 - 00000111 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-08-25 20:05 - 2013-09-18 00:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-08-25 20:02 - 2013-08-25 20:17 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:02 - 2013-08-25 20:05 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 09:57 - 2013-09-19 15:40 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:51 - 2013-09-19 15:41 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-08-24 09:43 - 2013-08-24 09:46 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
2013-08-22 23:25 - 2013-08-22 23:25 - 00212280 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgldx64.sys
2013-08-22 23:08 - 2013-08-22 23:08 - 00294712 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgloga.sys
2013-08-22 22:55 - 2013-08-22 22:55 - 00241464 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsdrivera.sys
2013-08-22 22:54 - 2013-08-22 22:54 - 00192824 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsha.sys
2013-08-22 20:58 - 2013-09-18 08:22 - 00000000 ____D C:\ProgramData\Avira
2013-08-21 20:07 - 2013-08-21 20:22 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Program Files (x86)\T-Mobile
2013-08-21 20:03 - 2009-10-21 17:16 - 00243200 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbnet.sys
2013-08-21 20:03 - 2009-10-12 15:23 - 00114304 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbdev.sys
2013-08-21 20:03 - 2009-09-10 15:31 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\windows\system32\Drivers\ewusbmdm.sys
2013-08-21 20:03 - 2008-10-09 13:52 - 00294912 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\bminstall.dll
2013-08-21 20:03 - 2008-10-09 13:51 - 00126976 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\bmdumpd.bin
2013-08-21 20:03 - 2008-10-09 13:50 - 00022528 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\Drivers\BMLoad.sys
2013-08-21 20:03 - 2008-10-09 13:50 - 00018816 _____ (Bytemobile, Inc.) C:\windows\SysWOW64\Drivers\tcpipBM.sys
2013-08-21 20:03 - 2008-02-11 17:05 - 00719360 _____ (Microsoft Corporation) C:\windows\SysWOW64\bmutil.dll
2013-08-21 20:03 - 2008-02-11 17:05 - 00008464 _____ (Microsoft Corporation) C:\windows\SysWOW64\sporder.dll
2013-08-21 20:03 - 2007-08-09 04:10 - 00029696 _____ (Huawei Tech. Co., Ltd.) C:\windows\system32\Drivers\ewdcsc.sys
2013-08-20 22:53 - 2013-08-20 22:53 - 00123704 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgmfx64.sys
==================== One Month Modified Files and Folders =======
2013-09-19 15:47 - 2013-09-19 15:47 - 01950594 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe
2013-09-19 15:47 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-19 15:47 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-19 15:46 - 2011-11-21 13:38 - 00699682 _____ C:\windows\system32\perfh007.dat
2013-09-19 15:46 - 2011-11-21 13:38 - 00149790 _____ C:\windows\system32\perfc007.dat
2013-09-19 15:46 - 2009-07-14 07:13 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-19 15:41 - 2013-08-24 09:51 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-09-19 15:40 - 2013-08-24 09:57 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-09-19 15:40 - 2012-05-09 16:06 - 02090414 _____ C:\FaceProv.log
2013-09-19 15:40 - 2011-11-21 23:04 - 00461693 _____ C:\windows\system32\fastboot.set
2013-09-19 15:40 - 2011-11-21 22:53 - 00000000 ____D C:\ProgramData\VeriFace
2013-09-19 15:39 - 2011-11-21 22:41 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-19 15:39 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-19 15:39 - 2009-07-14 06:51 - 00062326 _____ C:\windows\setupact.log
2013-09-19 15:38 - 2011-11-21 22:03 - 01448164 _____ C:\windows\WindowsUpdate.log
2013-09-19 15:37 - 2013-09-19 15:37 - 00070809 _____ C:\Users\Annie\Desktop\JRT.txt
2013-09-19 15:24 - 2012-05-09 16:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-19 15:20 - 2011-11-21 22:41 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-19 15:16 - 2013-09-19 15:16 - 01029675 _____ (Thisisu) C:\Users\Annie\Desktop\JRT.exe
2013-09-19 15:11 - 2013-09-19 15:11 - 00008223 _____ C:\Users\Annie\Desktop\AdwCleaner[S0].txt
2013-09-19 15:07 - 2013-09-19 15:06 - 00000000 ____D C:\AdwCleaner
2013-09-19 15:05 - 2013-09-18 00:19 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-19 15:04 - 2013-09-19 15:04 - 01039554 _____ C:\Users\Annie\Downloads\adwcleaner.exe
2013-09-19 15:00 - 2010-11-21 05:47 - 00309494 _____ C:\windows\PFRO.log
2013-09-19 14:33 - 2012-09-29 11:45 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Spotify
2013-09-19 14:29 - 2013-09-19 14:29 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-19 14:28 - 2013-09-19 14:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Annie\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-19 13:36 - 2013-02-14 20:31 - 00000928 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job
2013-09-19 13:21 - 2013-09-18 00:13 - 00000000 ____D C:\ProgramData\MFAData
2013-09-18 20:32 - 2013-09-18 19:37 - 00000000 ____D C:\Qoobox
2013-09-18 20:31 - 2013-09-18 20:31 - 00030814 _____ C:\ComboFix.txt
2013-09-18 20:31 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-18 20:25 - 2013-09-18 19:19 - 00000000 ____D C:\windows\erdnt
2013-09-18 20:23 - 2009-07-14 04:34 - 00000215 _____ C:\windows\system.ini
2013-09-18 19:36 - 2013-02-14 20:31 - 00000906 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job
2013-09-18 19:31 - 2013-09-18 19:31 - 00003420 _____ C:\windows\System32\Tasks\BitGuard
2013-09-18 19:15 - 2013-09-18 19:15 - 05128653 ____R (Swearware) C:\Users\Annie\Desktop\ComboFix.exe
2013-09-18 08:35 - 2013-09-12 13:55 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker
2013-09-18 08:22 - 2013-08-22 20:58 - 00000000 ____D C:\ProgramData\Avira
2013-09-18 08:07 - 2013-09-18 08:07 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-18 08:06 - 2013-09-18 08:03 - 131918888 _____ C:\Users\Annie\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-09-18 00:55 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\Avg2014
2013-09-18 00:40 - 2013-09-18 00:40 - 01029675 _____ (Thisisu) C:\Users\Annie\Downloads\JRT6.1.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 00000000 ____D C:\windows\ERUNT
2013-09-18 00:24 - 2013-09-18 00:24 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-18 00:24 - 2013-09-18 00:24 - 00000000 ____D C:\Users\Annie\AppData\Roaming\AVG2014
2013-09-18 00:20 - 2013-09-18 00:20 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-18 00:20 - 2013-09-18 00:20 - 00000000 ____D C:\Users\Annie\AppData\Roaming\TuneUp Software
2013-09-18 00:19 - 2013-09-18 00:19 - 00000000 ____D C:\$AVG
2013-09-18 00:17 - 2013-09-18 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-18 00:13 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\MFAData
2013-09-18 00:12 - 2013-09-18 00:12 - 04425448 _____ (AVG Technologies) C:\Users\Annie\Downloads\avg_free_stb_all_2014_4116.exe
2013-09-18 00:11 - 2013-09-18 00:10 - 02092792 _____ C:\Users\Annie\Downloads\avira_free_4052_antivirus.exe
2013-09-18 00:05 - 2013-08-25 20:05 - 00000111 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-09-18 00:05 - 2013-08-25 20:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-09-17 23:49 - 2013-09-17 23:49 - 00377856 _____ C:\Users\Annie\Downloads\gmer_2.1.19163.exe
2013-09-17 23:48 - 2013-09-17 23:48 - 00042731 _____ C:\Users\Annie\Desktop\HILFE.odt
2013-09-17 23:46 - 2013-09-17 23:43 - 00032712 _____ C:\Users\Annie\Downloads\Addition.txt
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:37 - 2013-09-17 23:33 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:33 - 2012-05-09 16:06 - 00000000 ____D C:\Users\Annie
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:24 - 2013-09-17 23:16 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:16 - 2013-09-17 23:15 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:15 - 2013-09-17 23:14 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-17 16:53 - 2012-05-09 16:11 - 00000000 ____D C:\Users\Annie\AppData\Local\Google
2013-09-17 16:06 - 2012-12-06 18:05 - 00000000 ____D C:\Users\Annie\Documents\Songtexte
2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle
2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-14 13:27 - 2013-05-22 22:40 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-09-14 13:27 - 2013-05-22 22:40 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-14 11:45 - 2009-07-14 06:45 - 00309312 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-14 10:26 - 2012-05-09 16:53 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-14 10:25 - 2012-05-09 16:53 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-14 10:25 - 2012-05-09 16:53 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-13 13:48 - 2013-07-21 12:15 - 00000000 ____D C:\windows\system32\MRT
2013-09-13 13:41 - 2012-07-19 14:53 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-12 20:56 - 2012-05-30 20:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Skype
2013-09-12 19:35 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Annie\AppData\Local\Spotify
2013-09-09 15:58 - 2012-06-07 19:33 - 00000000 ____D C:\Users\Annie\AppData\Roaming\vlc
2013-09-08 19:58 - 2012-09-14 22:07 - 00000000 ____D C:\Users\Annie\Documents\Youcam
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-25 20:17 - 2013-08-25 20:02 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-08-25 20:02 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-24 14:06 - 2013-05-26 11:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 12:25 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:46 - 2013-08-24 09:43 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
2013-08-22 23:25 - 2013-08-22 23:25 - 00212280 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgldx64.sys
2013-08-22 23:08 - 2013-08-22 23:08 - 00294712 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgloga.sys
2013-08-22 22:55 - 2013-08-22 22:55 - 00241464 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsdrivera.sys
2013-08-22 22:54 - 2013-08-22 22:54 - 00192824 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgidsha.sys
2013-08-22 20:52 - 2012-05-09 16:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-21 20:22 - 2013-08-21 20:07 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Users\Annie\AppData\Roaming\T-Mobile
2013-08-21 20:03 - 2013-08-21 20:03 - 00000000 ____D C:\Program Files (x86)\T-Mobile
2013-08-20 22:53 - 2013-08-20 22:53 - 00123704 _____ (AVG Technologies CZ, s.r.o.) C:\windows\system32\Drivers\avgmfx64.sys
Some content of TEMP:
====================
C:\Users\Annie\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-24 12:17
==================== End Of Log ============================
--- --- --- |
|
19.09.2013, 17:48
| #9 |
| /// the machine /// TB-Ausbilder | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...)ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.09.2013, 17:46
| #10 |
| | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) Also die PopUps und so sind weg  Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=62f825053b91164b84542932e9c55792
# engine=15198
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-21 02:22:26
# local_time=2013-09-21 04:22:26 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 316828 131403196 0 0
# scanned=81913
# found=0
# cleaned=0
# scan_time=5890
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=62f825053b91164b84542932e9c55792
# engine=15210
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-09-22 02:40:24
# local_time=2013-09-22 04:40:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 361106 131447474 0 0
# scanned=357599
# found=10
# cleaned=0
# scan_time=44202
sh=979085A5A0FFB56914AA5072260CEA247BDF91BB ft=0 fh=0000000000000000 vn="Win32/AdWare.AddLyrics.T application" ac=I fn="C:\Program Files (x86)\LyricsSeeker\133.crx"
sh=B147E00C902BEE5B7F316FFB064A0E3E4B41F417 ft=0 fh=0000000000000000 vn="Win32/AdWare.AddLyrics.T application" ac=I fn="C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js"
sh=F114FF3ECD27C15E58E75BFFB974C2516D90FDD9 ft=1 fh=4ee15cef076197ea vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="C:\Users\Annie\Downloads\Easy Driver Pro\DPSmartScan.exe"
sh=9A6DDD1ADAC5193813D5AE3749C47936567BF570 ft=0 fh=0000000000000000 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="E:\ANNIE-PC\Backup Set 2012-09-02 180233\Backup Files 2012-09-02 180233\Backup files 10.zip"
sh=B147E00C902BEE5B7F316FFB064A0E3E4B41F417 ft=0 fh=0000000000000000 vn="Win32/AdWare.AddLyrics.T application" ac=I fn="E:\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js"
sh=20A9DBF84A41133736F8740A690FC8DFC0555252 ft=1 fh=8c5a6a9f4dd76c28 vn="Win32/AdWare.AddLyrics.T application" ac=I fn="E:\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZQ1EKAIR\LyricsSeeker_1060-2028_v133[1]"
sh=577B5D209E01726C67014C9B2B75D668E9727FFD ft=0 fh=0000000000000000 vn="Win32/AdWare.AddLyrics.T application" ac=I fn="E:\AppData\Local\Temp\cheBEA1.tmp"
sh=20A9DBF84A41133736F8740A690FC8DFC0555252 ft=1 fh=8c5a6a9f4dd76c28 vn="Win32/AdWare.AddLyrics.T application" ac=I fn="E:\AppData\Local\Temp\LyriXtmp.exe"
sh=F4B3D741185FB631AC16DEBA665D6FEFCC849E12 ft=1 fh=2d57ed6ed11ea94a vn="multiple threats" ac=I fn="E:\AppData\Local\Temp\is1590112554\148361233_Setup.EXE"
sh=F114FF3ECD27C15E58E75BFFB974C2516D90FDD9 ft=1 fh=4ee15cef076197ea vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="E:\Downloads\Easy Driver Pro\DPSmartScan.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.73 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` AVG AntiVirus Free Edition 2014 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 40 Java version out of Date! Adobe Flash Player 11.8.800.168 Adobe Reader 10.1.7 Adobe Reader out of Date! Mozilla Firefox (23.0.1) Mozilla Thunderbird (17.0.2) Google Chrome 7.0.517.43 ````````Process Check: objlist.exe by Laurent```````` AVG avgwdsvc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 (ATTENTION: ====> FRST version is 6 days old and could be outdated)
Ran by Annie (administrator) on ANNIE-PC on 22-09-2013 18:44:35
Running from C:\Users\Annie\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\Synchredible\synchredible.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
() C:\Program Files (x86)\spotimote\spotimote.exe
(Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Huawei Technologies Co., Ltd.) C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager\ouc.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Huawei Technologies Co., Ltd.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcfgex.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-11-21] (Lenovo)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2011-11-21] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-11-21] (Lenovo(beijing) Limited)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-11-21] (Google Inc.)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKCU\...\Run: [Easy Driver Pro] - C:\Users\Annie\Downloads\Easy Driver Pro\DPLauncher.exe [147272 2012-04-30] (Probit Software)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung)
HKCU\...\Run: [Facebook Update] - C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-14] (Facebook Inc.)
HKCU\...\Run: [spotimote] - C:\Program Files (x86)\spotimote\spotimote.exe [2103344 2013-01-16] ()
HKCU\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [536576 2010-01-15] (Vimicro)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-11-21] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2013-08-21] (Huawei Technologies Co., Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4851248 2013-08-26] (AVG Technologies CZ, s.r.o.)
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default
FF NewTab: user_pref("browser.newtab.url", "");
FF Homepage: https://www.google.com/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Annie\Downloads\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Annie\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Lyrics Seeker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\133
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\staged
FF Extension: WOT - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: personas - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\personas@christopher.beard.xpi
FF Extension: youtubeunblocker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKCU\...\Firefox\Extensions: [{72273571-743d-427e-a1c1-0538fbc2ddd3}] - C:\Program Files (x86)\LyricsSeeker\133.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsSeeker\133.xpi
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Coupons Malibu) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnofepcmbghfcimfbjicplikedjcnalm\2.0.1.9
CHR Extension: (\x4c\x79\x72\x69\x63\x73\x20\x53\x65\x65\x6b\x65\x72) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133
CHR HKLM\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [lgoiojnjnacbjngolldkokokgpcjbgjj] - C:\Program Files (x86)\LyricsSeeker\133.crx
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-21] (Adobe Systems)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-08-10] (Advanced Micro Devices, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3534896 2013-08-27] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [300640 2013-08-20] (AVG Technologies CZ, s.r.o.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [x]
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-08-20] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-08-22] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-08-20] ()
S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2010-12-21] (MCCI Corporation)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228224 2010-10-21] (Vimicro Corporation)
R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
U3 BcmSqlStartupSvc;
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)
U2 IAStorDataMgrSvc;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U2 Stereo Service;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-22 18:19 - 2013-09-22 18:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CDEC911F-D33B-4AEF-8BA7-ADFB5F3AFB03}
2013-09-22 18:18 - 2013-09-22 18:18 - 00003254 _____ C:\Users\Annie\Desktop\eset.txt
2013-09-20 15:24 - 2013-09-20 15:24 - 03723656 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-20 14:40 - 2013-09-20 14:40 - 02347384 _____ (ESET) C:\Users\Annie\Downloads\esetsmartinstaller_enu.exe
2013-09-20 10:54 - 2013-09-20 13:53 - 00000000 ____D C:\Users\Annie\Documents\Pais
2013-09-20 07:56 - 2013-09-20 07:56 - 00000000 ____D C:\Users\Annie\AppData\Local\{F83CA616-1DF3-4DF8-BC48-EE155A1D9958}
2013-09-19 19:55 - 2013-09-19 19:56 - 00000000 ____D C:\Users\Annie\AppData\Local\{8650DED9-C7A1-4A86-A6CA-42B67B856F29}
2013-09-19 15:47 - 2013-09-19 15:47 - 01950594 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe
2013-09-19 15:16 - 2013-09-19 15:16 - 01029675 _____ (Thisisu) C:\Users\Annie\Desktop\JRT.exe
2013-09-19 15:06 - 2013-09-19 15:07 - 00000000 ____D C:\AdwCleaner
2013-09-19 15:04 - 2013-09-19 15:04 - 01039554 _____ C:\Users\Annie\Downloads\adwcleaner.exe
2013-09-19 14:29 - 2013-09-19 14:29 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-19 14:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-19 14:28 - 2013-09-19 14:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Annie\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 20:31 - 2013-09-18 20:31 - 00030814 _____ C:\ComboFix.txt
2013-09-18 19:38 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2013-09-18 19:38 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2013-09-18 19:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2013-09-18 19:37 - 2013-09-18 20:32 - 00000000 ____D C:\Qoobox
2013-09-18 19:31 - 2013-09-18 19:31 - 00003420 _____ C:\windows\System32\Tasks\BitGuard
2013-09-18 19:19 - 2013-09-18 20:25 - 00000000 ____D C:\windows\erdnt
2013-09-18 19:15 - 2013-09-18 19:15 - 05128653 ____R (Swearware) C:\Users\Annie\Desktop\ComboFix.exe
2013-09-18 08:07 - 2013-09-18 08:07 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-18 08:03 - 2013-09-18 08:06 - 131918888 _____ C:\Users\Annie\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 01029675 _____ (Thisisu) C:\Users\Annie\Downloads\JRT6.1.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 00000000 ____D C:\windows\ERUNT
2013-09-18 00:24 - 2013-09-18 00:24 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-18 00:24 - 2013-09-18 00:24 - 00000000 ____D C:\Users\Annie\AppData\Roaming\AVG2014
2013-09-18 00:20 - 2013-09-18 00:20 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-18 00:20 - 2013-09-18 00:20 - 00000000 ____D C:\Users\Annie\AppData\Roaming\TuneUp Software
2013-09-18 00:19 - 2013-09-19 15:05 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-18 00:19 - 2013-09-18 00:19 - 00000000 ____D C:\$AVG
2013-09-18 00:17 - 2013-09-18 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-18 00:13 - 2013-09-22 18:24 - 00000000 ____D C:\ProgramData\MFAData
2013-09-18 00:13 - 2013-09-18 00:55 - 00000000 ____D C:\Users\Annie\AppData\Local\Avg2014
2013-09-18 00:13 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\MFAData
2013-09-18 00:12 - 2013-09-18 00:12 - 04425448 _____ (AVG Technologies) C:\Users\Annie\Downloads\avg_free_stb_all_2014_4116.exe
2013-09-18 00:10 - 2013-09-18 00:11 - 02092792 _____ C:\Users\Annie\Downloads\avira_free_4052_antivirus.exe
2013-09-17 23:49 - 2013-09-17 23:49 - 00377856 _____ C:\Users\Annie\Downloads\gmer_2.1.19163.exe
2013-09-17 23:43 - 2013-09-17 23:46 - 00032712 _____ C:\Users\Annie\Downloads\Addition.txt
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:33 - 2013-09-17 23:37 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:16 - 2013-09-17 23:24 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:15 - 2013-09-17 23:16 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:14 - 2013-09-17 23:15 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle
2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-13 13:48 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-13 13:48 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-13 13:48 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 13:55 - 2013-09-18 08:35 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker
2013-09-12 13:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-12 13:27 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-09-12 13:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-12 13:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-12 13:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-12 13:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-09-18 00:05 - 00000111 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-08-25 20:05 - 2013-09-18 00:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-08-25 20:02 - 2013-08-25 20:17 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:02 - 2013-08-25 20:05 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 09:57 - 2013-09-20 11:52 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:51 - 2013-09-22 17:18 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-08-24 09:43 - 2013-08-24 09:46 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
==================== One Month Modified Files and Folders =======
2013-09-22 18:34 - 2011-11-21 13:38 - 00699682 _____ C:\windows\system32\perfh007.dat
2013-09-22 18:34 - 2011-11-21 13:38 - 00149790 _____ C:\windows\system32\perfc007.dat
2013-09-22 18:34 - 2009-07-14 07:13 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-22 18:24 - 2013-09-18 00:13 - 00000000 ____D C:\ProgramData\MFAData
2013-09-22 18:24 - 2012-05-09 16:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-22 18:20 - 2011-11-21 22:41 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-22 18:19 - 2013-09-22 18:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CDEC911F-D33B-4AEF-8BA7-ADFB5F3AFB03}
2013-09-22 18:18 - 2013-09-22 18:18 - 00003254 _____ C:\Users\Annie\Desktop\eset.txt
2013-09-22 18:16 - 2011-11-21 22:03 - 01486373 _____ C:\windows\WindowsUpdate.log
2013-09-22 17:18 - 2013-08-24 09:51 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-09-22 16:36 - 2013-02-14 20:31 - 00000928 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job
2013-09-22 05:12 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-21 21:20 - 2011-11-21 22:41 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-21 19:36 - 2013-02-14 20:31 - 00000906 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job
2013-09-21 18:34 - 2012-05-09 16:06 - 02101100 _____ C:\FaceProv.log
2013-09-21 18:34 - 2011-11-21 22:53 - 00000000 ____D C:\ProgramData\VeriFace
2013-09-20 15:24 - 2013-09-20 15:24 - 03723656 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-20 15:24 - 2012-05-09 16:53 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 15:24 - 2012-05-09 16:53 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 15:24 - 2012-05-09 16:53 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 14:40 - 2013-09-20 14:40 - 02347384 _____ (ESET) C:\Users\Annie\Downloads\esetsmartinstaller_enu.exe
2013-09-20 13:53 - 2013-09-20 10:54 - 00000000 ____D C:\Users\Annie\Documents\Pais
2013-09-20 12:01 - 2012-05-09 16:09 - 00067624 _____ C:\Users\Annie\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-20 11:52 - 2013-08-24 09:57 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-09-20 11:49 - 2013-03-14 23:01 - 00024629 _____ C:\Users\Annie\Documents\Gedanken 14.3.2013.odt
2013-09-20 09:14 - 2012-05-30 20:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Skype
2013-09-20 07:56 - 2013-09-20 07:56 - 00000000 ____D C:\Users\Annie\AppData\Local\{F83CA616-1DF3-4DF8-BC48-EE155A1D9958}
2013-09-19 19:56 - 2013-09-19 19:55 - 00000000 ____D C:\Users\Annie\AppData\Local\{8650DED9-C7A1-4A86-A6CA-42B67B856F29}
2013-09-19 19:36 - 2012-09-14 22:07 - 00000000 ____D C:\Users\Annie\Documents\Youcam
2013-09-19 15:47 - 2013-09-19 15:47 - 01950594 _____ (Farbar) C:\Users\Annie\Downloads\FRST64.exe
2013-09-19 15:47 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-19 15:47 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-19 15:40 - 2011-11-21 23:04 - 00461693 _____ C:\windows\system32\fastboot.set
2013-09-19 15:39 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-19 15:39 - 2009-07-14 06:51 - 00062326 _____ C:\windows\setupact.log
2013-09-19 15:16 - 2013-09-19 15:16 - 01029675 _____ (Thisisu) C:\Users\Annie\Desktop\JRT.exe
2013-09-19 15:07 - 2013-09-19 15:06 - 00000000 ____D C:\AdwCleaner
2013-09-19 15:05 - 2013-09-18 00:19 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-19 15:04 - 2013-09-19 15:04 - 01039554 _____ C:\Users\Annie\Downloads\adwcleaner.exe
2013-09-19 15:00 - 2010-11-21 05:47 - 00309494 _____ C:\windows\PFRO.log
2013-09-19 14:33 - 2012-09-29 11:45 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Spotify
2013-09-19 14:29 - 2013-09-19 14:29 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-19 14:28 - 2013-09-19 14:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Annie\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 20:32 - 2013-09-18 19:37 - 00000000 ____D C:\Qoobox
2013-09-18 20:31 - 2013-09-18 20:31 - 00030814 _____ C:\ComboFix.txt
2013-09-18 20:31 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-18 20:25 - 2013-09-18 19:19 - 00000000 ____D C:\windows\erdnt
2013-09-18 20:23 - 2009-07-14 04:34 - 00000215 _____ C:\windows\system.ini
2013-09-18 19:31 - 2013-09-18 19:31 - 00003420 _____ C:\windows\System32\Tasks\BitGuard
2013-09-18 19:15 - 2013-09-18 19:15 - 05128653 ____R (Swearware) C:\Users\Annie\Desktop\ComboFix.exe
2013-09-18 08:35 - 2013-09-12 13:55 - 00000000 ____D C:\Program Files (x86)\LyricsSeeker
2013-09-18 08:22 - 2013-08-22 20:58 - 00000000 ____D C:\ProgramData\Avira
2013-09-18 08:07 - 2013-09-18 08:07 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-18 08:06 - 2013-09-18 08:03 - 131918888 _____ C:\Users\Annie\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-09-18 00:55 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\Avg2014
2013-09-18 00:40 - 2013-09-18 00:40 - 01029675 _____ (Thisisu) C:\Users\Annie\Downloads\JRT6.1.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 00000000 ____D C:\windows\ERUNT
2013-09-18 00:24 - 2013-09-18 00:24 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-18 00:24 - 2013-09-18 00:24 - 00000000 ____D C:\Users\Annie\AppData\Roaming\AVG2014
2013-09-18 00:20 - 2013-09-18 00:20 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-18 00:20 - 2013-09-18 00:20 - 00000000 ____D C:\Users\Annie\AppData\Roaming\TuneUp Software
2013-09-18 00:19 - 2013-09-18 00:19 - 00000000 ____D C:\$AVG
2013-09-18 00:17 - 2013-09-18 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-18 00:13 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\MFAData
2013-09-18 00:12 - 2013-09-18 00:12 - 04425448 _____ (AVG Technologies) C:\Users\Annie\Downloads\avg_free_stb_all_2014_4116.exe
2013-09-18 00:11 - 2013-09-18 00:10 - 02092792 _____ C:\Users\Annie\Downloads\avira_free_4052_antivirus.exe
2013-09-18 00:05 - 2013-08-25 20:05 - 00000111 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-09-18 00:05 - 2013-08-25 20:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-09-17 23:49 - 2013-09-17 23:49 - 00377856 _____ C:\Users\Annie\Downloads\gmer_2.1.19163.exe
2013-09-17 23:46 - 2013-09-17 23:43 - 00032712 _____ C:\Users\Annie\Downloads\Addition.txt
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:37 - 2013-09-17 23:33 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:33 - 2012-05-09 16:06 - 00000000 ____D C:\Users\Annie
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:24 - 2013-09-17 23:16 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:16 - 2013-09-17 23:15 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:15 - 2013-09-17 23:14 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-17 16:53 - 2012-05-09 16:11 - 00000000 ____D C:\Users\Annie\AppData\Local\Google
2013-09-17 16:06 - 2012-12-06 18:05 - 00000000 ____D C:\Users\Annie\Documents\Songtexte
2013-09-14 13:28 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle
2013-09-14 13:27 - 2013-09-14 13:27 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-14 13:27 - 2013-09-14 13:27 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-14 13:27 - 2013-09-14 13:27 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-14 13:27 - 2013-05-22 22:40 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-09-14 13:27 - 2013-05-22 22:40 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-14 11:45 - 2009-07-14 06:45 - 00309312 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-13 13:48 - 2013-07-21 12:15 - 00000000 ____D C:\windows\system32\MRT
2013-09-13 13:41 - 2012-07-19 14:53 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-12 19:35 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Annie\AppData\Local\Spotify
2013-09-09 15:58 - 2012-06-07 19:33 - 00000000 ____D C:\Users\Annie\AppData\Roaming\vlc
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-25 20:17 - 2013-08-25 20:02 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-08-25 20:02 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-24 14:06 - 2013-05-26 11:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:46 - 2013-08-24 09:43 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
Some content of TEMP:
====================
C:\Users\Annie\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-22 05:05
==================== End Of Log ============================
--- --- --- |
|
22.09.2013, 19:32
| #11 |
| /// the machine /// TB-Ausbilder | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) Java und Adobe updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files (x86)\LyricsSeeker
C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js
C:\Users\Annie\Downloads\Easy Driver Pro
E:\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js
E:\Downloads\Easy Driver Pro
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.09.2013, 20:03
| #12 |
| | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...)Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-09-2013
Ran by Annie at 2013-09-22 21:00:46 Run:1
Running from C:\Users\Annie\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Program Files (x86)\LyricsSeeker
C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js
C:\Users\Annie\Downloads\Easy Driver Pro
E:\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js
E:\Downloads\Easy Driver Pro
*****************
C:\Program Files (x86)\LyricsSeeker => Moved successfully.
C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js => Moved successfully.
C:\Users\Annie\Downloads\Easy Driver Pro => Moved successfully.
"E:\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133\c.js" => File/Directory not found.
"E:\Downloads\Easy Driver Pro" => File/Directory not found.
==== End of Fixlog ====
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 (ATTENTION: ====> FRST version is 6 days old and could be outdated)
Ran by Annie (administrator) on ANNIE-PC on 22-09-2013 21:02:10
Running from C:\Users\Annie\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ASCOMP Software GmbH) C:\Program Files (x86)\ASCOMP Software\Synchredible\synchredible.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
() C:\Program Files (x86)\spotimote\spotimote.exe
(Dropbox, Inc.) C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Huawei Technologies Co., Ltd.) C:\Users\Annie\AppData\Roaming\T-Mobile Internet Manager\ouc.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Lenovo) C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Huawei Technologies Co., Ltd.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcfgex.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
() C:\PROGRA~2\AVG\AVG2014\Tuneup\TUMICR~1.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [114688 2011-11-21] (Lenovo)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9753024 2011-11-21] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5908928 2011-11-21] (Lenovo(beijing) Limited)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-11-21] (Google Inc.)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKCU\...\Run: [Easy Driver Pro] - C:\Users\Annie\Downloads\Easy Driver Pro\DPLauncher.exe
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1476104 2012-12-20] (Samsung)
HKCU\...\Run: [Facebook Update] - C:\Users\Annie\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-02-14] (Facebook Inc.)
HKCU\...\Run: [spotimote] - C:\Program Files (x86)\spotimote\spotimote.exe [2103344 2013-01-16] ()
HKCU\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE [536576 2010-01-15] (Vimicro)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-29] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-29] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2011-11-21] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2013-08-21] (Huawei Technologies Co., Ltd.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4851248 2013-08-26] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Annie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: (No Name) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: No Name - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default
FF NewTab: user_pref("browser.newtab.url", "");
FF Homepage: https://www.google.com/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Annie\Downloads\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Annie\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Lyrics Seeker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\133
FF Extension: WOT - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: personas - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\personas@christopher.beard.xpi
FF Extension: youtubeunblocker - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\cuxykdhl.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKCU\...\Firefox\Extensions: [{72273571-743d-427e-a1c1-0538fbc2ddd3}] - C:\Program Files (x86)\LyricsSeeker\133.xpi
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Coupons Malibu) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnofepcmbghfcimfbjicplikedjcnalm\2.0.1.9
CHR Extension: (\x4c\x79\x72\x69\x63\x73\x20\x53\x65\x65\x6b\x65\x72) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgoiojnjnacbjngolldkokokgpcjbgjj\1.133
CHR HKLM\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [hnofepcmbghfcimfbjicplikedjcnalm] - C:\Users\Annie\AppData\Local\CouponsMalibu.crx
CHR HKLM-x32\...\Chrome\Extension: [lgoiojnjnacbjngolldkokokgpcjbgjj] - C:\Program Files (x86)\LyricsSeeker\133.crx
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-21] (Adobe Systems)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-08-10] (Advanced Micro Devices, Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3534896 2013-08-27] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [300640 2013-08-20] (AVG Technologies CZ, s.r.o.)
S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [x]
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-08-20] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-08-22] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-10-12] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-08-20] ()
S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2010-12-21] (MCCI Corporation)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [228224 2010-10-21] (Vimicro Corporation)
R3 vmuvcflt; C:\Windows\System32\Drivers\vmuvcflt.sys [8320 2010-08-16] (Vimicro Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
U3 BcmSqlStartupSvc;
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)
U2 IAStorDataMgrSvc;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U2 Stereo Service;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-22 19:00 - 2013-09-22 19:00 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-09-22 18:56 - 2013-09-22 18:56 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-22 18:56 - 2013-09-22 18:56 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-22 18:56 - 2013-09-22 18:56 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-22 18:56 - 2013-09-22 18:56 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-22 18:56 - 2013-09-22 18:56 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-22 18:49 - 2013-09-22 18:49 - 00913832 _____ (Oracle Corporation) C:\Users\Annie\Downloads\jxpiinstall.exe
2013-09-22 18:45 - 2013-09-22 18:45 - 00053334 _____ C:\Users\Annie\Downloads\FRST.txt
2013-09-22 18:19 - 2013-09-22 18:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CDEC911F-D33B-4AEF-8BA7-ADFB5F3AFB03}
2013-09-22 18:18 - 2013-09-22 18:18 - 00003254 _____ C:\Users\Annie\Desktop\eset.txt
2013-09-20 15:24 - 2013-09-20 15:24 - 03723656 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-20 14:40 - 2013-09-20 14:40 - 02347384 _____ (ESET) C:\Users\Annie\Downloads\esetsmartinstaller_enu.exe
2013-09-20 10:54 - 2013-09-20 13:53 - 00000000 ____D C:\Users\Annie\Documents\Pais
2013-09-20 07:56 - 2013-09-20 07:56 - 00000000 ____D C:\Users\Annie\AppData\Local\{F83CA616-1DF3-4DF8-BC48-EE155A1D9958}
2013-09-19 19:55 - 2013-09-19 19:56 - 00000000 ____D C:\Users\Annie\AppData\Local\{8650DED9-C7A1-4A86-A6CA-42B67B856F29}
2013-09-19 15:47 - 2013-09-19 15:47 - 01950594 _____ (Farbar) C:\Users\Annie\Desktop\FRST64.exe
2013-09-19 15:16 - 2013-09-19 15:16 - 01029675 _____ (Thisisu) C:\Users\Annie\Desktop\JRT.exe
2013-09-19 15:06 - 2013-09-19 15:07 - 00000000 ____D C:\AdwCleaner
2013-09-19 15:04 - 2013-09-19 15:04 - 01039554 _____ C:\Users\Annie\Downloads\adwcleaner.exe
2013-09-19 14:29 - 2013-09-19 14:29 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-19 14:29 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-19 14:28 - 2013-09-19 14:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Annie\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 20:31 - 2013-09-18 20:31 - 00030814 _____ C:\ComboFix.txt
2013-09-18 19:38 - 2011-06-26 08:45 - 00256000 _____ C:\windows\PEV.exe
2013-09-18 19:38 - 2010-11-07 19:20 - 00208896 _____ C:\windows\MBR.exe
2013-09-18 19:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00098816 _____ C:\windows\sed.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00080412 _____ C:\windows\grep.exe
2013-09-18 19:38 - 2000-08-31 02:00 - 00068096 _____ C:\windows\zip.exe
2013-09-18 19:37 - 2013-09-18 20:32 - 00000000 ____D C:\Qoobox
2013-09-18 19:31 - 2013-09-18 19:31 - 00003420 _____ C:\windows\System32\Tasks\BitGuard
2013-09-18 19:19 - 2013-09-18 20:25 - 00000000 ____D C:\windows\erdnt
2013-09-18 19:15 - 2013-09-18 19:15 - 05128653 ____R (Swearware) C:\Users\Annie\Desktop\ComboFix.exe
2013-09-18 08:07 - 2013-09-18 08:07 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-18 08:03 - 2013-09-18 08:06 - 131918888 _____ C:\Users\Annie\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 01029675 _____ (Thisisu) C:\Users\Annie\Downloads\JRT6.1.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 00000000 ____D C:\windows\ERUNT
2013-09-18 00:24 - 2013-09-18 00:24 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-18 00:24 - 2013-09-18 00:24 - 00000000 ____D C:\Users\Annie\AppData\Roaming\AVG2014
2013-09-18 00:20 - 2013-09-18 00:20 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-18 00:20 - 2013-09-18 00:20 - 00000000 ____D C:\Users\Annie\AppData\Roaming\TuneUp Software
2013-09-18 00:19 - 2013-09-19 15:05 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-18 00:19 - 2013-09-18 00:19 - 00000000 ____D C:\$AVG
2013-09-18 00:17 - 2013-09-18 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-18 00:13 - 2013-09-22 18:24 - 00000000 ____D C:\ProgramData\MFAData
2013-09-18 00:13 - 2013-09-18 00:55 - 00000000 ____D C:\Users\Annie\AppData\Local\Avg2014
2013-09-18 00:13 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\MFAData
2013-09-18 00:12 - 2013-09-18 00:12 - 04425448 _____ (AVG Technologies) C:\Users\Annie\Downloads\avg_free_stb_all_2014_4116.exe
2013-09-18 00:10 - 2013-09-18 00:11 - 02092792 _____ C:\Users\Annie\Downloads\avira_free_4052_antivirus.exe
2013-09-17 23:49 - 2013-09-17 23:49 - 00377856 _____ C:\Users\Annie\Downloads\gmer_2.1.19163.exe
2013-09-17 23:43 - 2013-09-17 23:46 - 00032712 _____ C:\Users\Annie\Downloads\Addition.txt
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:33 - 2013-09-17 23:37 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:16 - 2013-09-17 23:24 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:15 - 2013-09-17 23:16 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:14 - 2013-09-17 23:15 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-14 13:28 - 2013-09-22 18:57 - 00000000 ____D C:\ProgramData\Oracle
2013-09-13 13:48 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-13 13:48 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-13 13:48 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-13 13:48 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-13 13:48 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-13 13:48 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-13 13:48 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-13 13:48 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-13 13:48 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 13:27 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-09-12 13:27 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-09-12 13:27 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-09-12 13:27 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-12 13:27 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-12 13:27 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-09-12 13:27 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-09-12 13:27 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-12 13:27 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-12 13:27 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-09-12 13:27 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-09-12 13:27 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-09-12 13:27 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 13:27 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-12 13:27 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-12 13:27 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-09-18 00:05 - 00000111 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-08-25 20:05 - 2013-09-18 00:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-08-25 20:02 - 2013-08-25 20:17 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:02 - 2013-08-25 20:05 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 09:57 - 2013-09-20 11:52 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:51 - 2013-09-22 17:18 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-08-24 09:43 - 2013-08-24 09:46 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
==================== One Month Modified Files and Folders =======
2013-09-22 20:24 - 2012-05-09 16:53 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-22 20:20 - 2011-11-21 22:41 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-22 19:36 - 2013-02-14 20:31 - 00000928 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002UA.job
2013-09-22 19:36 - 2013-02-14 20:31 - 00000906 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1960928456-1631978861-405587205-1002Core.job
2013-09-22 19:02 - 2012-05-12 20:21 - 00000000 ____D C:\Users\Annie\AppData\Local\Adobe
2013-09-22 19:00 - 2013-09-22 19:00 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-09-22 19:00 - 2012-05-12 20:10 - 00000000 ____D C:\ProgramData\Adobe
2013-09-22 19:00 - 2012-05-12 20:10 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-22 18:57 - 2013-09-14 13:28 - 00000000 ____D C:\ProgramData\Oracle
2013-09-22 18:56 - 2013-09-22 18:56 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-09-22 18:56 - 2013-09-22 18:56 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-09-22 18:56 - 2013-09-22 18:56 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-09-22 18:56 - 2013-09-22 18:56 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-22 18:56 - 2013-09-22 18:56 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-22 18:56 - 2013-05-22 22:40 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-09-22 18:56 - 2013-05-22 22:40 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-09-22 18:49 - 2013-09-22 18:49 - 00913832 _____ (Oracle Corporation) C:\Users\Annie\Downloads\jxpiinstall.exe
2013-09-22 18:45 - 2013-09-22 18:45 - 00053334 _____ C:\Users\Annie\Downloads\FRST.txt
2013-09-22 18:34 - 2011-11-21 13:38 - 00699682 _____ C:\windows\system32\perfh007.dat
2013-09-22 18:34 - 2011-11-21 13:38 - 00149790 _____ C:\windows\system32\perfc007.dat
2013-09-22 18:34 - 2009-07-14 07:13 - 01620684 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-22 18:31 - 2011-11-21 22:03 - 01486982 _____ C:\windows\WindowsUpdate.log
2013-09-22 18:24 - 2013-09-18 00:13 - 00000000 ____D C:\ProgramData\MFAData
2013-09-22 18:19 - 2013-09-22 18:19 - 00000000 ____D C:\Users\Annie\AppData\Local\{CDEC911F-D33B-4AEF-8BA7-ADFB5F3AFB03}
2013-09-22 18:18 - 2013-09-22 18:18 - 00003254 _____ C:\Users\Annie\Desktop\eset.txt
2013-09-22 17:18 - 2013-08-24 09:51 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Dropbox
2013-09-22 05:12 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-21 21:20 - 2011-11-21 22:41 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-21 18:34 - 2012-05-09 16:06 - 02101100 _____ C:\FaceProv.log
2013-09-21 18:34 - 2011-11-21 22:53 - 00000000 ____D C:\ProgramData\VeriFace
2013-09-20 15:24 - 2013-09-20 15:24 - 03723656 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-20 15:24 - 2012-05-09 16:53 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 15:24 - 2012-05-09 16:53 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 15:24 - 2012-05-09 16:53 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 14:40 - 2013-09-20 14:40 - 02347384 _____ (ESET) C:\Users\Annie\Downloads\esetsmartinstaller_enu.exe
2013-09-20 13:53 - 2013-09-20 10:54 - 00000000 ____D C:\Users\Annie\Documents\Pais
2013-09-20 12:01 - 2012-05-09 16:09 - 00067624 _____ C:\Users\Annie\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-20 11:52 - 2013-08-24 09:57 - 00000000 ___RD C:\Users\Annie\Dropbox
2013-09-20 11:49 - 2013-03-14 23:01 - 00024629 _____ C:\Users\Annie\Documents\Gedanken 14.3.2013.odt
2013-09-20 09:14 - 2012-05-30 20:25 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Skype
2013-09-20 07:56 - 2013-09-20 07:56 - 00000000 ____D C:\Users\Annie\AppData\Local\{F83CA616-1DF3-4DF8-BC48-EE155A1D9958}
2013-09-19 19:56 - 2013-09-19 19:55 - 00000000 ____D C:\Users\Annie\AppData\Local\{8650DED9-C7A1-4A86-A6CA-42B67B856F29}
2013-09-19 19:36 - 2012-09-14 22:07 - 00000000 ____D C:\Users\Annie\Documents\Youcam
2013-09-19 15:47 - 2013-09-19 15:47 - 01950594 _____ (Farbar) C:\Users\Annie\Desktop\FRST64.exe
2013-09-19 15:47 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-19 15:47 - 2009-07-14 06:45 - 00021280 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-19 15:40 - 2011-11-21 23:04 - 00461693 _____ C:\windows\system32\fastboot.set
2013-09-19 15:39 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-19 15:39 - 2009-07-14 06:51 - 00062326 _____ C:\windows\setupact.log
2013-09-19 15:16 - 2013-09-19 15:16 - 01029675 _____ (Thisisu) C:\Users\Annie\Desktop\JRT.exe
2013-09-19 15:07 - 2013-09-19 15:06 - 00000000 ____D C:\AdwCleaner
2013-09-19 15:05 - 2013-09-18 00:19 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-19 15:04 - 2013-09-19 15:04 - 01039554 _____ C:\Users\Annie\Downloads\adwcleaner.exe
2013-09-19 15:00 - 2010-11-21 05:47 - 00309494 _____ C:\windows\PFRO.log
2013-09-19 14:33 - 2012-09-29 11:45 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Spotify
2013-09-19 14:29 - 2013-09-19 14:29 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-19 14:29 - 2013-09-19 14:29 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-19 14:28 - 2013-09-19 14:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Annie\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-18 20:32 - 2013-09-18 19:37 - 00000000 ____D C:\Qoobox
2013-09-18 20:31 - 2013-09-18 20:31 - 00030814 _____ C:\ComboFix.txt
2013-09-18 20:31 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-09-18 20:25 - 2013-09-18 19:19 - 00000000 ____D C:\windows\erdnt
2013-09-18 20:23 - 2009-07-14 04:34 - 00000215 _____ C:\windows\system.ini
2013-09-18 19:31 - 2013-09-18 19:31 - 00003420 _____ C:\windows\System32\Tasks\BitGuard
2013-09-18 19:15 - 2013-09-18 19:15 - 05128653 ____R (Swearware) C:\Users\Annie\Desktop\ComboFix.exe
2013-09-18 08:22 - 2013-08-22 20:58 - 00000000 ____D C:\ProgramData\Avira
2013-09-18 08:07 - 2013-09-18 08:07 - 00000000 ____D C:\ProgramData\AVAST Software
2013-09-18 08:06 - 2013-09-18 08:03 - 131918888 _____ C:\Users\Annie\Downloads\avast_free_antivirus_setup_8.0.1497.376.exe
2013-09-18 00:55 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\Avg2014
2013-09-18 00:40 - 2013-09-18 00:40 - 01029675 _____ (Thisisu) C:\Users\Annie\Downloads\JRT6.1.exe
2013-09-18 00:40 - 2013-09-18 00:40 - 00000000 ____D C:\windows\ERUNT
2013-09-18 00:24 - 2013-09-18 00:24 - 00003230 _____ C:\windows\System32\Tasks\SidebarExecute
2013-09-18 00:24 - 2013-09-18 00:24 - 00000000 ____D C:\Users\Annie\AppData\Roaming\AVG2014
2013-09-18 00:20 - 2013-09-18 00:20 - 00000981 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-18 00:20 - 2013-09-18 00:20 - 00000000 ____D C:\Users\Annie\AppData\Roaming\TuneUp Software
2013-09-18 00:19 - 2013-09-18 00:19 - 00000000 ____D C:\$AVG
2013-09-18 00:17 - 2013-09-18 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-18 00:13 - 2013-09-18 00:13 - 00000000 ____D C:\Users\Annie\AppData\Local\MFAData
2013-09-18 00:12 - 2013-09-18 00:12 - 04425448 _____ (AVG Technologies) C:\Users\Annie\Downloads\avg_free_stb_all_2014_4116.exe
2013-09-18 00:11 - 2013-09-18 00:10 - 02092792 _____ C:\Users\Annie\Downloads\avira_free_4052_antivirus.exe
2013-09-18 00:05 - 2013-08-25 20:05 - 00000111 _____ C:\Users\Annie\AppData\Roaming\WB.CFG
2013-09-18 00:05 - 2013-08-25 20:05 - 00000005 _____ C:\Users\Annie\AppData\Roaming\WBPU-TTL.DAT
2013-09-17 23:49 - 2013-09-17 23:49 - 00377856 _____ C:\Users\Annie\Downloads\gmer_2.1.19163.exe
2013-09-17 23:46 - 2013-09-17 23:43 - 00032712 _____ C:\Users\Annie\Downloads\Addition.txt
2013-09-17 23:39 - 2013-09-17 23:39 - 00000000 ____D C:\FRST
2013-09-17 23:37 - 2013-09-17 23:33 - 00000472 _____ C:\Users\Annie\Downloads\defogger_disable.log
2013-09-17 23:33 - 2013-09-17 23:33 - 00000000 _____ C:\Users\Annie\defogger_reenable
2013-09-17 23:33 - 2012-05-09 16:06 - 00000000 ____D C:\Users\Annie
2013-09-17 23:32 - 2013-09-17 23:32 - 00050477 _____ C:\Users\Annie\Downloads\Defogger.exe
2013-09-17 23:24 - 2013-09-17 23:16 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-09-17 23:16 - 2013-09-17 23:15 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-09-17 23:15 - 2013-09-17 23:14 - 02094432 _____ C:\Users\Annie\Downloads\SecurityTaskManager_Setup-1.8d.exe
2013-09-17 16:53 - 2012-05-09 16:11 - 00000000 ____D C:\Users\Annie\AppData\Local\Google
2013-09-17 16:06 - 2012-12-06 18:05 - 00000000 ____D C:\Users\Annie\Documents\Songtexte
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-14 13:17 - 2012-05-09 16:07 - 00000000 ___RD C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-14 11:45 - 2009-07-14 06:45 - 00309312 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-13 13:48 - 2013-07-21 12:15 - 00000000 ____D C:\windows\system32\MRT
2013-09-13 13:41 - 2012-07-19 14:53 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-12 19:35 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Annie\AppData\Local\Spotify
2013-09-09 15:58 - 2012-06-07 19:33 - 00000000 ____D C:\Users\Annie\AppData\Roaming\vlc
2013-09-03 11:53 - 2013-09-03 11:53 - 00020537 _____ C:\Users\Annie\Documents\Drash zu Matthäus 7, 1-3.odt
2013-08-29 16:06 - 2013-08-29 16:06 - 00072123 _____ C:\Users\Annie\AppData\Local\CouponsMalibu.crx
2013-08-28 14:50 - 2013-08-28 14:50 - 00013682 _____ C:\Users\Annie\Documents\Packlisten.odt
2013-08-28 14:08 - 2013-08-28 14:08 - 00022551 _____ C:\Users\Annie\Documents\Du bist einmalig (Session 1).odt
2013-08-25 20:17 - 2013-08-25 20:02 - 00419208 _____ C:\Users\Annie\Downloads\Outro_Project(1).mov
2013-08-25 20:16 - 2013-08-25 20:16 - 01290686 _____ C:\Users\Annie\Downloads\RADTools.exe
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker
2013-08-25 20:16 - 2013-08-25 20:16 - 00000000 ____D C:\Program Files (x86)\RADVideo
2013-08-25 20:05 - 2013-08-25 20:02 - 37354532 _____ C:\Users\Annie\Downloads\Intro_Project(1).mov
2013-08-24 14:06 - 2013-05-26 11:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
2013-08-24 14:05 - 2013-08-24 14:05 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-24 13:43 - 2013-08-24 13:43 - 263560590 _____ C:\Users\Annie\Downloads\SAM_1114(1).AVI
2013-08-24 09:57 - 2013-08-24 09:57 - 00001039 _____ C:\Users\Annie\Desktop\Dropbox.lnk
2013-08-24 09:54 - 2013-08-24 09:54 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-08-24 09:46 - 2013-08-24 09:43 - 32966136 _____ (Dropbox, Inc.) C:\Users\Annie\Downloads\Dropbox 2.0.26.exe
Some content of TEMP:
====================
C:\Users\Annie\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-22 05:05
==================== End Of Log ============================
|
|
23.09.2013, 08:57
| #13 |
| /// the machine /// TB-Ausbilder | Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7: Werbe-PopUps (Warnung vor Spyware, wenig Speicherplatz,...) |
| backdoor.agent, backdoor.trace, backdoor.zapchast, bitguard, branding, coupons, device driver, driver pro, farbar, farbar recovery scan tool, fatal error, malware.trace, newtab, plug-in, pup.bprotector, pup.dealply.a, pup.optional.babsolution.a, pup.optional.babylon.a, pup.optional.bitguard.a, pup.optional.bprotector.a, pup.optional.datamngr.a, pup.optional.dealply.a, pup.optional.delta, pup.optional.delta.a, pup.optional.installcore.a, pup.optional.performersoft.a, pup.wirelesskeyview, svchost.exe, trojan.agent, trojan.banker, trojan.chinad, trojan.downloader, win32/adware.addlyrics.t, win32/adware.speedingupmypc.c |
Linear-Darstellung
