Hallo, seit einigen Tagen werde ich die Werbung einfach nicht mehr los.
Ich habt mir schon mal geholfen.
Hier die log files

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
Ran by Dell Latitude E6430 (administrator) on DELLLATITUDEE64 (27-07-2015 18:36:08)
Running from C:\Users\Dell Latitude E6430\Downloads
Loaded Profiles: Dell Latitude E6430 (Available Profiles: Dell Latitude E6430)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Windows SysTool) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(XTab system) C:\Program Files (x86)\MiuiTab\ProtectService.exe
() C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\SerialTouchService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(O2Micro International) C:\Windows\System32\o2flash.exe
() C:\Windows\SysWOW64\srvany.exe
(O2Micro.) C:\Windows\SysWOW64\SDIOAssist.exe
() C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\UsbTouchService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Steep Sex\Steep Sex.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(NEXIO CO., LTD.) C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Dell Latitude E6430\Downloads\FRST64 (4).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [626552 2012-01-25] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TdmNotify] => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-02-13] (IDT, Inc.)
HKLM\...\Run: [DFEPApplication] => C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe [7078424 2012-05-08] (Dell Inc.)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4756240 2012-03-29] (Intel(R) Corporation)
HKLM\...\Run: [Andy] => "C:\Program Files\Andy\HandyAndy.exe"
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-02-28] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)
HKLM-x32\...\Run: [nxGestureAction] => C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe [49152 2011-08-04] (NEXIO CO., LTD.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2584240 2015-04-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [WirelessManager] => C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe [20480 2011-12-08] (Ericsson AB)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=dspp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=dspp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchtotal.info/?l=1&q={searchTerms}&pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88
SearchScopes: HKLM-x32 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchtotal.info/?l=1&q={searchTerms}&pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-390905103-1377331367-2787750936-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-06-20] (Oracle Corporation)
BHO: BitSaveer -> {9862216F-7A66-460A-9B89-62374CAAAA9E} -> C:\Program Files (x86)\BitSaveer\hPthu3WqpRvHR9.x64.dll [2015-07-27] ()
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-06-20] (Oracle Corporation)
BHO: DDealExpresS -> {E7FBB7A5-3332-494B-ADFC-6CAF73C755F2} -> C:\Program Files (x86)\DDealExpresS\FjP9jeaVghpZrO.x64.dll [2015-07-10] ()
BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-15] (Thinkgood Co. Limited)
BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-15] (Thinkgood Co. Limited)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO-x32: BitSaveer -> {9862216F-7A66-460A-9B89-62374CAAAA9E} -> C:\Program Files (x86)\BitSaveer\hPthu3WqpRvHR9.dll [2015-07-27] ()
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: DDealExpresS -> {E7FBB7A5-3332-494B-ADFC-6CAF73C755F2} -> C:\Program Files (x86)\DDealExpresS\FjP9jeaVghpZrO.dll [2015-07-10] ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{64300E22-83CD-431B-A812-8DA5B1F4F0E3}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A5475C1D-211B-47F0-89CC-DCC22A55B672}: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{AF22A6C3-E85C-47D9-BE33-7E2B7A5B2F1F}: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF DefaultSearchEngine,S: WebSearch
FF DefaultSearchUrl: hxxp://websearch.searchtotal.info/?pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88&l=1&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine: delta-homes
FF SelectedSearchEngine,S: WebSearch
FF Homepage: hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
FF Keyword.URL: hxxp://websearch.searchtotal.info/?pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88&l=1&q=
FF Plugin: @java.com/DTPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-04-30] (pdfforge GmbH)
FF SearchPlugin: C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\searchplugins\WebSearch.xml [2015-06-10]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\delta-homes.xml [2015-07-16]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml [2015-07-10]
FF Extension: DealExapareEss - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\5t@0.net [2015-07-10]
FF Extension: Avira Browser Safety - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\abs@avira.com [2015-07-02]
FF Extension: Default NewTab - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\default_newtabff@gmail.com [2015-07-16]
FF Extension: deskCut - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\deskCutv2@gmail.com [2015-07-10]
FF Extension: bestadblocker - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\lq@d.org [2015-06-10]
FF Extension: DigiSaveer - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\U9X9@ujZN8J.net [2015-06-23]
FF Extension: PPriceMINuSi - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\Uc@tnS.org [2015-06-10]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-05-12]
FF Extension: Adblock Plus - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-07-02]
FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\searchffv2@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-16]
CHR Extension: (Google Search) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-16]
CHR Extension: (Google Wallet) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-16]
CHR Extension: (Gmail) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-16]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 dcevt64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe [222144 2012-01-16] (Dell Inc.)
R2 dcstor64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe [293824 2012-01-16] (Dell Inc.)
R2 DFEPService; C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe [2279960 2012-05-08] (Dell Inc.)
R2 e5bd2542; c:\Program Files (x86)\SeekerModule\SeekerModule.dll [1627648 2015-06-20] () [File not signed]
R2 EmbassyService; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [218504 2012-01-17] ()
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392 2015-06-02] (Foxit Software Inc.)
R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-07-15] (XTab system)
R2 iNexioTouchDriverService; C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe [45056 2011-08-04] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 O2FLASH; C:\Windows\system32\o2flash.exe [244328 2011-11-16] (O2Micro International)
R2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
R2 Poised Measurement; C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe [8016309 2015-07-23] () [File not signed] <==== ATTENTION
R2 Steep Sex; C:\Program Files (x86)\Steep Sex\Steep Sex.exe [8016488 2015-07-08] () [File not signed] <==== ATTENTION
S2 tcsd_win32.exe; C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1637888 2011-10-08] () [File not signed]
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [545280 2015-07-16] (Windows SysTool) [File not signed] <==== ATTENTION
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [337040 2015-07-14] (Taiwan Shui Mu Chih Ching Technology Limited.) <==== ATTENTION
R2 WMCoreService; C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
S3 WvPCR; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
S2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [X]
S4 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S4 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2014-04-17] (Broadcom Corporation.)
R3 d554gps; C:\Windows\System32\DRIVERS\d554gps64.sys [103184 2012-03-01] (Ericsson AB)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [61992 2011-01-14] (Ericsson AB)
R3 dcdbas; C:\Windows\System32\DRIVERS\dcdbas64.sys [38472 2012-03-03] (Dell Inc.)
R3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2011-10-05] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [29736 2011-10-05] (Ericsson AB)
S3 HCWF9BDA; C:\Windows\System32\Drivers\hcwF9b64.sys [188376 2013-09-25] (ITE                      )
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [443208 2012-10-02] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [453960 2012-10-02] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [21832 2012-10-02] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [506184 2012-10-02] (MCCI Corporation)
S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [80384 2010-09-30] (Renesas Electronics Corporation) [File not signed]
S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [180736 2010-09-30] (Renesas Electronics Corporation) [File not signed]
R1 PStrip64; C:\Windows\System32\drivers\pstrip64.sys [13008 2006-09-30] ()
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [280448 2012-12-21] (Ericsson AB)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\Virtualbox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-27 18:35 - 2015-07-27 18:35 - 02146816 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\FRST64 (4).exe
2015-07-27 18:33 - 2015-07-27 18:33 - 02146816 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\Niepotwierdzony 269470.crdownload
2015-07-27 18:17 - 2015-07-27 18:17 - 00050477 _____ C:\Users\Dell Latitude E6430\Downloads\Defogger (1).exe
2015-07-27 16:02 - 2015-07-27 16:02 - 00000000 ____D C:\ProgramData\bbjgncdmiigkoggbhkjijeocidiipkek
2015-07-27 16:02 - 2015-07-27 16:02 - 00000000 ____D C:\Program Files (x86)\BitSaveer
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-07-25 19:31 - 2015-07-25 19:31 - 00000000 ____D C:\Windows\rescache
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install (1).exe
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install.exe
2015-07-24 22:45 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\CEF
2015-07-24 22:39 - 2015-07-24 22:39 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install (1).exe
2015-07-24 22:36 - 2015-07-24 22:36 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install.exe
2015-07-24 22:25 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-24 22:25 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-24 22:25 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-23 20:58 - 2015-07-23 20:58 - 00000000 ____D C:\7e3238667fae037d35378662fc2066
2015-07-23 18:52 - 2015-07-27 01:06 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\clip
2015-07-23 12:32 - 2015-07-23 12:28 - 294608054 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v7.pptx
2015-07-23 00:33 - 2015-07-23 00:33 - 00000000 ____D C:\Program Files (x86)\Poised Measurement
2015-07-22 20:07 - 2015-07-22 20:07 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-22 20:04 - 2015-07-22 20:04 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Apple
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-07-22 20:03 - 2015-07-22 20:04 - 41908568 _____ (Apple Inc.) C:\Users\Dell Latitude E6430\Downloads\QuickTimeInstaller.exe
2015-07-22 19:56 - 2015-07-22 19:04 - 294605680 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v6.pptx
2015-07-22 19:44 - 2015-07-27 01:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\PCHEALTH
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files\Microsoft Office
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-07-22 19:41 - 2015-07-27 01:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 __RHD C:\MSOCache
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-07-16 11:04 - 2015-07-27 01:29 - 00000000 ____D C:\Program Files (x86)\WinZipper
2015-07-16 11:04 - 2015-07-16 11:04 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\WinZipper
2015-07-16 11:04 - 2015-07-16 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
2015-07-16 11:02 - 2015-07-18 23:57 - 00000000 ____D C:\ProgramData\MailUpdate
2015-07-16 11:02 - 2015-07-16 11:02 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\MailUpdate
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-15 11:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 11:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 11:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 11:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 11:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 11:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 11:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 11:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 11:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 11:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 11:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 11:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 11:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 11:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 11:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 11:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 11:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 11:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 11:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 11:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 11:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 11:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 11:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 11:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 11:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 11:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 11:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 11:13 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 11:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 11:13 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 11:13 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 11:13 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 11:13 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 11:13 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 11:12 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 11:12 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 11:12 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 11:12 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 11:12 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 11:12 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 11:12 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 11:12 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 09:12 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 09:12 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 09:12 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 09:12 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 09:12 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 09:12 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 09:12 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 09:12 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 09:12 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 09:11 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 09:11 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 09:11 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-15 09:11 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 09:11 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 09:11 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 09:11 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 09:08 - 2015-07-14 09:08 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.Szablon CV2 od praca.gratka.pl.doc#
2015-07-13 13:37 - 2015-07-13 13:43 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00001351 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\Users\Public\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2015-07-13 13:36 - 2015-07-13 13:36 - 00000214 _____ C:\Users\Public\Documents\pre_fileassoc.tmp
2015-07-13 13:36 - 2015-07-13 13:36 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2015-07-13 13:35 - 2015-07-13 13:36 - 36816072 _____ (Foxit Software Inc. ) C:\Users\Dell Latitude E6430\Downloads\FoxitReader715.0425_prom_enu_Setup.exe
2015-07-11 08:33 - 2015-07-24 22:46 - 00000000 ____D C:\ProgramData\Adobe
2015-07-11 08:33 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe
2015-07-11 08:33 - 2015-07-11 08:33 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe
2015-07-10 20:05 - 2015-07-10 20:05 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_ga_install.exe
2015-07-10 15:17 - 2015-07-07 16:58 - 00012753 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0_1.odt
2015-07-10 15:17 - 2015-07-07 16:30 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_2.odt
2015-07-10 14:39 - 2015-07-10 14:39 - 03725912 _____ C:\Users\Dell Latitude E6430\Downloads\DBSV_09_Film.zip
2015-07-10 10:28 - 2015-07-24 22:45 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-10 10:28 - 2015-07-24 22:45 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-15 11:14 - 00001934 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-07-10 10:28 - 2015-07-10 15:15 - 00000000 ____D C:\ProgramData\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2015-07-10 10:28 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee
2015-07-10 10:24 - 2015-07-10 10:24 - 00000000 _____ C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2015-07-10 08:17 - 2015-07-10 08:17 - 00000000 ____D C:\Program Files (x86)\HowToSimplified
2015-07-10 08:17 - 2015-07-10 08:17 - 00000000 ____D C:\Program Files (x86)\DealExapareEss
2015-07-10 08:16 - 2015-07-10 08:16 - 00000000 ____D C:\Program Files (x86)\DDealExpresS
2015-07-09 19:58 - 2015-07-10 10:29 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe-BackupByPhotoshopCS6Portable
2015-07-09 13:23 - 2015-07-11 09:24 - 00001496 _____ C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-07-08 20:10 - 2015-07-08 20:10 - 00000000 ____D C:\Program Files (x86)\Steep Sex
2015-07-07 16:13 - 2015-06-28 16:33 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_1.odt
2015-07-07 16:13 - 2015-06-28 10:47 - 00013800 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0.odt
2015-07-06 09:59 - 2015-07-06 09:59 - 00000383 _____ C:\ftconfig.ini
2015-07-02 16:13 - 2015-07-02 16:13 - 00946636 _____ C:\Users\Dell Latitude E6430\Downloads\adblock_plus-2.6.9-an+sm+tb+fx.xpi
2015-07-02 15:51 - 2015-07-02 15:51 - 00358604 _____ C:\Users\Dell Latitude E6430\Downloads\nickmsg_216058_a24330bf-d6c8-455b-8a5a-689cb71282c2.wav
2015-06-28 10:32 - 2015-07-10 15:16 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.umowapolsko-niemiecka.doc#
2015-06-28 10:32 - 2015-06-10 14:45 - 00471092 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0.odt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-27 18:36 - 2015-02-19 01:17 - 00032128 _____ C:\Users\Dell Latitude E6430\Downloads\FRST.txt
2015-07-27 18:36 - 2015-02-19 01:17 - 00000000 ____D C:\FRST
2015-07-27 18:19 - 2015-02-19 01:13 - 00000500 _____ C:\Users\Dell Latitude E6430\Downloads\defogger_disable.log
2015-07-27 16:02 - 2014-11-28 23:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-27 15:08 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-27 15:08 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-27 14:43 - 2015-06-10 14:43 - 00000456 _____ C:\Windows\Tasks\Bidaily Synchronize Task[973b].job
2015-07-27 13:00 - 2015-03-06 11:09 - 00000442 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-07-27 11:48 - 2014-04-17 13:52 - 02013945 _____ C:\Windows\WindowsUpdate.log
2015-07-27 01:31 - 2014-04-17 22:45 - 00732486 _____ C:\Windows\system32\perfh015.dat
2015-07-27 01:31 - 2014-04-17 22:45 - 00156064 _____ C:\Windows\system32\perfc015.dat
2015-07-27 01:31 - 2009-07-14 07:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-27 01:30 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-27 01:27 - 2014-07-24 22:34 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\vlc
2015-07-27 01:26 - 2015-02-17 22:52 - 00189860 _____ C:\Windows\PFRO.log
2015-07-27 01:26 - 2015-02-17 22:52 - 00018026 _____ C:\Windows\setupact.log
2015-07-27 01:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-27 01:26 - 2009-07-14 06:45 - 00547104 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-27 01:07 - 2015-06-15 08:35 - 00000024 _____ C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-07-27 01:07 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2015-07-24 23:03 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-24 23:03 - 2014-12-15 10:33 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-24 23:03 - 2014-05-11 08:33 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-24 23:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-23 20:59 - 2009-07-14 07:08 - 00032520 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-23 20:58 - 2014-05-11 09:03 - 00000000 ____D C:\Windows\system32\MRT
2015-07-22 20:07 - 2014-04-17 15:12 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\WirelessManager
2015-07-22 19:48 - 2014-04-17 14:29 - 00165088 _____ C:\Users\Dell Latitude E6430\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-22 19:44 - 2010-11-21 09:17 - 00000000 ____D C:\Windows\ShellNew
2015-07-22 19:44 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-07-22 19:43 - 2015-05-26 22:05 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-07-22 19:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-07-17 19:02 - 2014-09-11 14:41 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\motory
2015-07-16 11:03 - 2015-06-20 02:10 - 00000000 ____D C:\Program Files (x86)\MiuiTab
2015-07-16 11:02 - 2015-06-20 02:10 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
2015-07-16 10:04 - 2014-08-14 11:17 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\gotgolsad
2015-07-13 13:43 - 2015-05-05 18:45 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-10 16:16 - 2015-05-07 08:24 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\changhong
2015-07-10 10:29 - 2014-05-09 11:00 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2014-05-09 11:00 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-10 08:17 - 2015-06-10 14:45 - 00000000 ____D C:\ProgramData\11807790828359206578
2015-07-09 13:12 - 2014-08-04 12:30 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\64
2015-07-07 16:15 - 2015-04-20 11:09 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\Firmenpapier
2015-07-07 13:40 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-04 19:45 - 2015-06-20 09:23 - 00000000 ____D C:\Program Files (x86)\DigiSSavere
2015-07-04 19:45 - 2015-06-20 09:20 - 00000000 ____D C:\Program Files (x86)\DigiSaveer
2015-07-03 08:43 - 2014-05-11 09:03 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 15:51 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

==================== Files in the root of some directories =======

2015-06-15 08:35 - 2015-07-27 01:07 - 0000024 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-02-24 01:49 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bak
2015-03-03 14:50 - 2015-04-12 10:05 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bk!
2015-03-03 14:50 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bko
2015-02-24 00:05 - 2015-04-12 14:26 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.ini
2015-07-09 13:23 - 2015-07-11 09:24 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-05-07 09:42 - 2015-06-08 08:17 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
2015-01-10 18:05 - 2015-01-10 18:05 - 0007603 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Resmon.ResmonCfg
2015-07-10 10:24 - 2015-07-10 10:24 - 0000000 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2014-05-09 10:53 - 2014-05-09 10:53 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
C:\Users\Dell Latitude E6430\AppData\Local\Temp\2E2.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\fsdB46.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\Opera_Mini_PC.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\Quarantine.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\setacl.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-23 09:10

==================== End of log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version:26-07-2015
Ran by Dell Latitude E6430 at 2015-07-27 18:40:11
Running from C:\Users\Dell Latitude E6430\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-390905103-1377331367-2787750936-500 - Administrator - Disabled)
Dell Latitude E6430 (S-1-5-21-390905103-1377331367-2787750936-1000 - Administrator - Enabled) => C:\Users\Dell Latitude E6430
Gość (S-1-5-21-390905103-1377331367-2787750936-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.0.0.74 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
BayHunter - Deinstallation (HKLM-x32\...\BayHunter_is1) (Version: 4.40 - Mathias Gerlach [aborange.de])
BayWotch v4.2.24 (HKLM-x32\...\baywotch4_is1) (Version:  - Elmar Denkmann)
BioAPI Framework (Version: 1.0.2 - Dell Inc.) Hidden
BitSaveer (HKLM-x32\...\{A3FC46A0-9B62-0EF3-B475-743B3A2762B1}) (Version:  - ) <==== ATTENTION
Button Snip Dies! für www.snip.pl, ver. 2.0 (HKLM-x32\...\SnipItButton) (Version:  - )
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version:  - )
China Weather Forecast (HKLM-x32\...\{7223EDAC-E091-B3C1-BD91-B66CE557800F}) (Version:  - "") <==== ATTENTION
Custom (Version: 01.00.00.000 - Wave Systems Corp.) Hidden
DALGAKIRAN COMPRESSOR (HKLM-x32\...\dalgakiran.presenter) (Version: 1.0 - UNKNOWN)
DALGAKIRAN COMPRESSOR (x32 Version: 1.0 - UNKNOWN) Hidden
Dell Backup and Recovery Manager (HKLM\...\{50B4B603-A4C6-4739-AE96-6C76A0F8A388}) (Version: 1.3.1 - Dell Inc.)
Dell Client Configuration Toolkit (HKLM-x32\...\{C8EA30FC-B20B-465E-9D8A-CDDC09EA72D4}) (Version: 2.1 - Dell)
Dell Client System Update (HKLM-x32\...\{2B2B45B1-3CA0-4F8D-BBB3-AC77ED46A0FE}) (Version: 1.2.3 - Dell Inc.)
Dell Data Protection | Access (HKLM\...\{ABBA2EA4-740E-4052-902B-9CA70B081E3F}) (Version: 2.2.00003.009 - Dell Inc.)
Dell Feature Enhancement Pack (HKLM\...\{992D1CE7-A20F-4AB0-9D9D-AFC3418844DA}) (Version: 2.2.000 - Dell)
Dell Mobile Broadband Manager (HKLM-x32\...\{23EEC842-57ED-4055-A056-9D4185DFB1AA}) (Version: 7.1.0.2 - Dell)
Dell OpenManage Client Instrumentation (HKLM\...\{D390C5DD-9312-4F70-B3B1-4EAE635CDA17}) (Version: 8.1.0.242 - Dell)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1211.101.114 - ALPS ELECTRIC CO., LTD.)
Dell Wireless HSPA Mini-Card Drivers (HKLM-x32\...\{9D583F01-A973-4B04-90BD-FB7886779090}) (Version: 7.2.4.1 - Dell)
DellAccess (Version: 01.01.00.104 - Wave Systems Corp.) Hidden
EMBASSY Client Core (Version: 01.01.00.036 - Wave Systems Corp.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 3.5.116.602 - Foxit Software Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.1.5.425 - Foxit Software Inc.)
Gemalto (Version: 01.64.01.0010 - Wave Systems Corp) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
HP Deskjet 1050 J410 series — badanie mające na celu poprawę produktów (HKLM\...\{52A87876-4D1A-4524-9F06-53A490E6E34D}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 1050 J410 series — podstawowe oprogramowanie urządzenia (HKLM\...\{B6A3D97D-484B-48B5-85C6-361D9FA25CDF}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 1050 J410 series Pomoc (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6388.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.8 - Intel)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 7 Update 79 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417079FF}) (Version: 7.0.790 - Oracle)
Java SE Development Kit 7 Update 79 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170790}) (Version: 1.7.0.790 - Oracle)
LED softwore11 (HKLM-x32\...\LED softwore11) (Version:  - )
MAGIX Fastcut (HKLM\...\MX.{4313C595-29E9-484A-B861-3A8D363FCAA5}) (Version: 1.0.0.63 - MAGIX Software GmbH)
MAGIX Fastcut (Version: 1.0.0.63 - MAGIX Software GmbH) Hidden
Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.4.0.3000 - Maxthon International Limited)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
MediaInfo 0.7.72 (HKLM\...\MediaInfo) (Version: 0.7.72 - MediaArea.net)
Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mouse Recorder Pro 2.0.7.5 (HKLM-x32\...\{889E44CE-435C-4D37-B302-A7E43339E5FA}_is1) (Version:  - Nemex Studios)
Mozilla Firefox 33.1.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 pl)) (Version: 33.1.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MPC-HC 1.7.8 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.8 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MultiRes (remove only) (HKLM-x32\...\MultiRes (remove only)) (Version:  - )
NTRU TCG Software Stack (Version: 2.1.37 - Security Innovation, Inc.) Hidden
nxTCon (HKLM-x32\...\{53781579-B144-47FA-9F33-69DA28CCAB2B}) (Version: 7.90 - iNexio)
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{6DC8AD9A-28D0-4800-818D-61667A971ED1}) (Version: 3.0.07.37 - O2Micro International LTD.)
O2Micro Flash Memory Card Windows Driver (x32 Version: 3.0.07.37 - O2Micro International LTD.) Hidden
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Opera Mini pc  1.0 (HKLM-x32\...\Opera Mini pc ) (Version: 1.0 - ECS, Inc.)
Opera Mobile Emulator (HKLM-x32\...\{1826D0CA-F479-4430-9EFE-86E8E783505B}_is1) (Version:  - Opera Software ASA)
Oprogramowanie Intel® PROSet/Wireless WiFi (HKLM\...\{54EB8041-1115-4406-AA4B-44D236E84B3B}) (Version: 15.01.1000.0927 - Intel Corporation)
Pakiet sterowników systemu Windows - Dell Inc. PBADRV System  (09/11/2009 1.0.1.6) (HKLM\...\9512AA21B791B05A54E27065C45BBC417AB282DF) (Version: 09/11/2009 1.0.1.6 - Dell Inc.)
Paragon Alignment Tool™ 3.0 (HKLM-x32\...\{4D83E500-4D0C-11DF-A750-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PC-CCID (Version: 2.0.0 - Gemalto) Hidden
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{46889070-D447-4936-A5D3-246DB972FA2E}) (Version: 2.0.6.16537 - pdfforge GmbH)
PDF24 Creator 6.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation)
PowerStrip 3 (remove only) (HKLM-x32\...\PowerStrip 3 (remove only)) (Version:  - )
Preboot Manager (Version: 03.03.00.090 - Wave Systems Corp.) Hidden
Private Information Manager (Version: 07.01.00.030 - Wave Systems Corp.) Hidden
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Reksi i ortografia (HKLM-x32\...\{16757B5A-6465-40F5-9A80-DD8160912497}) (Version: 1.0.0 - AidemMedia)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
SeekerModule (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{e5bd2542}) (Version:  - Software Publisher) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - Silicon Laboratories)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SPBA 5.9 (Version: 5.9.4.6901 - UPEK Inc.) Hidden
toolkit32for64bit (x32 Version: 7.67.47.0000 - Wave Systems Corp) Hidden
Trusted Drive Manager (Version: 4.5.0.136 - Wave Systems Corp.) Hidden
Upek Touchchip Fingerprint Reader (Version: 1.2.004 - Dell Inc.) Hidden
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Wave Crypto Runtime 2.0.7.0 x86 (x32 Version: 02.00.07.0000 - Wave Systems Corp) Hidden
Wave Infrastructure Installer (Version: 07.67.60.0020 - Wave Systems Corp) Hidden
Wave Support Software Installer (Version: 05.13.00.051 - Wave Systems Corp) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2410 - Broadcom Corporation)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinX HD Video Converter Deluxe 5.5.3 (HKLM-x32\...\WinX HD Video Converter Deluxe_is1) (Version:  - Digiarty Software, Inc.)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
WinZipper (HKLM-x32\...\WinZipper) (Version: 1.5.104 - Taiwan Shui Mu Chih Ching Technology Limited.) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-390905103-1377331367-2787750936-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Restore Points =========================

22-07-2015 20:04:58 Installed QuickTime 7
23-07-2015 20:58:19 Windows Update
24-07-2015 09:55:51 Windows Update
27-07-2015 01:06:54 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-07-15 11:14 - 00000057 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
0.0.0.1	mssplus.mcafee.com


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {2206CB60-5659-46AE-A736-66080083B115} - System32\Tasks\HPCustParticipation HP Deskjet 1050 J410 series => C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {7A72C3A3-1B2E-47AD-A16C-DF94F958E388} - System32\Tasks\{413AA971-ECB9-411F-8547-066D6B9CF934} => pcalua.exe -a "C:\Users\Dell Latitude E6430\AppData\Roaming\mystartsearch\UninstallManager.exe" -c -ptid=ima
Task: {86E6277E-692E-422E-9B08-5B40A59274B0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {EE7B30A3-3975-428C-A7B0-C9CE0BC36B19} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2014-12-11] (Maxthon International ltd.)
Task: {F485C0DA-F73C-4024-85C2-D12471259F35} - System32\Tasks\Bidaily Synchronize Task[973b] => c:\programdata\{074510f0-3d91-0963-0745-510f03d943c0}\removewat 2.2 6 windows 7 activator full version download.exe [2014-06-10] () <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Bidaily Synchronize Task[973b].job => c:\programdata\{074510f0-3d91-0963-0745-510f03d943c0}\removewat 2.2 6 windows 7 activator full version download.exe <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2012-03-09 17:10 - 2012-03-09 17:10 - 01530904 _____ () C:\Program Files\Dell\SysMgt\shared\bin\libxml2.dll
2012-01-17 07:45 - 2012-01-17 07:45 - 00218504 _____ () C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
2012-01-17 07:45 - 2012-01-17 07:45 - 00038792 _____ () C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\DeviceStatus.dll
2011-10-08 22:56 - 2011-10-08 22:56 - 00003072 _____ () C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\TspPopup_ENU.dll
2011-11-07 07:55 - 2011-11-07 07:55 - 00094720 _____ () C:\Windows\system32\Wavx_ESC_Logging.dll
2006-12-08 15:42 - 2014-04-17 14:21 - 00155136 _____ () C:\Windows\system32\BioAPI100.dll
2006-12-08 15:41 - 2014-04-17 14:21 - 00239104 _____ () C:\Windows\system32\BIOAPI_MDS300.dll
2015-04-01 09:51 - 2011-08-04 14:12 - 00045056 _____ () C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe
2014-04-17 14:27 - 2003-04-18 18:06 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe
2015-07-23 00:33 - 2015-07-23 00:33 - 08016309 _____ () C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe
2015-07-08 20:10 - 2015-07-08 20:10 - 08016488 _____ () C:\Program Files (x86)\Steep Sex\Steep Sex.exe
2015-04-16 17:42 - 2015-04-16 17:42 - 00997536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-04-17 14:00 - 2012-03-26 17:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-06-20 03:04 - 2015-06-20 03:04 - 01627648 _____ () c:\Program Files (x86)\SeekerModule\SeekerModule.dll
2015-07-27 16:01 - 2015-07-27 16:01 - 00140800 _____ () c:\windows\temp\tmpmihmx0.dll
2014-04-17 15:10 - 2011-07-13 10:10 - 00065576 ____R () C:\Program Files (x86)\Dell\Dell WWAN\WMCore\MBMDebug.dll
2011-07-13 10:10 - 2011-07-13 10:10 - 00065576 ____R () C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\MBMDebug.dll
2014-04-17 14:29 - 2012-02-21 14:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-06-10 08:59 - 2015-06-05 20:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libglesv2.dll
2015-06-10 08:59 - 2015-06-05 20:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.124\libegl.dll
2015-07-15 21:26 - 2015-07-13 10:14 - 16307888 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Dell Latitude E6430\Downloads\noname (1).eml:OECustomProperty
AlternateDataStreams: C:\Users\Dell Latitude E6430\Downloads\noname (2).eml:OECustomProperty
AlternateDataStreams: C:\Users\Dell Latitude E6430\Downloads\noname.eml:OECustomProperty

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\google.de -> www.google.de
IE trusted site: HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\mks.com.pl -> www.mks.com.pl
IE trusted site: HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\mks.com.pl -> hxxp://www.mks.com.pl


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dell Latitude E6430\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{BDC7AB67-481C-484B-BE68-77AB47D5B118}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{484B6629-F822-4DA3-9E6A-6B09148BFA35}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe
FirewallRules: [{2A65C367-EEB5-46A7-AC55-7FF70023155C}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{D567BD14-372C-4E12-B25F-868F58B018D2}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{DCA797DF-98EE-4B6F-AE8A-9ED24E21311A}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{F85D9B35-43BB-495F-8433-86128CD20506}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [TCP Query User{B62A35FF-3322-42D7-AE0B-805CF525BFB2}C:\program files (x86)\wintv\wintv7\wintv7.exe] => (Allow) C:\program files (x86)\wintv\wintv7\wintv7.exe
FirewallRules: [UDP Query User{6A221E4F-A19B-4C06-AB87-D43549E78592}C:\program files (x86)\wintv\wintv7\wintv7.exe] => (Allow) C:\program files (x86)\wintv\wintv7\wintv7.exe
FirewallRules: [{324D6D7D-93AC-48FE-8649-F402713B79EE}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{1DA0D1AF-5751-4649-A032-654D2210BF98}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{1E32FCAD-8623-4A25-A561-5079AF2E93CD}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{15EF7548-5581-4995-8E42-B896F769ADA9}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{8562C324-9354-4FCE-A26C-090F4C03169E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{8D33C8B6-5356-47B2-B6B6-DEC8A7E5018B}C:\program files (x86)\ledsoft11\ledstudio.exe] => (Allow) C:\program files (x86)\ledsoft11\ledstudio.exe
FirewallRules: [UDP Query User{8028B067-BFF5-4C02-81C7-921F6D4F1A27}C:\program files (x86)\ledsoft11\ledstudio.exe] => (Allow) C:\program files (x86)\ledsoft11\ledstudio.exe
FirewallRules: [{440D26B2-E576-4B81-B9B8-BA44521ABB44}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{810F8049-AB68-4B21-903B-6712651E916F}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe
FirewallRules: [UDP Query User{6D81EF6E-0DEF-4BDC-A365-868D0B62BB04}C:\program files\andy\andy.exe] => (Allow) C:\program files\andy\andy.exe
FirewallRules: [{615E225F-68D3-46E3-A239-CD019D145604}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/27/2015 06:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x14e0
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 05:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1618
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 05:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1430
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 04:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x4e4
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 04:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1354
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 03:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0xfa4
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 03:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x178c
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 02:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0xe44
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 02:19:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0xa30
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3

Error: (07/27/2015 01:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Nazwa modułu powodującego błąd: dup.exe, wersja: 1.5.104.8925, sygnatura czasowa: 0x55a4a2fd
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00014a94
Identyfikator procesu powodującego błąd: 0x1980
Godzina uruchomienia aplikacji powodującej błąd: 0xdup.exe0
Ścieżka aplikacji powodującej błąd: dup.exe1
Ścieżka modułu powodującego błąd: dup.exe2
Identyfikator raportu: dup.exe3


System errors:
=============
Error: (07/27/2015 03:07:20 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 03:05:06 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 03:03:11 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (07/27/2015 03:03:05 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 01:22:29 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 01:20:15 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (07/27/2015 01:18:16 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (07/27/2015 01:00:56 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.0.101192.168.137.0255.255.255.0

Error: (07/27/2015 12:49:21 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.0.101192.168.137.0255.255.255.0

Error: (07/27/2015 12:49:18 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0


Microsoft Office:
=========================
Error: (07/27/2015 06:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a9414e001d0c887fb57975dC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe3cbab821-347b-11e5-b12a-028037ec0200

Error: (07/27/2015 05:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94161801d0c883ca73de82C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe0bd72656-3477-11e5-b12a-028037ec0200

Error: (07/27/2015 05:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94143001d0c87f999073c8C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exedaf54243-3472-11e5-b12a-028037ec0200

Error: (07/27/2015 04:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a944e401d0c87b68ace1feC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exeaa13d360-346e-11e5-b12a-028037ec0200

Error: (07/27/2015 04:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94135401d0c87737c92923C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe79312bf9-346a-11e5-b12a-028037ec0200

Error: (07/27/2015 03:49:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94fa401d0c87306e5aed6C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe484fad83-3466-11e5-b12a-028037ec0200

Error: (07/27/2015 03:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94178c01d0c86ed601f5fbC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe176cdf0c-3462-11e5-b12a-028037ec0200

Error: (07/27/2015 02:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94e4401d0c86aa51e1171C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exee5eeb410-345d-11e5-b12a-028037ec0200

Error: (07/27/2015 02:19:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94a3001d0c866743acdc8C:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exeb50d452d-3459-11e5-b12a-028037ec0200

Error: (07/27/2015 01:49:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dup.exe1.5.104.892555a4a2fddup.exe1.5.104.892555a4a2fdc000000500014a94198001d0c862435714edC:\Program Files (x86)\WinZipper\dup.exeC:\Program Files (x86)\WinZipper\dup.exe842a76b6-3455-11e5-b12a-028037ec0200


CodeIntegrity Error:
===================================
  Date: 2015-02-20 10:14:23.072
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-02-20 10:14:22.930
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-02-17 13:34:00.327
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-17 13:34:00.325
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-17 11:54:54.390
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-17 11:54:54.279
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-16 09:57:11.304
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-16 09:57:11.175
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3340M CPU @ 2.70GHz
Percentage of memory in use: 79%
Total physical RAM: 3999.3 MB
Available physical RAM: 818.23 MB
Total Virtual: 8296.81 MB
Available Virtual: 4500.41 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:30.08 GB) NTFS
Drive d: (Aidem) (CDROM) (Total:0.44 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 20DD75EC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

==================== End of log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-07-27 18:56:48
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 LITEONIT_LCS-128M6S_2.5_7mm_128GB rev.DC7110D 119,24GB
Running: Gmer-19357 (1).exe; Driver: C:\Users\DELLLA~1\AppData\Local\Temp\awriiaob.sys


---- User code sections - GMER 2.1 ----

.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17         00000000760e1401 2 bytes JMP 7600b21b C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17           00000000760e1419 2 bytes JMP 7600b346 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17         00000000760e1431 2 bytes JMP 76088f29 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42         00000000760e144a 2 bytes CALL 75fe489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                 * 9
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17            00000000760e14dd 2 bytes JMP 76088822 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17     00000000760e14f5 2 bytes JMP 760889f8 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17            00000000760e150d 2 bytes JMP 76088718 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17     00000000760e1525 2 bytes JMP 76088ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17           00000000760e153d 2 bytes JMP 75fffca8 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                00000000760e1555 2 bytes JMP 760068ef C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17         00000000760e156d 2 bytes JMP 76088fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17           00000000760e1585 2 bytes JMP 76088b42 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17              00000000760e159d 2 bytes JMP 760886dc C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17           00000000760e15b5 2 bytes JMP 75fffd41 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17         00000000760e15cd 2 bytes JMP 7600b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20     00000000760e16b2 2 bytes JMP 76088ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe[1364] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31     00000000760e16bd 2 bytes JMP 76088671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                      00000000760e1401 2 bytes JMP 7600b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                        00000000760e1419 2 bytes JMP 7600b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                      00000000760e1431 2 bytes JMP 76088f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                      00000000760e144a 2 bytes CALL 75fe489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                 * 9
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                         00000000760e14dd 2 bytes JMP 76088822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                  00000000760e14f5 2 bytes JMP 760889f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                         00000000760e150d 2 bytes JMP 76088718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                  00000000760e1525 2 bytes JMP 76088ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                        00000000760e153d 2 bytes JMP 75fffca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                             00000000760e1555 2 bytes JMP 760068ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                      00000000760e156d 2 bytes JMP 76088fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                        00000000760e1585 2 bytes JMP 76088b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                           00000000760e159d 2 bytes JMP 760886dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                        00000000760e15b5 2 bytes JMP 75fffd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                      00000000760e15cd 2 bytes JMP 7600b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                  00000000760e16b2 2 bytes JMP 76088ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\WinZipper\winzipersvc.exe[1424] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                  00000000760e16bd 2 bytes JMP 76088671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                     00000000760e1401 2 bytes JMP 7600b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                       00000000760e1419 2 bytes JMP 7600b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                     00000000760e1431 2 bytes JMP 76088f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                     00000000760e144a 2 bytes CALL 75fe489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                 * 9
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                        00000000760e14dd 2 bytes JMP 76088822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                 00000000760e14f5 2 bytes JMP 760889f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                        00000000760e150d 2 bytes JMP 76088718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                 00000000760e1525 2 bytes JMP 76088ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                       00000000760e153d 2 bytes JMP 75fffca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                            00000000760e1555 2 bytes JMP 760068ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                     00000000760e156d 2 bytes JMP 76088fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                       00000000760e1585 2 bytes JMP 76088b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                          00000000760e159d 2 bytes JMP 760886dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                       00000000760e15b5 2 bytes JMP 75fffd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                     00000000760e15cd 2 bytes JMP 7600b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                 00000000760e16b2 2 bytes JMP 76088ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\MiuiTab\ProtectService.exe[2180] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                 00000000760e16bd 2 bytes JMP 76088671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExW + 17      00000000760e1401 2 bytes JMP 7600b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!EnumProcessModules + 17        00000000760e1419 2 bytes JMP 7600b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 17      00000000760e1431 2 bytes JMP 76088f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 42      00000000760e144a 2 bytes CALL 75fe489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                 * 9
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!EnumDeviceDrivers + 17         00000000760e14dd 2 bytes JMP 76088822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameA + 17  00000000760e14f5 2 bytes JMP 760889f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!QueryWorkingSetEx + 17         00000000760e150d 2 bytes JMP 76088718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameW + 17  00000000760e1525 2 bytes JMP 76088ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameW + 17        00000000760e153d 2 bytes JMP 75fffca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!EnumProcesses + 17             00000000760e1555 2 bytes JMP 760068ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetProcessMemoryInfo + 17      00000000760e156d 2 bytes JMP 76088fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetPerformanceInfo + 17        00000000760e1585 2 bytes JMP 76088b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!QueryWorkingSet + 17           00000000760e159d 2 bytes JMP 760886dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameA + 17        00000000760e15b5 2 bytes JMP 75fffd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExA + 17      00000000760e15cd 2 bytes JMP 7600b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 20  00000000760e16b2 2 bytes JMP 76088ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Poised Measurement\Poised Measurement.exe[2500] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 31  00000000760e16bd 2 bytes JMP 76088671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExW + 17                        00000000760e1401 2 bytes JMP 7600b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!EnumProcessModules + 17                          00000000760e1419 2 bytes JMP 7600b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 17                        00000000760e1431 2 bytes JMP 76088f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 42                        00000000760e144a 2 bytes CALL 75fe489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                 * 9
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!EnumDeviceDrivers + 17                           00000000760e14dd 2 bytes JMP 76088822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameA + 17                    00000000760e14f5 2 bytes JMP 760889f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!QueryWorkingSetEx + 17                           00000000760e150d 2 bytes JMP 76088718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameW + 17                    00000000760e1525 2 bytes JMP 76088ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameW + 17                          00000000760e153d 2 bytes JMP 75fffca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!EnumProcesses + 17                               00000000760e1555 2 bytes JMP 760068ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetProcessMemoryInfo + 17                        00000000760e156d 2 bytes JMP 76088fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetPerformanceInfo + 17                          00000000760e1585 2 bytes JMP 76088b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!QueryWorkingSet + 17                             00000000760e159d 2 bytes JMP 760886dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameA + 17                          00000000760e15b5 2 bytes JMP 75fffd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExA + 17                        00000000760e15cd 2 bytes JMP 7600b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 20                    00000000760e16b2 2 bytes JMP 76088ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Steep Sex\Steep Sex.exe[2708] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 31                    00000000760e16bd 2 bytes JMP 76088671 C:\Windows\syswow64\kernel32.dll

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\a4db30b9c77d                                                         
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\a4db30b9c77d (not active ControlSet)                                     

---- EOF - GMER 2.1 ----
         

hi,

Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  
  BitSaveer
  
  China Weather Forecast
  
  SeekerModule
  
  WinZipper
  
  
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix 15-07-23.01 - Dell Latitude E6430 27.07.2015  19:51:52.2.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1045.18.3999.332 [GMT 2:00]
ausgeführt von:: c:\users\Dell Latitude E6430\Desktop\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\bestadblocker
c:\program files (x86)\bestadblocker\GCbLOFcFYMgSoR.dat
c:\program files (x86)\bestadblocker\GCbLOFcFYMgSoR.exe
c:\program files (x86)\bestadblocker\GCbLOFcFYMgSoR.tlb
c:\program files (x86)\DDealExpresS
c:\program files (x86)\DDealExpresS\FjP9jeaVghpZrO.dat
c:\program files (x86)\DDealExpresS\FjP9jeaVghpZrO.dll
c:\program files (x86)\DDealExpresS\FjP9jeaVghpZrO.exe
c:\program files (x86)\DDealExpresS\FjP9jeaVghpZrO.tlb
c:\program files (x86)\DDealExpresS\FjP9jeaVghpZrO.x64.dll
c:\program files (x86)\DigiSaveer
c:\program files (x86)\DigiSaveer\afeif1dr6NXUh6.dat
c:\program files (x86)\DigiSaveer\afeif1dr6NXUh6.exe
c:\program files (x86)\DigiSaveer\afeif1dr6NXUh6.tlb
c:\program files (x86)\DigiSaveer\DigiSaveer.dat
c:\program files (x86)\DigiSaveer\DigiSaveer.exe
c:\program files (x86)\DigiSSavere
c:\program files (x86)\DigiSSavere\YuRt08bqdAL3MP.dat
c:\program files (x86)\DigiSSavere\YuRt08bqdAL3MP.exe
c:\program files (x86)\DigiSSavere\YuRt08bqdAL3MP.tlb
c:\program files (x86)\PriceMinus
c:\program files (x86)\PriceMinus\hGee57extxZvDY.dat
c:\program files (x86)\PriceMinus\hGee57extxZvDY.exe
c:\program files (x86)\PriceMinus\hGee57extxZvDY.tlb
c:\program files (x86)\SystemPro
c:\program files (x86)\SystemPro\SystemPro.dll
c:\programdata\11807790828359206578
c:\programdata\11807790828359206578\071ae3e4d5e8ee2c5cfd75b59795d82b.ini
c:\programdata\11807790828359206578\1547aa30421efb5b5cfd75b59795d82b.ini
c:\programdata\11807790828359206578\221f0558608d2f615cfd75b59795d82b.ini
c:\programdata\11807790828359206578\536d46fce6f1932f5cfd75b59795d82b.ini
c:\programdata\11807790828359206578\7a49f690c5f542775cfd75b59795d82b.ini
c:\programdata\11807790828359206578\8eb0729fbf1cb0525cfd75b59795d82b.ini
c:\programdata\11807790828359206578\92fa68bf3906b26c5cfd75b59795d82b.ini
c:\programdata\11807790828359206578\9df0869df39180495cfd75b59795d82b.ini
c:\programdata\11807790828359206578\b0024d0d5b9986765cfd75b59795d82b.ini
c:\programdata\11807790828359206578\b1b04b8135a80c975cfd75b59795d82b.ini
c:\programdata\11807790828359206578\d1644748bb1427535cfd75b59795d82b.ini
c:\programdata\11807790828359206578\e1a11ca282117dcd5cfd75b59795d82b.ini
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\5t@0.net
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\5t@0.net\bootstrap.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\5t@0.net\chrome.manifest
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\5t@0.net\content\bg.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\5t@0.net\install.rdf
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\lq@d.org
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\lq@d.org\bootstrap.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\lq@d.org\chrome.manifest
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\lq@d.org\content\bg.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\lq@d.org\install.rdf
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\staged\t@C1LwKd.net
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\staged\t@C1LwKd.net\bootstrap.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\staged\t@C1LwKd.net\chrome.manifest
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\staged\t@C1LwKd.net\content\bg.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\staged\t@C1LwKd.net\install.rdf
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\U9X9@ujZN8J.net
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\U9X9@ujZN8J.net\bootstrap.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\U9X9@ujZN8J.net\chrome.manifest
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\U9X9@ujZN8J.net\content\bg.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\U9X9@ujZN8J.net\install.rdf
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\Uc@tnS.org
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\Uc@tnS.org\bootstrap.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\Uc@tnS.org\chrome.manifest
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\Uc@tnS.org\content\bg.js
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\Uc@tnS.org\install.rdf
c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\searchplugins\WebSearch.xml
c:\users\Public\Documents\pre_fileassoc.tmp
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_AdobeUpdateService
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-06-27 bis 2015-07-27  ))))))))))))))))))))))))))))))
.
.
2015-07-27 17:56 . 2015-07-27 17:56	--------	d-----w-	c:\users\Public\AppData\Local\temp
2015-07-27 17:56 . 2015-07-27 17:56	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-07-27 17:46 . 2015-07-27 17:46	--------	d-----w-	c:\programdata\9ffbe2a00007fd2
2015-07-27 17:41 . 2015-07-27 17:41	--------	d-----w-	c:\program files (x86)\VS Revo Group
2015-07-27 14:02 . 2015-07-27 14:02	755200	----a-w-	c:\program files (x86)\Mozilla Firefox\dbghelp.dll
2015-07-27 14:02 . 2015-07-27 14:02	--------	d-----w-	c:\programdata\bbjgncdmiigkoggbhkjijeocidiipkek
2015-07-26 23:07 . 2015-07-26 23:07	--------	d-----w-	c:\users\Default\AppData\Local\Microsoft Help
2015-07-25 17:31 . 2015-07-25 17:31	--------	d-----w-	c:\windows\rescache
2015-07-24 20:45 . 2015-07-24 20:45	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Local\CEF
2015-07-24 20:25 . 2015-07-15 03:19	41984	----a-w-	c:\windows\system32\lpk.dll
2015-07-24 20:25 . 2015-07-15 03:19	100864	----a-w-	c:\windows\system32\fontsub.dll
2015-07-24 20:25 . 2015-07-15 03:19	14336	----a-w-	c:\windows\system32\dciman32.dll
2015-07-24 20:25 . 2015-07-15 03:19	46080	----a-w-	c:\windows\system32\atmlib.dll
2015-07-24 20:25 . 2015-07-15 02:55	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2015-07-24 20:25 . 2015-07-15 02:55	10240	----a-w-	c:\windows\SysWow64\dciman32.dll
2015-07-24 20:25 . 2015-07-15 02:55	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2015-07-24 20:25 . 2015-07-15 02:54	25600	----a-w-	c:\windows\SysWow64\lpk.dll
2015-07-24 20:25 . 2015-07-15 01:59	372224	----a-w-	c:\windows\system32\atmfd.dll
2015-07-24 20:25 . 2015-07-15 01:52	299008	----a-w-	c:\windows\SysWow64\atmfd.dll
2015-07-23 18:58 . 2015-07-23 18:58	--------	d-----w-	C:\7e3238667fae037d35378662fc2066
2015-07-22 22:33 . 2015-07-22 22:33	--------	d-----w-	c:\program files (x86)\Poised Measurement
2015-07-22 18:07 . 2015-07-22 18:07	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Roaming\Apple Computer
2015-07-22 18:05 . 2015-07-22 18:05	159744	----a-w-	c:\program files\Internet Explorer\Wtyczki\npqtplugin5.dll
2015-07-22 18:05 . 2015-07-22 18:05	159744	----a-w-	c:\program files\Internet Explorer\Wtyczki\npqtplugin4.dll
2015-07-22 18:05 . 2015-07-22 18:05	159744	----a-w-	c:\program files\Internet Explorer\Wtyczki\npqtplugin3.dll
2015-07-22 18:05 . 2015-07-22 18:05	159744	----a-w-	c:\program files\Internet Explorer\Wtyczki\npqtplugin2.dll
2015-07-22 18:05 . 2015-07-22 18:05	159744	----a-w-	c:\program files\Internet Explorer\Wtyczki\npqtplugin.dll
2015-07-22 18:05 . 2015-07-22 18:05	--------	d-----w-	c:\program files (x86)\QuickTime
2015-07-22 18:05 . 2015-07-22 18:05	--------	d-----w-	c:\programdata\Apple Computer
2015-07-22 18:04 . 2015-07-22 18:04	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Local\Apple
2015-07-22 18:04 . 2015-07-22 18:04	--------	d-----w-	c:\program files (x86)\Apple Software Update
2015-07-22 18:04 . 2015-07-22 18:04	--------	d-----w-	c:\program files (x86)\Common Files\Apple
2015-07-22 17:44 . 2015-07-22 17:44	--------	d-----w-	c:\program files (x86)\Microsoft Synchronization Services
2015-07-22 17:43 . 2015-07-22 17:43	--------	d-----w-	c:\windows\PCHEALTH
2015-07-22 17:43 . 2015-07-22 17:43	--------	d-----w-	c:\program files (x86)\Microsoft Sync Framework
2015-07-22 17:43 . 2015-07-22 17:43	--------	d-----w-	c:\program files (x86)\Microsoft SQL Server Compact Edition
2015-07-22 17:42 . 2015-07-22 17:42	--------	d-----w-	c:\program files (x86)\Microsoft Visual Studio 8
2015-07-22 17:42 . 2015-07-22 17:42	--------	d-----w-	c:\program files\Microsoft Office
2015-07-22 17:41 . 2015-07-22 17:41	--------	d-----w-	c:\program files (x86)\Microsoft Analysis Services
2015-07-22 17:41 . 2015-07-22 17:41	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Local\Microsoft Help
2015-07-22 17:41 . 2015-07-26 23:10	--------	d-----w-	c:\programdata\Microsoft Help
2015-07-22 17:41 . 2015-07-22 17:41	--------	d-----r-	C:\MSOCache
2015-07-16 09:02 . 2015-07-18 21:57	--------	d-----w-	c:\programdata\MailUpdate
2015-07-16 09:02 . 2015-07-16 09:02	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Roaming\MailUpdate
2015-07-15 09:13 . 2015-07-09 17:58	37888	----a-w-	c:\windows\system32\wups2.dll
2015-07-15 07:12 . 2015-07-04 18:07	2087424	----a-w-	c:\windows\system32\ole32.dll
2015-07-15 07:11 . 2015-06-15 21:45	3242496	----a-w-	c:\windows\system32\msi.dll
2015-07-13 11:37 . 2015-07-13 11:43	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Roaming\Foxit Software
2015-07-13 11:37 . 2015-07-13 11:37	--------	d-----w-	c:\users\Public\Foxit Software
2015-07-13 11:36 . 2015-07-13 11:36	--------	d-----w-	c:\program files (x86)\Foxit Software
2015-07-11 06:33 . 2015-07-24 20:45	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Local\Adobe
2015-07-11 06:33 . 2015-07-24 20:45	--------	d-----w-	c:\program files (x86)\Common Files\Adobe
2015-07-10 08:28 . 2015-07-10 08:28	--------	d-----w-	c:\programdata\McAfee
2015-07-10 08:28 . 2015-07-10 08:28	--------	d-----w-	c:\programdata\McAfee Security Scan
2015-07-10 08:28 . 2015-07-10 13:15	--------	d-----w-	c:\programdata\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 06:17 . 2015-07-10 06:17	--------	d-----w-	c:\program files (x86)\DealExapareEss
2015-07-10 06:17 . 2015-07-10 06:17	--------	d-----w-	c:\program files (x86)\HowToSimplified
2015-07-09 17:58 . 2015-07-10 08:29	--------	d-----w-	c:\users\Dell Latitude E6430\AppData\Roaming\Adobe-BackupByPhotoshopCS6Portable
2015-07-08 18:10 . 2015-07-08 18:10	--------	d-----w-	c:\program files (x86)\Steep Sex
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-07-26 23:07 . 2015-06-15 06:35	24	----a-w-	c:\users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-07-03 06:43 . 2014-05-11 07:03	130333168	----a-w-	c:\windows\system32\MRT.exe
2015-06-20 01:01 . 2015-06-20 01:01	320424	----a-w-	c:\windows\system32\javaws.exe
2015-06-20 01:01 . 2015-06-20 01:01	189352	----a-w-	c:\windows\system32\javaw.exe
2015-06-20 01:01 . 2015-06-20 01:01	189352	----a-w-	c:\windows\system32\java.exe
2015-06-20 01:01 . 2015-06-20 01:01	111016	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2015-06-16 22:23 . 2015-06-16 22:23	94208	----a-w-	c:\windows\SysWow64\QuickTimeVR.qtx
2015-06-16 22:23 . 2015-06-16 22:23	69632	----a-w-	c:\windows\SysWow64\QuickTime.qts
2015-05-25 18:24 . 2015-06-09 17:54	5569984	----a-w-	c:\windows\system32\ntoskrnl.exe
2015-05-25 18:21 . 2015-06-09 17:54	1728960	----a-w-	c:\windows\system32\ntdll.dll
2015-05-25 18:19 . 2015-06-09 17:54	362496	----a-w-	c:\windows\system32\wow64win.dll
2015-05-25 18:19 . 2015-06-09 17:54	243712	----a-w-	c:\windows\system32\wow64.dll
2015-05-25 18:19 . 2015-06-09 17:54	13312	----a-w-	c:\windows\system32\wow64cpu.dll
2015-05-25 18:19 . 2015-06-09 17:54	215040	----a-w-	c:\windows\system32\winsrv.dll
2015-05-25 18:19 . 2015-06-09 17:54	1255424	----a-w-	c:\windows\system32\diagtrack.dll
2015-05-25 18:19 . 2015-06-09 17:54	879104	----a-w-	c:\windows\system32\tdh.dll
2015-05-25 18:19 . 2015-06-09 17:54	503808	----a-w-	c:\windows\system32\srcore.dll
2015-05-25 18:19 . 2015-06-09 17:54	50176	----a-w-	c:\windows\system32\srclient.dll
2015-05-25 18:19 . 2015-06-09 17:54	113664	----a-w-	c:\windows\system32\sechost.dll
2015-05-25 18:19 . 2015-06-09 17:54	16384	----a-w-	c:\windows\system32\ntvdm64.dll
2015-05-25 18:19 . 2015-06-09 17:54	424960	----a-w-	c:\windows\system32\KernelBase.dll
2015-05-25 18:19 . 2015-06-09 17:54	1162752	----a-w-	c:\windows\system32\kernel32.dll
2015-05-25 18:18 . 2015-06-09 17:54	43520	----a-w-	c:\windows\system32\csrsrv.dll
2015-05-25 18:18 . 2015-06-09 17:54	879104	----a-w-	c:\windows\system32\advapi32.dll
2015-05-25 18:18 . 2015-06-09 17:54	47104	----a-w-	c:\windows\system32\typeperf.exe
2015-05-25 18:18 . 2015-06-09 17:54	404992	----a-w-	c:\windows\system32\tracerpt.exe
2015-05-25 18:18 . 2015-06-09 17:54	112640	----a-w-	c:\windows\system32\smss.exe
2015-05-25 18:18 . 2015-06-09 17:54	296960	----a-w-	c:\windows\system32\rstrui.exe
2015-05-25 18:18 . 2015-06-09 17:54	43008	----a-w-	c:\windows\system32\relog.exe
2015-05-25 18:18 . 2015-06-09 17:54	104448	----a-w-	c:\windows\system32\logman.exe
2015-05-25 18:18 . 2015-06-09 17:54	19456	----a-w-	c:\windows\system32\diskperf.exe
2015-05-25 18:18 . 2015-06-09 17:54	338432	----a-w-	c:\windows\system32\conhost.exe
2015-05-25 18:11 . 2015-06-09 17:54	6656	----a-w-	c:\windows\system32\apisetschema.dll
2015-05-25 18:11 . 2015-06-09 17:54	6144	---ha-w-	c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	4608	---ha-w-	c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	4608	---ha-w-	c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	5120	---ha-w-	c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-25 18:11 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-25 18:07 . 2015-06-09 17:54	3989440	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2015-05-25 18:07 . 2015-06-09 17:54	3934144	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2015-05-25 18:04 . 2015-06-09 17:54	1310744	----a-w-	c:\windows\SysWow64\ntdll.dll
2015-05-25 18:01 . 2015-06-09 17:54	635392	----a-w-	c:\windows\SysWow64\tdh.dll
2015-05-25 18:01 . 2015-06-09 17:54	43008	----a-w-	c:\windows\SysWow64\srclient.dll
2015-05-25 18:01 . 2015-06-09 17:54	92160	----a-w-	c:\windows\SysWow64\sechost.dll
2015-05-25 18:01 . 2015-06-09 17:54	14336	----a-w-	c:\windows\SysWow64\ntvdm64.dll
2015-05-25 18:01 . 2015-06-09 17:54	641536	----a-w-	c:\windows\SysWow64\advapi32.dll
2015-05-25 18:01 . 2015-06-09 17:54	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-05-25 18:00 . 2015-06-09 17:54	40448	----a-w-	c:\windows\SysWow64\typeperf.exe
2015-05-25 18:00 . 2015-06-09 17:54	364544	----a-w-	c:\windows\SysWow64\tracerpt.exe
2015-05-25 18:00 . 2015-06-09 17:54	25600	----a-w-	c:\windows\SysWow64\setup16.exe
2015-05-25 18:00 . 2015-06-09 17:54	37888	----a-w-	c:\windows\SysWow64\relog.exe
2015-05-25 18:00 . 2015-06-09 17:54	82944	----a-w-	c:\windows\SysWow64\logman.exe
2015-05-25 18:00 . 2015-06-09 17:54	17408	----a-w-	c:\windows\SysWow64\diskperf.exe
2015-05-25 17:59 . 2015-06-09 17:54	5120	----a-w-	c:\windows\SysWow64\wow32.dll
2015-05-25 17:59 . 2015-06-09 17:54	274944	----a-w-	c:\windows\SysWow64\KernelBase.dll
2015-05-25 17:55 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	6656	----a-w-	c:\windows\SysWow64\apisetschema.dll
2015-05-25 17:55 . 2015-06-09 17:54	5120	---ha-w-	c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	4608	---ha-w-	c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-25 17:55 . 2015-06-09 17:54	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WirelessManager"="c:\program files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe" [2011-12-08 20480]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-02-27 291608]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2012-02-28 133400]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2014-05-14 191016]
"nxGestureAction"="c:\program files (x86)\iNexio\nxTCon\nxGestureAction.exe" [2011-08-04 49152]
"Adobe Creative Cloud"="c:\program files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2015-04-20 2584240]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2015-06-16 421888]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Smart Settings.lnk - c:\program files\Dell\Feature Enhancement Pack\SmartSettings.exe [2012-5-8 506904]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"RequireSignedAppInit_DLLs"=0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 609fe104;SystemPro;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R3 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys;c:\windows\SYSNATIVE\DRIVERS\BrSerIb.sys [x]
R3 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys;c:\windows\SYSNATIVE\DRIVERS\BrUsbSIb.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 HCWF9BDA;Hauppauge IT9135 BDA Devices;c:\windows\system32\Drivers\hcwF9b64.sys;c:\windows\SYSNATIVE\Drivers\hcwF9b64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x]
R3 PDF Architect 2;PDF Architect 2;c:\program files (x86)\PDF Architect 2\ws.exe;c:\program files (x86)\PDF Architect 2\ws.exe [x]
R3 pdfforge CrashHandler;pdfforge CrashHandler;c:\program files (x86)\PDF Architect 2\crash-handler-ws.exe;c:\program files (x86)\PDF Architect 2\crash-handler-ws.exe [x]
R3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\DRIVERS\silabenm.sys;c:\windows\SYSNATIVE\DRIVERS\silabenm.sys [x]
R3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\DRIVERS\silabser.sys;c:\windows\SYSNATIVE\DRIVERS\silabser.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 VBoxDrv;VBox Support Driver;c:\program files\Oracle\Virtualbox\VBoxDrv.sys;c:\program files\Oracle\Virtualbox\VBoxDrv.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
R3 WatAdminSvc;Usluga Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WvPCR;WvPCR;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [x]
S0 iusb3hcs;Sterownik przelacznika kontrolera hosta Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 PStrip64;PStrip64;c:\windows\system32\drivers\pstrip64.sys;c:\windows\SYSNATIVE\drivers\pstrip64.sys [x]
S2 dcevt64;DSM SA Event Manager;c:\program files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe;c:\program files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe [x]
S2 dcstor64;DSM SA Data Manager;c:\program files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe;c:\program files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe [x]
S2 DFEPService;Dell Feature Enhancement Pack Service;c:\program files\Dell\Feature Enhancement Pack\DFEPService.exe;c:\program files\Dell\Feature Enhancement Pack\DFEPService.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 EmbassyService;EmbassyService;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [x]
S2 FoxitCloudUpdateService;Foxit Cloud Safe Update Service;c:\program files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe;c:\program files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [x]
S2 IHProtect Service;IHProtect Service;c:\program files (x86)\MiuiTab\ProtectService.exe;c:\program files (x86)\MiuiTab\ProtectService.exe [x]
S2 iNexioTouchDriverService;iNexioTouchDriverService;c:\program files (x86)\iNexio\nxTCon\XYNTService.exe;c:\program files (x86)\iNexio\nxTCon\XYNTService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 O2SDIOAssist;O2SDIOAssist;c:\windows\SysWOW64\srvany.exe;c:\windows\SysWOW64\srvany.exe [x]
S2 Poised Measurement;Poised Measurement;c:\program files (x86)\Poised Measurement\Poised Measurement.exe;c:\program files (x86)\Poised Measurement\Poised Measurement.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 Steep Sex;Steep Sex;c:\program files (x86)\Steep Sex\Steep Sex.exe;c:\program files (x86)\Steep Sex\Steep Sex.exe [x]
S2 Wave Authentication Manager Service;Wave Authentication Manager Service;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe;c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [x]
S2 WindowsMangerProtect;WindowsMangerProtect Service;c:\programdata\WindowsMangerProtect\ProtectWindowsManager.exe;c:\programdata\WindowsMangerProtect\ProtectWindowsManager.exe [x]
S2 WMCoreService;Mobile Broadband Service;c:\program files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe servicemode;c:\program files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe servicemode [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 d554gps;Dell Wireless  HSPA Mini-Card GPS Port;c:\windows\system32\DRIVERS\d554gps64.sys;c:\windows\SYSNATIVE\DRIVERS\d554gps64.sys [x]
S3 d554scard;Dell Wireless  HSPA Mini-Card USIM Port;c:\windows\system32\DRIVERS\d554scard.sys;c:\windows\SYSNATIVE\DRIVERS\d554scard.sys [x]
S3 dcdbas;System Management Driver;c:\windows\system32\DRIVERS\dcdbas64.sys;c:\windows\SYSNATIVE\DRIVERS\dcdbas64.sys [x]
S3 ecnssndis; Mobile Broadband Driver;c:\windows\system32\Drivers\wwuss64.sys;c:\windows\SYSNATIVE\Drivers\wwuss64.sys [x]
S3 ecnssndisfltr; Mobile Broadband Driver Filter;c:\windows\system32\Drivers\wwussf64.sys;c:\windows\SYSNATIVE\Drivers\wwussf64.sys [x]
S3 IntcDAud;Intel(R) Audio dla ekranów;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Sterownik koncentratora Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Sterownik kontrolera hosta Intel(R) USB 3.0 eXtensible;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 Mbm3CBus;Dell Wireless 5560 HSPA+ Mini-Card Device (WDM);c:\windows\system32\DRIVERS\Mbm3CBus.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3CBus.sys [x]
S3 Mbm3DevMt;Dell Wireless  HSPA Mini-Card Device Management Driver (WDM);c:\windows\system32\DRIVERS\Mbm3DevMt.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3DevMt.sys [x]
S3 Mbm3mdfl;Dell Wireless  HSPA Mini-Card Modem Filter;c:\windows\system32\DRIVERS\Mbm3mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3mdfl.sys [x]
S3 Mbm3Mdm;Dell Wireless  HSPA Mini-Card Modem Driver;c:\windows\system32\DRIVERS\Mbm3Mdm.sys;c:\windows\SYSNATIVE\DRIVERS\Mbm3Mdm.sys [x]
S3 O2SDJRDR;O2SDJRDR;c:\windows\system32\DRIVERS\o2sdjw7x64.sys;c:\windows\SYSNATIVE\DRIVERS\o2sdjw7x64.sys [x]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
S3 WwanUsbServ;Mobile Broadband Driver;c:\windows\system32\DRIVERS\WwanUsbMp64.sys;c:\windows\SYSNATIVE\DRIVERS\WwanUsbMp64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-06-10 06:59	986440	----a-w-	c:\program files (x86)\Google\Chrome\Application\43.0.2357.124\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-07-27 c:\windows\Tasks\Bidaily Synchronize Task[973b].job
- c:\programdata\{074510f0-3d91-0963-0745-510f03d943c0}\removewat 2.2 6 windows 7 activator full version download.exe [2014-06-10 12:43]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2015-04-16 15:42	997536	----a-w-	c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2015-04-16 15:42	997536	----a-w-	c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2015-04-16 15:42	997536	----a-w-	c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnabledUnlockedFDEIconOverlay]
@="{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}"
[HKEY_CLASSES_ROOT\CLSID\{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}]
2011-12-08 08:45	139128	----a-w-	c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UninitializedFdeIconOverlay]
@="{CF08DA3E-C97D-4891-A66B-E39B28DD270F}"
[HKEY_CLASSES_ROOT\CLSID\{CF08DA3E-C97D-4891-A66B-E39B28DD270F}]
2011-12-08 08:45	139128	----a-w-	c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2012-01-25 626552]
"TdmNotify"="c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe" [2011-12-08 381296]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-02-13 1425408]
"DFEPApplication"="c:\program files\Dell\Feature Enhancement Pack\DFEPApplication.exe" [2012-05-08 7078424]
"IntelPROSet"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2012-03-29 4756240]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-04-24 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-04-24 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-04-24 439064]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
uDefault_Search_URL = hxxp://www.mystartsearch.com/web/?type=dspp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
mDefault_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
mDefault_Page_URL = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
mStart Page = hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1434758999&z=99826811147cfa7de1e2804g4zbc4z7m4wdbbt1t2o&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
IE: E&ksportuj do programu Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: Wyslij &do programu OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
IE: {{C3881663-B3FA-49F4-BA57-183B02F47280} - res://snipit.dll/101
Trusted Zone: google.de\www
Trusted Zone: mks.com.pl
Trusted Zone: mks.com.pl\www
TCP: DhcpNameServer = 10.0.0.1
FF - ProfilePath - c:\users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\
FF - prefs.js: browser.search.defaulturl - hxxp://websearch.searchtotal.info/?pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88&l=1&q=
FF - prefs.js: browser.search.selectedEngine - delta-homes
FF - prefs.js: browser.startup.homepage - hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
FF - prefs.js: keyword.URL - hxxp://websearch.searchtotal.info/?pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88&l=1&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-BlueStacks Agent - c:\program files (x86)\BlueStacks\HD-Agent.exe
HKLM-Run-Andy - c:\program files\Andy\HandyAndy.exe
AddRemove-SLABCOMM&10C4&EA60 - c:\program files (x86)\Silabs\MCU\DriverUninstall\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60
AddRemove-{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{609fe104} - c:\progra~2\SYSTEM~1\SYSTEM~1.DLL
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\iNexio\nxTCon\SerialTouchService.exe
c:\windows\system32\o2flash.exe
c:\windows\sysWOW64\SDIOAssist.exe
c:\program files (x86)\iNexio\nxTCon\UsbTouchService.exe
c:\program files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
c:\program files (x86)\Google\Chrome\Application\chrome.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-07-27  19:59:20 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-07-27 17:59
ComboFix2.txt  2015-02-20 09:16
.
Vor Suchlauf: 32.274.169.856 bajtów wolnych
Nach Suchlauf: 34.407.587.840 bajtów wolnych
.
- - End Of File - - 83CA27E4F7DBD673EAA24255AFF2B3C2
A36C5E4F47E84449FF07ED3517B43A31
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

# AdwCleaner v4.208 - Utworzono raport 28/07/2015 o 10:22:59
# Ostatnia aktualizacja 09/07/2015 przez Xplode
# Baza danych : 2015-07-26.2 [Serwer]
# System operacyjny : Windows 7 Professional Service Pack 1 (x64)
# Nazwa uzytkownika : Dell Latitude E6430 - DELLLATITUDEE64
# Uruchomiony z : C:\Users\Dell Latitude E6430\Downloads\AdwCleaner_4.208.exe
# Dzialanie : Usun

***** [ Uslugi ] *****

[#] Usluga usunieto : 609fe104

***** [ Pliki / Foldery ] *****

Folder usunieto : C:\ProgramData\MailUpdate
Folder usunieto : C:\ProgramData\20d34f8e0000272a
Folder usunieto : C:\ProgramData\af947948000015cc
Folder usunieto : C:\ProgramData\{074510f0-3d91-0963-0745-510f03d943c0}
Folder usunieto : C:\Program Files (x86)\Broowseor Shop
Folder usunieto : C:\Program Files (x86)\DealExapareEss
Folder usunieto : C:\Program Files (x86)\PPriceMINuSi
Folder usunieto : C:\Program Files (x86)\HowToSimplified
Folder usunieto : C:\Users\Dell Latitude E6430\AppData\Roaming\MailUpdate
Folder usunieto : C:\ProgramData\null
Plik usunieto : C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage
Plik usunieto : C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
Plik usunieto : C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_opera-mobile-beta.en.softonic.com_0.localstorage
Plik usunieto : C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_opera-mobile-beta.en.softonic.com_0.localstorage-journal
Plik usunieto : C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_xilisoft-powerpoint-to-video-converter-personal.de.softonic.com_0.localstorage
Plik usunieto : C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_xilisoft-powerpoint-to-video-converter-personal.de.softonic.com_0.localstorage-journal

***** [ Zaplanowane zadania ] *****


***** [ Skróty ] *****


***** [ Rejestr ] *****

Klucz usunieto : HKCU\Software\Mozilla\Extends
Klucz usunieto : HKLM\SOFTWARE\Classes\PCSU.SysUtils
Klucz usunieto : HKLM\SOFTWARE\D51D0083-1C6B-4CB4-8FA1-7CF891242EBD
Klucz usunieto : HKLM\SOFTWARE\d57a91c1-fae1-da6c-0381-4327f922e613
Klucz usunieto : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
Klucz usunieto : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Klucz usunieto : HKLM\SOFTWARE\Classes\TypeLib\{03D19D4E-AADD-472C-93CF-63602AE5DC2E}
Klucz usunieto : HKLM\SOFTWARE\Classes\TypeLib\{04A0F1FA-CF83-4ECD-9F68-D94D3F8A7622}
Klucz usunieto : HKLM\SOFTWARE\Classes\TypeLib\{5518881B-BB38-46C7-A27C-024DA02AD167}
Klucz usunieto : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Klucz usunieto : HKCU\Software\APN PIP
Klucz usunieto : HKCU\Software\simplytech
Klucz usunieto : HKCU\Software\Linkey
Klucz usunieto : HKCU\Software\Kromtech
Klucz usunieto : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Klucz usunieto : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Klucz usunieto : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Klucz usunieto : HKLM\SOFTWARE\Conduit
Klucz usunieto : HKLM\SOFTWARE\hdcode
Klucz usunieto : HKLM\SOFTWARE\SearchProtect
Klucz usunieto : HKLM\SOFTWARE\V9
Klucz usunieto : HKLM\SOFTWARE\winzipersvc
Klucz usunieto : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Klucz usunieto : HKLM\SOFTWARE\SpeedBit
Klucz usunieto : HKLM\SOFTWARE\AIM Toolbar
Klucz usunieto : HKLM\SOFTWARE\searchult
Klucz usunieto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Klucz usunieto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Klucz usunieto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Klucz usunieto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Klucz usunieto : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{06B99631-BFA2-3B7A-F58B-D067C2BA59B7}

***** [ Przegladarki internetowe ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Mozilla Firefox v33.1.1 (x86 pl)

[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("browser.search.defaultenginename,S", "WebSearch");
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("browser.search.order.1", "WebSearch");
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("browser.search.order.1,S", "WebSearch");
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("browser.search.selectedEngine,S", "WebSearch");
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("extensions.5WbLE03ipZottdg6.scode", "(function(){try{if(window.location.href.indexOf(\"qTCErdg9rjs9rHr5pjY6qTs7qE\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("extensions.Oou6PqYsak9bPH9D.scode", "(function(){try{if(window.location.href.indexOf(\"qTCErdg9rjs9rHr5pjY6qTs7qE\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("extensions.Q6TaBH1aaja69gfO.scode", "(function(){try{if(window.location.href.indexOf(\"qTCErdg9rjs9rHr5pjY6qTs7qE\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("extensions.pTYxkUzigF4B355W.scode", "(function(){try{if(window.location.href.indexOf(\"qTCErdg9rjs9rHr5pjY6qTs7qE\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("extensions.quick_start.enable_search1", false);
[o8dmxtmk.default\prefs.js] - Linia usunieto : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

-\\ Google Chrome v43.0.2357.124

[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Web Data] - usunieto [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423957053&from=cvs&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Web Data] - usunieto [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Web Data] - usunieto [Search Provider] : hxxp://de.softonic.com/s/{searchTerms}
[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Web Data] - usunieto [Search Provider] : hxxp://websearch.searchtotal.info/?l=1&q={searchTerms}&pid=23453&r=2015/06/10&hid=6700641243389876267&lg=EN&cc=PL&unqvl=88
[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Web Data] - usunieto [Search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Web Data] - usunieto [Search Provider] : hxxp://search.delta-homes.com/web/?type=ds&ts=1437037341&z=c318a459a8f236c964c4d73gcz6cambe8c3mfcbc9z&from=wpm07163&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594&q={searchTerms}
[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - usunieto [Homepage] : hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
[C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - usunieto [Startup_URLs] : CE0B7374709522D5D37C3E3A307D71028D6998088232F1CB4A661BAB96FAD5F5"},"software_reporter":{"prompt_reason":"EEBE639A5A28A5828C886955425ABCE634BF68C5F99064AA5548274324BA463A","prompt_seed":"F03049A947182D71AED84B7B4C3EF0620611C69B656DE5AD267D38D045763459","prompt_version":"FE880EC5BD8DE516E437135A3A0116FDE9D441626693FD6BC35F53A4411B013D"},"sync":{"remaining_rollback_tries":"40B5E0AC117D880E93FCC82517929803A5A9409A2E92889C5AF231D97CF56925"}},"super_mac":"E27A5F23193D91EEE6F3B35DB6DFB42246E933FA3C51A1005DB1D6F26EF0B69C"},"safebrowsing":{"incidents_sent":{"2":{"chrome.dll":"3774509266","chrome_child.dll":"3743713718"},"6":{"script_request_incident":"42"}}},"session":{"restore_on_startup":1,"startup_urls":["hxxp://www.mystartsearch.com/?type=hppp&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594

-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [1123 bajty] - [20/02/2015 17:02:55]
AdwCleaner[R1].txt - [9353 bajty] - [28/07/2015 10:22:03]
AdwCleaner[S0].txt - [1196 bajty] - [20/02/2015 17:09:11]
AdwCleaner[S1].txt - [8994 bajty] - [28/07/2015 10:22:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [9053  bajty] ##########
         

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
Ran by Dell Latitude E6430 (administrator) on DELLLATITUDEE64 (28-07-2015 10:27:22)
Running from C:\Users\Dell Latitude E6430\Downloads
Loaded Profiles: Dell Latitude E6430 (Available Profiles: Dell Latitude E6430)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe
() C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
() C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\SerialTouchService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(O2Micro International) C:\Windows\System32\o2flash.exe
() C:\Windows\SysWOW64\srvany.exe
(O2Micro.) C:\Windows\SysWOW64\SDIOAssist.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\UsbTouchService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(NEXIO CO., LTD.) C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [626552 2012-01-25] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TdmNotify] => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-02-13] (IDT, Inc.)
HKLM\...\Run: [DFEPApplication] => C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe [7078424 2012-05-08] (Dell Inc.)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4756240 2012-03-29] (Intel(R) Corporation)
HKLM\...\Run: [Andy] => "C:\Program Files\Andy\HandyAndy.exe"
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-02-28] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)
HKLM-x32\...\Run: [nxGestureAction] => C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe [49152 2011-08-04] (NEXIO CO., LTD.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2584240 2015-04-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [WirelessManager] => C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe [20480 2011-12-08] (Ericsson AB)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{64300E22-83CD-431B-A812-8DA5B1F4F0E3}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A5475C1D-211B-47F0-89CC-DCC22A55B672}: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default
FF DefaultSearchEngine: delta-homes
FF SelectedSearchEngine: delta-homes
FF Homepage: https://www.malwarebytes.org/restorebrowser/&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
FF Plugin: @java.com/DTPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-04-30] (pdfforge GmbH)
FF Extension: Avira Browser Safety - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\abs@avira.com [2015-07-02]
FF Extension: StartRevApp - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\syvwgwuw_mvktygnkq@gvtkbppqpnxbdm.com [2015-07-28]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-05-12]
FF Extension: Adblock Plus - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-07-02]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browser Safety) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-07-28]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 dcevt64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe [222144 2012-01-16] (Dell Inc.)
R2 dcstor64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe [293824 2012-01-16] (Dell Inc.)
R2 DFEPService; C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe [2279960 2012-05-08] (Dell Inc.)
R2 EmbassyService; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [218504 2012-01-17] ()
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392 2015-06-02] (Foxit Software Inc.)
R2 iNexioTouchDriverService; C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe [45056 2011-08-04] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 O2FLASH; C:\Windows\system32\o2flash.exe [244328 2011-11-16] (O2Micro International)
R2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
S2 tcsd_win32.exe; C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1637888 2011-10-08] () [File not signed]
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WMCoreService; C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
S3 WvPCR; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
S4 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S4 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2014-04-17] (Broadcom Corporation.)
R3 d554gps; C:\Windows\System32\DRIVERS\d554gps64.sys [103184 2012-03-01] (Ericsson AB)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [61992 2011-01-14] (Ericsson AB)
R3 dcdbas; C:\Windows\System32\DRIVERS\dcdbas64.sys [38472 2012-03-03] (Dell Inc.)
R3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2011-10-05] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [29736 2011-10-05] (Ericsson AB)
S3 HCWF9BDA; C:\Windows\System32\Drivers\hcwF9b64.sys [188376 2013-09-25] (ITE                      )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [443208 2012-10-02] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [453960 2012-10-02] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [21832 2012-10-02] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [506184 2012-10-02] (MCCI Corporation)
S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [80384 2010-09-30] (Renesas Electronics Corporation) [File not signed]
S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [180736 2010-09-30] (Renesas Electronics Corporation) [File not signed]
R1 PStrip64; C:\Windows\System32\drivers\pstrip64.sys [13008 2006-09-30] ()
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [280448 2012-12-21] (Ericsson AB)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\Virtualbox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-28 10:27 - 2015-07-28 10:27 - 00000000 ____D C:\Users\Dell Latitude E6430\Downloads\FRST-OlderVersion
2015-07-28 10:21 - 2015-07-28 10:21 - 02248704 _____ C:\Users\Dell Latitude E6430\Downloads\AdwCleaner_4.208.exe
2015-07-28 10:03 - 2015-07-28 10:19 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-28 10:03 - 2015-07-28 10:04 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-28 10:03 - 2015-07-28 10:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-28 10:03 - 2015-07-28 10:04 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-28 10:03 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-28 10:03 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-28 10:03 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-28 10:02 - 2015-07-28 10:03 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Dell Latitude E6430\Downloads\mbam-setup-2.1.6.1022.exe
2015-07-27 19:59 - 2015-07-27 19:59 - 00043177 _____ C:\ComboFix.txt
2015-07-27 19:49 - 2015-07-27 19:48 - 05633622 ____R (Swearware) C:\Users\Dell Latitude E6430\Desktop\ComboFix.exe
2015-07-27 19:48 - 2015-07-27 19:48 - 05633622 _____ (Swearware) C:\Users\Dell Latitude E6430\Downloads\ComboFix (1).exe
2015-07-27 19:46 - 2015-07-27 19:46 - 00000000 ____D C:\ProgramData\9ffbe2a00007fd2
2015-07-27 19:41 - 2015-07-27 19:41 - 00001264 _____ C:\Users\Dell Latitude E6430\Desktop\Revo Uninstaller.lnk
2015-07-27 19:41 - 2015-07-27 19:41 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-07-27 19:40 - 2015-07-27 19:40 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Dell Latitude E6430\Downloads\revosetup95.exe
2015-07-27 18:41 - 2015-07-27 18:42 - 00380416 _____ C:\Users\Dell Latitude E6430\Downloads\Gmer-19357 (1).exe
2015-07-27 18:33 - 2015-07-27 18:33 - 02146816 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\Niepotwierdzony 269470.crdownload
2015-07-27 18:17 - 2015-07-27 18:17 - 00050477 _____ C:\Users\Dell Latitude E6430\Downloads\Defogger (1).exe
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-07-25 19:31 - 2015-07-25 19:31 - 00000000 ____D C:\Windows\rescache
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install (1).exe
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install.exe
2015-07-24 22:45 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\CEF
2015-07-24 22:39 - 2015-07-24 22:39 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install (1).exe
2015-07-24 22:36 - 2015-07-24 22:36 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install.exe
2015-07-24 22:25 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-24 22:25 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-24 22:25 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-23 20:58 - 2015-07-23 20:58 - 00000000 ____D C:\7e3238667fae037d35378662fc2066
2015-07-23 18:52 - 2015-07-27 01:06 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\clip
2015-07-23 12:32 - 2015-07-23 12:28 - 294608054 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v7.pptx
2015-07-23 00:33 - 2015-07-28 10:17 - 00000000 ____D C:\Program Files (x86)\Poised Measurement
2015-07-22 20:07 - 2015-07-22 20:07 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-22 20:04 - 2015-07-22 20:04 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Apple
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-07-22 20:03 - 2015-07-22 20:04 - 41908568 _____ (Apple Inc.) C:\Users\Dell Latitude E6430\Downloads\QuickTimeInstaller.exe
2015-07-22 19:56 - 2015-07-22 19:04 - 294605680 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v6.pptx
2015-07-22 19:44 - 2015-07-27 01:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\PCHEALTH
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files\Microsoft Office
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-07-22 19:41 - 2015-07-27 01:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ___RD C:\MSOCache
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-15 11:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 11:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 11:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 11:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 11:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 11:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 11:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 11:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 11:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 11:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 11:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 11:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 11:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 11:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 11:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 11:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 11:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 11:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 11:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 11:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 11:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 11:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 11:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 11:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 11:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 11:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 11:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 11:13 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 11:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 11:13 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 11:13 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 11:13 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 11:13 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 11:13 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 11:12 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 11:12 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 11:12 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 11:12 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 11:12 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 11:12 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 11:12 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 11:12 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 09:12 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 09:12 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 09:12 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 09:12 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 09:12 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 09:12 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 09:12 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 09:12 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 09:12 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 09:11 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 09:11 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 09:11 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-15 09:11 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 09:11 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 09:11 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 09:11 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 09:08 - 2015-07-14 09:08 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.Szablon CV2 od praca.gratka.pl.doc#
2015-07-13 13:37 - 2015-07-13 13:43 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00001351 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\Users\Public\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2015-07-13 13:36 - 2015-07-13 13:36 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2015-07-13 13:35 - 2015-07-13 13:36 - 36816072 _____ (Foxit Software Inc. ) C:\Users\Dell Latitude E6430\Downloads\FoxitReader715.0425_prom_enu_Setup.exe
2015-07-11 08:33 - 2015-07-24 22:46 - 00000000 ____D C:\ProgramData\Adobe
2015-07-11 08:33 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe
2015-07-11 08:33 - 2015-07-11 08:33 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe
2015-07-10 20:05 - 2015-07-10 20:05 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_ga_install.exe
2015-07-10 15:17 - 2015-07-07 16:58 - 00012753 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0_1.odt
2015-07-10 15:17 - 2015-07-07 16:30 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_2.odt
2015-07-10 14:39 - 2015-07-10 14:39 - 03725912 _____ C:\Users\Dell Latitude E6430\Downloads\DBSV_09_Film.zip
2015-07-10 10:28 - 2015-07-24 22:45 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-10 10:28 - 2015-07-24 22:45 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-15 11:14 - 00001934 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-07-10 10:28 - 2015-07-10 15:15 - 00000000 ____D C:\ProgramData\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2015-07-10 10:28 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee
2015-07-10 10:24 - 2015-07-10 10:24 - 00000000 _____ C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2015-07-09 19:58 - 2015-07-10 10:29 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe-BackupByPhotoshopCS6Portable
2015-07-09 13:23 - 2015-07-11 09:24 - 00001496 _____ C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-07-08 20:10 - 2015-07-28 10:17 - 00000000 ____D C:\Program Files (x86)\Steep Sex
2015-07-07 16:13 - 2015-06-28 16:33 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_1.odt
2015-07-07 16:13 - 2015-06-28 10:47 - 00013800 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0.odt
2015-07-06 09:59 - 2015-07-06 09:59 - 00000383 _____ C:\ftconfig.ini
2015-07-02 16:13 - 2015-07-02 16:13 - 00946636 _____ C:\Users\Dell Latitude E6430\Downloads\adblock_plus-2.6.9-an+sm+tb+fx.xpi
2015-07-02 15:51 - 2015-07-02 15:51 - 00358604 _____ C:\Users\Dell Latitude E6430\Downloads\nickmsg_216058_a24330bf-d6c8-455b-8a5a-689cb71282c2.wav
2015-06-28 10:32 - 2015-07-10 15:16 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.umowapolsko-niemiecka.doc#
2015-06-28 10:32 - 2015-06-10 14:45 - 00471092 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0.odt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-28 10:27 - 2015-02-19 01:17 - 00020905 _____ C:\Users\Dell Latitude E6430\Downloads\FRST.txt
2015-07-28 10:27 - 2015-02-19 01:17 - 00000000 ____D C:\FRST
2015-07-28 10:27 - 2015-02-19 01:16 - 02146816 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\FRST64.exe
2015-07-28 10:24 - 2014-04-17 22:45 - 00732486 _____ C:\Windows\system32\perfh015.dat
2015-07-28 10:24 - 2014-04-17 22:45 - 00156064 _____ C:\Windows\system32\perfc015.dat
2015-07-28 10:24 - 2009-07-14 07:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-28 10:23 - 2015-03-06 11:09 - 00000442 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-07-28 10:23 - 2015-02-20 17:02 - 00000000 ____D C:\AdwCleaner
2015-07-28 10:23 - 2015-02-17 22:52 - 00311896 _____ C:\Windows\PFRO.log
2015-07-28 10:23 - 2015-02-17 22:52 - 00018194 _____ C:\Windows\setupact.log
2015-07-28 10:23 - 2014-04-17 13:52 - 02086645 _____ C:\Windows\WindowsUpdate.log
2015-07-28 10:23 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-28 10:22 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-28 10:22 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-28 10:15 - 2014-11-28 23:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-28 10:15 - 2014-11-16 10:01 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-28 10:15 - 2014-05-11 08:48 - 00001049 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-28 10:15 - 2014-04-17 13:52 - 00000000 ____D C:\Users\Dell Latitude E6430
2015-07-28 10:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SchCache
2015-07-27 19:59 - 2015-02-20 11:10 - 00000000 ____D C:\Qoobox
2015-07-27 19:57 - 2009-07-14 04:34 - 87293952 _____ C:\Windows\system32\config\SOFTWARE.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 44302336 _____ C:\Windows\system32\config\COMPONENTS.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 20709376 _____ C:\Windows\system32\config\SYSTEM.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00524288 _____ C:\Windows\system32\config\DEFAULT.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00065536 _____ C:\Windows\system32\config\SAM.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00024576 _____ C:\Windows\system32\config\SECURITY.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-07-27 19:56 - 2015-02-20 11:10 - 00000000 ____D C:\Windows\erdnt
2015-07-27 18:40 - 2015-02-19 01:18 - 00038989 _____ C:\Users\Dell Latitude E6430\Downloads\Addition.txt
2015-07-27 18:19 - 2015-02-19 01:13 - 00000500 _____ C:\Users\Dell Latitude E6430\Downloads\defogger_disable.log
2015-07-27 01:30 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-27 01:27 - 2014-07-24 22:34 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\vlc
2015-07-27 01:26 - 2009-07-14 06:45 - 00547104 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-27 01:07 - 2015-06-15 08:35 - 00000024 _____ C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-07-27 01:07 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2015-07-24 23:03 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-24 23:03 - 2014-12-15 10:33 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-24 23:03 - 2014-05-11 08:33 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-24 23:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-23 20:59 - 2009-07-14 07:08 - 00032520 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-23 20:58 - 2014-05-11 09:03 - 00000000 ____D C:\Windows\system32\MRT
2015-07-22 20:07 - 2014-04-17 15:12 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\WirelessManager
2015-07-22 19:48 - 2014-04-17 14:29 - 00165088 _____ C:\Users\Dell Latitude E6430\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-22 19:44 - 2010-11-21 09:17 - 00000000 ____D C:\Windows\ShellNew
2015-07-22 19:44 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-07-22 19:43 - 2015-05-26 22:05 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-07-22 19:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-07-17 19:02 - 2014-09-11 14:41 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\motory
2015-07-16 10:04 - 2014-08-14 11:17 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\gotgolsad
2015-07-13 13:43 - 2015-05-05 18:45 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-10 16:16 - 2015-05-07 08:24 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\changhong
2015-07-10 10:29 - 2014-05-09 11:00 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2014-05-09 11:00 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-09 13:12 - 2014-08-04 12:30 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\64
2015-07-07 16:15 - 2015-04-20 11:09 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\Firmenpapier
2015-07-07 13:40 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-03 08:43 - 2014-05-11 09:03 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 15:51 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

==================== Files in the root of some directories =======

2015-06-15 08:35 - 2015-07-27 01:07 - 0000024 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-02-24 01:49 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bak
2015-03-03 14:50 - 2015-04-12 10:05 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bk!
2015-03-03 14:50 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bko
2015-02-24 00:05 - 2015-04-12 14:26 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.ini
2015-07-09 13:23 - 2015-07-11 09:24 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-05-07 09:42 - 2015-06-08 08:17 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
2015-01-10 18:05 - 2015-01-10 18:05 - 0007603 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Resmon.ResmonCfg
2015-07-10 10:24 - 2015-07-10 10:24 - 0000000 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2014-05-09 10:53 - 2014-05-09 10:53 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
C:\Users\Dell Latitude E6430\AppData\Local\Temp\Quarantine.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-23 09:10

==================== End of log ============================
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 28.07.2015
Suchlaufzeit: 10:05
Protokolldatei: mal.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.07.28.01
Rootkit-Datenbank: v2015.07.22.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Dell Latitude E6430

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 371790
Abgelaufene Zeit: 7 Min., 53 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 2
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcp110.dll, Löschen bei Neustart, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcr110.dll, Löschen bei Neustart, [0918e304701a3ff7ee0ee32533d0649c], 

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 97
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Löschen bei Neustart, [7aa76681e2a85dd9856a688226dcdc24], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, In Quarantäne, [7aa76681e2a85dd9856a688226dcdc24], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, In Quarantäne, [39e8d1162d5d80b68b6a30ced9295da3], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, In Quarantäne, [39e8d1162d5d80b68b6a30ced9295da3], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab, Löschen bei Neustart, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\image, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\en-US, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-419, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-ES, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-BE, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CA, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CH, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-FR, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-LU, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-CH, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-IT, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pl, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt-BR, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru-MO, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\tr-TR, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\vi-VI, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-CN, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-TW, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.SupTab.A, C:\Users\Dell Latitude E6430\SupTab, In Quarantäne, [24fde5023c4ef244bff63acfd0332ad6], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\include, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js\module, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\en, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\en-US, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\es, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\es-419, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\it, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\it-CH, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\pl, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\ru, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\tr, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\vi, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\skin, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\defaults, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\defaults\preferences, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\modules, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\include, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js\module, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\en, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\en-US, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\es, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\es-419, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\it, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\it-CH, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\pl, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\ru, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\tr, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\vi, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\skin, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\defaults, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\defaults\preferences, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\modules, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 28.07.2015
Suchlaufzeit: 10:05
Protokolldatei: mal1.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.07.28.01
Rootkit-Datenbank: v2015.07.22.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Dell Latitude E6430

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 371790
Abgelaufene Zeit: 7 Min., 53 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 2
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcp110.dll, Löschen bei Neustart, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcr110.dll, Löschen bei Neustart, [0918e304701a3ff7ee0ee32533d0649c], 

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 97
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Löschen bei Neustart, [7aa76681e2a85dd9856a688226dcdc24], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, In Quarantäne, [7aa76681e2a85dd9856a688226dcdc24], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, In Quarantäne, [39e8d1162d5d80b68b6a30ced9295da3], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, In Quarantäne, [39e8d1162d5d80b68b6a30ced9295da3], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab, Löschen bei Neustart, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\image, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\en-US, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-419, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-ES, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-BE, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CA, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CH, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-FR, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-LU, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-CH, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-IT, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pl, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt-BR, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru-MO, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\tr-TR, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\vi-VI, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-CN, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-TW, In Quarantäne, [0918e304701a3ff7ee0ee32533d0649c], 
PUP.Optional.SupTab.A, C:\Users\Dell Latitude E6430\SupTab, In Quarantäne, [24fde5023c4ef244bff63acfd0332ad6], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\include, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js\module, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\en, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\en-US, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\es, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\es-419, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\it, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\it-CH, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\pl, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\ru, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\tr, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\vi, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\chrome\skin, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\defaults, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\defaults\preferences, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DefaultNewTab.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\default_newtabff@gmail.com\modules, In Quarantäne, [8e9392554941c571420048c22cd79d63], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\include, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\include\tools, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js\lib, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js\module, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\content\js\pack, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\en, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\en-US, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\es, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\es-419, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-BE, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CA, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-CH, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\fr-LU, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\it, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\it-CH, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\pl, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\pt-BR, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\ru, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\ru-MO, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\tr, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\vi, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-CN, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\locale\zh-TW, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\chrome\skin, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\defaults, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\defaults\preferences, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 
PUP.Optional.DeskCut.A, C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\extensions\deskCutv2@gmail.com\modules, In Quarantäne, [55cc63845931112582c10efcdb285fa1], 

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         

Folder usunieto

Wasn das?




ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo,
schein alles in Ordnung zu sein.
DANKE!!!!!!!!!!!
Gruss Thomas

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-07-2015
Ran by Dell Latitude E6430 (administrator) on DELLLATITUDEE64 (29-07-2015 22:21:17)
Running from C:\Users\Dell Latitude E6430\Downloads
Loaded Profiles: Dell Latitude E6430 (Available Profiles: Dell Latitude E6430)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe
(Dell Inc.) C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe
() C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
() C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\SerialTouchService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(O2Micro International) C:\Windows\System32\o2flash.exe
() C:\Windows\SysWOW64\srvany.exe
(O2Micro.) C:\Windows\SysWOW64\SDIOAssist.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe
(RNDPLUS.COM) C:\Program Files (x86)\iNexio\nxTCon\UsbTouchService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Wave Systems Corp.) C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Ericsson AB) C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(NEXIO CO., LTD.) C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Dell Latitude E6430\Downloads\SecurityCheck (3).exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [626552 2012-01-25] (Alps Electric Co., Ltd.)
HKLM\...\Run: [TdmNotify] => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-02-13] (IDT, Inc.)
HKLM\...\Run: [DFEPApplication] => C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe [7078424 2012-05-08] (Dell Inc.)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4756240 2012-03-29] (Intel(R) Corporation)
HKLM\...\Run: [Andy] => "C:\Program Files\Andy\HandyAndy.exe"
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-02-28] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)
HKLM-x32\...\Run: [nxGestureAction] => C:\Program Files (x86)\iNexio\nxTCon\nxGestureAction.exe [49152 2011-08-04] (NEXIO CO., LTD.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2584240 2015-04-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [WirelessManager] => C:\Program Files (x86)\Dell\Dell Mobile Broadband Manager\WirelessManager.exe [20480 2011-12-08] (Ericsson AB)
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Smart Settings.lnk [2014-04-17]
ShortcutTarget: Smart Settings.lnk -> C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe (Dell Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-04-16] ()
ShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> {30D3C2AF-9709-4D05-9CF4-13335F3C1E4A} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
ShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> {CF08DA3E-C97D-4891-A66B-E39B28DD270F} => C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll [2011-12-08] (Wave Systems Corp.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-390905103-1377331367-2787750936-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{64300E22-83CD-431B-A812-8DA5B1F4F0E3}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{766DB95A-9F6F-4310-B135-8EAF35B22227}: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{A5475C1D-211B-47F0-89CC-DCC22A55B672}: [DhcpNameServer] 10.0.0.1

FireFox:
========
FF ProfilePath: C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default
FF DefaultSearchEngine: delta-homes
FF SelectedSearchEngine: delta-homes
FF Homepage: https://www.malwarebytes.org/restorebrowser/&ts=1434759015&z=fa9e5055728756d60212ecdg6z6c0z7m8wft8e1edb&from=ima&uid=LITEONITXLCS-128M6SX2X5X7mmX128GB_TW032GYJ5508538M1594
FF Plugin: @java.com/DTPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.79.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-06-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-04-20] (Adobe Systems)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-04-30] (pdfforge GmbH)
FF Extension: Avira Browser Safety - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\abs@avira.com [2015-07-02]
FF Extension: StartRevApp - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\syvwgwuw_mvktygnkq@gvtkbppqpnxbdm.com [2015-07-28]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2014-05-12]
FF Extension: Adblock Plus - C:\Users\Dell Latitude E6430\AppData\Roaming\Mozilla\Firefox\Profiles\o8dmxtmk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-07-02]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browser Safety) - C:\Users\Dell Latitude E6430\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-07-28]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 dcevt64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_eventmgr64.exe [222144 2012-01-16] (Dell Inc.)
R2 dcstor64; C:\Program Files\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr64.exe [293824 2012-01-16] (Dell Inc.)
R2 DFEPService; C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe [2279960 2012-05-08] (Dell Inc.)
R2 EmbassyService; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe [218504 2012-01-17] ()
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [244392 2015-06-02] (Foxit Software Inc.)
R2 iNexioTouchDriverService; C:\Program Files (x86)\iNexio\nxTCon\XYNTService.exe [45056 2011-08-04] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
R2 O2FLASH; C:\Windows\system32\o2flash.exe [244328 2011-11-16] (O2Micro International)
R2 O2SDIOAssist; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
S2 tcsd_win32.exe; C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe [1637888 2011-10-08] () [File not signed]
R2 Wave Authentication Manager Service; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WMCoreService; C:\Program Files (x86)\Dell\Dell WWAN\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
S3 WvPCR; C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Common\WvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
S4 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S4 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [135720 2014-04-17] (Broadcom Corporation.)
R3 d554gps; C:\Windows\System32\DRIVERS\d554gps64.sys [103184 2012-03-01] (Ericsson AB)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [61992 2011-01-14] (Ericsson AB)
R3 dcdbas; C:\Windows\System32\DRIVERS\dcdbas64.sys [38472 2012-03-03] (Dell Inc.)
R3 ecnssndis; C:\Windows\System32\Drivers\wwuss64.sys [26664 2011-10-05] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwussf64.sys [29736 2011-10-05] (Ericsson AB)
S3 HCWF9BDA; C:\Windows\System32\Drivers\hcwF9b64.sys [188376 2013-09-25] (ITE                      )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [443208 2012-10-02] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [453960 2012-10-02] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [21832 2012-10-02] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [506184 2012-10-02] (MCCI Corporation)
S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [80384 2010-09-30] (Renesas Electronics Corporation) [File not signed]
S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [180736 2010-09-30] (Renesas Electronics Corporation) [File not signed]
R1 PStrip64; C:\Windows\System32\drivers\pstrip64.sys [13008 2006-09-30] ()
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp64.sys [280448 2012-12-21] (Ericsson AB)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\Virtualbox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-29 22:18 - 2015-07-29 22:18 - 00852684 _____ C:\Users\Dell Latitude E6430\Downloads\SecurityCheck (3).exe
2015-07-29 00:13 - 2015-07-29 00:13 - 00000000 ____D C:\Program Files (x86)\ESET
2015-07-29 00:12 - 2015-07-29 00:12 - 02870984 _____ (ESET) C:\Users\Dell Latitude E6430\Downloads\esetsmartinstaller_deu (5).exe
2015-07-29 00:07 - 2015-07-29 00:07 - 00852684 _____ C:\Users\Dell Latitude E6430\Downloads\SecurityCheck (2).exe
2015-07-29 00:07 - 2015-07-29 00:07 - 00852684 _____ C:\Users\Dell Latitude E6430\Desktop\SecurityCheck (2).exe
2015-07-28 23:48 - 2015-07-28 23:48 - 00852684 _____ C:\Users\Dell Latitude E6430\Downloads\SecurityCheck (1).exe
2015-07-28 22:34 - 2015-07-28 22:34 - 02870984 _____ (ESET) C:\Users\Dell Latitude E6430\Downloads\esetsmartinstaller_deu (4).exe
2015-07-28 10:27 - 2015-07-29 22:21 - 00000000 ____D C:\Users\Dell Latitude E6430\Downloads\FRST-OlderVersion
2015-07-28 10:21 - 2015-07-28 10:21 - 02248704 _____ C:\Users\Dell Latitude E6430\Downloads\AdwCleaner_4.208.exe
2015-07-28 10:03 - 2015-07-28 10:19 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-28 10:03 - 2015-07-28 10:04 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-28 10:03 - 2015-07-28 10:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-28 10:03 - 2015-07-28 10:04 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-28 10:03 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-28 10:03 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-28 10:03 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-28 10:02 - 2015-07-28 10:03 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Dell Latitude E6430\Downloads\mbam-setup-2.1.6.1022.exe
2015-07-27 19:59 - 2015-07-27 19:59 - 00043177 _____ C:\ComboFix.txt
2015-07-27 19:49 - 2015-07-27 19:48 - 05633622 ____R (Swearware) C:\Users\Dell Latitude E6430\Desktop\ComboFix.exe
2015-07-27 19:48 - 2015-07-27 19:48 - 05633622 _____ (Swearware) C:\Users\Dell Latitude E6430\Downloads\ComboFix (1).exe
2015-07-27 19:46 - 2015-07-27 19:46 - 00000000 ____D C:\ProgramData\9ffbe2a00007fd2
2015-07-27 19:41 - 2015-07-27 19:41 - 00001264 _____ C:\Users\Dell Latitude E6430\Desktop\Revo Uninstaller.lnk
2015-07-27 19:41 - 2015-07-27 19:41 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-07-27 19:40 - 2015-07-27 19:40 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Dell Latitude E6430\Downloads\revosetup95.exe
2015-07-27 18:41 - 2015-07-27 18:42 - 00380416 _____ C:\Users\Dell Latitude E6430\Downloads\Gmer-19357 (1).exe
2015-07-27 18:33 - 2015-07-27 18:33 - 02146816 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\Niepotwierdzony 269470.crdownload
2015-07-27 18:17 - 2015-07-27 18:17 - 00050477 _____ C:\Users\Dell Latitude E6430\Downloads\Defogger (1).exe
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-07-27 01:07 - 2015-07-27 01:07 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-07-25 19:31 - 2015-07-25 19:31 - 00000000 ____D C:\Windows\rescache
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install (1).exe
2015-07-24 23:13 - 2015-07-24 23:13 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install.exe
2015-07-24 22:45 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\CEF
2015-07-24 22:39 - 2015-07-24 22:39 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_d_install (1).exe
2015-07-24 22:36 - 2015-07-24 22:36 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_pl_d_install.exe
2015-07-24 22:25 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-24 22:25 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-24 22:25 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-24 22:25 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-24 22:25 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-24 22:25 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-23 20:58 - 2015-07-23 20:58 - 00000000 ____D C:\7e3238667fae037d35378662fc2066
2015-07-23 18:52 - 2015-07-27 01:06 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\clip
2015-07-23 12:32 - 2015-07-23 12:28 - 294608054 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v7.pptx
2015-07-23 00:33 - 2015-07-28 10:17 - 00000000 ____D C:\Program Files (x86)\Poised Measurement
2015-07-22 20:07 - 2015-07-22 20:07 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00001845 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\ProgramData\Apple Computer
2015-07-22 20:05 - 2015-07-22 20:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-22 20:04 - 2015-07-22 20:04 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Apple
2015-07-22 20:04 - 2015-07-22 20:04 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-07-22 20:03 - 2015-07-22 20:04 - 41908568 _____ (Apple Inc.) C:\Users\Dell Latitude E6430\Downloads\QuickTimeInstaller.exe
2015-07-22 19:56 - 2015-07-22 19:04 - 294605680 _____ C:\Users\Dell Latitude E6430\Desktop\DO Video Abend ERF 2015 präsentation mit Videos v6.pptx
2015-07-22 19:44 - 2015-07-27 01:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-07-22 19:44 - 2015-07-22 19:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Windows\PCHEALTH
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2015-07-22 19:43 - 2015-07-22 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files\Microsoft Office
2015-07-22 19:42 - 2015-07-22 19:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-07-22 19:41 - 2015-07-27 01:10 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ___RD C:\MSOCache
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Microsoft Help
2015-07-22 19:41 - 2015-07-22 19:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-15 11:14 - 2015-07-15 11:14 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-15 11:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 11:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 11:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 11:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 11:14 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 11:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 11:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 11:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 11:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 11:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 11:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 11:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 11:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 11:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 11:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 11:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 11:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 11:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 11:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 11:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 11:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 11:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 11:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 11:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 11:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 11:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 11:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 11:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 11:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 11:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 11:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 11:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 11:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 11:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 11:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 11:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 11:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 11:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 11:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 11:13 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 11:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 11:13 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 11:13 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 11:13 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 11:13 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 11:13 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 11:13 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 11:12 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 11:12 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 11:12 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 11:12 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 11:12 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 11:12 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 11:12 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 11:12 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 11:12 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 11:12 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 09:12 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 09:12 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 09:12 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 09:12 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 09:12 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 09:12 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 09:12 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 09:12 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 09:12 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 09:12 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 09:12 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 09:12 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 09:12 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 09:12 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 09:12 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 09:12 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 09:12 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 09:11 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 09:11 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 09:11 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 09:11 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-15 09:11 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 09:11 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 09:11 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 09:11 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 09:11 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 09:11 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 09:11 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 09:08 - 2015-07-14 09:08 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.Szablon CV2 od praca.gratka.pl.doc#
2015-07-13 13:37 - 2015-07-13 13:43 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00001351 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\Users\Public\Foxit Software
2015-07-13 13:37 - 2015-07-13 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2015-07-13 13:36 - 2015-07-13 13:36 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2015-07-13 13:35 - 2015-07-13 13:36 - 36816072 _____ (Foxit Software Inc. ) C:\Users\Dell Latitude E6430\Downloads\FoxitReader715.0425_prom_enu_Setup.exe
2015-07-11 08:33 - 2015-07-24 22:46 - 00000000 ____D C:\ProgramData\Adobe
2015-07-11 08:33 - 2015-07-24 22:45 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe
2015-07-11 08:33 - 2015-07-11 08:33 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe
2015-07-10 20:05 - 2015-07-10 20:05 - 01190632 _____ (Adobe Systems Incorporated) C:\Users\Dell Latitude E6430\Downloads\readerdc_de_ga_install.exe
2015-07-10 15:17 - 2015-07-07 16:58 - 00012753 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0_1.odt
2015-07-10 15:17 - 2015-07-07 16:30 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_2.odt
2015-07-10 14:39 - 2015-07-10 14:39 - 03725912 _____ C:\Users\Dell Latitude E6430\Downloads\DBSV_09_Film.zip
2015-07-10 10:28 - 2015-07-24 22:45 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-10 10:28 - 2015-07-24 22:45 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-15 11:14 - 00001934 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-07-10 10:28 - 2015-07-10 15:15 - 00000000 ____D C:\ProgramData\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2015-07-10 10:28 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-10 10:28 - 2015-07-10 10:28 - 00000000 ____D C:\ProgramData\McAfee
2015-07-10 10:24 - 2015-07-10 10:24 - 00000000 _____ C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2015-07-09 19:58 - 2015-07-10 10:29 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\Adobe-BackupByPhotoshopCS6Portable
2015-07-09 13:23 - 2015-07-11 09:24 - 00001496 _____ C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-07-08 20:10 - 2015-07-28 10:17 - 00000000 ____D C:\Program Files (x86)\Steep Sex
2015-07-07 16:13 - 2015-06-28 16:33 - 00471097 _____ C:\Users\Dell Latitude E6430\Documents\papier.doc_0_1.odt
2015-07-07 16:13 - 2015-06-28 10:47 - 00013800 _____ C:\Users\Dell Latitude E6430\Documents\umowapolsko-niemiecka.doc_0.odt
2015-07-06 09:59 - 2015-07-06 09:59 - 00000383 _____ C:\ftconfig.ini
2015-07-02 16:13 - 2015-07-02 16:13 - 00946636 _____ C:\Users\Dell Latitude E6430\Downloads\adblock_plus-2.6.9-an+sm+tb+fx.xpi
2015-07-02 15:51 - 2015-07-02 15:51 - 00358604 _____ C:\Users\Dell Latitude E6430\Downloads\nickmsg_216058_a24330bf-d6c8-455b-8a5a-689cb71282c2.wav

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-29 22:21 - 2015-02-19 01:17 - 00021152 _____ C:\Users\Dell Latitude E6430\Downloads\FRST.txt
2015-07-29 22:21 - 2015-02-19 01:17 - 00000000 ____D C:\FRST
2015-07-29 22:21 - 2015-02-19 01:16 - 02169856 _____ (Farbar) C:\Users\Dell Latitude E6430\Downloads\FRST64.exe
2015-07-29 22:16 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-29 22:16 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-29 22:12 - 2014-11-16 10:01 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Google
2015-07-29 22:12 - 2014-04-17 13:52 - 01556220 _____ C:\Windows\WindowsUpdate.log
2015-07-29 22:11 - 2014-04-17 15:12 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\WirelessManager
2015-07-29 00:09 - 2014-04-17 22:45 - 00732486 _____ C:\Windows\system32\perfh015.dat
2015-07-29 00:09 - 2014-04-17 22:45 - 00156064 _____ C:\Windows\system32\perfc015.dat
2015-07-29 00:09 - 2009-07-14 07:13 - 01670518 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-29 00:03 - 2015-03-06 11:09 - 00000442 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-07-29 00:03 - 2015-02-17 22:52 - 00312714 _____ C:\Windows\PFRO.log
2015-07-29 00:03 - 2015-02-17 22:52 - 00018250 _____ C:\Windows\setupact.log
2015-07-29 00:03 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-28 10:23 - 2015-02-20 17:02 - 00000000 ____D C:\AdwCleaner
2015-07-28 10:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SchCache
2015-07-28 10:15 - 2014-11-28 23:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-28 10:15 - 2014-11-16 10:01 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-28 10:15 - 2014-05-11 08:48 - 00001049 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-28 10:15 - 2014-04-17 13:52 - 00000000 ____D C:\Users\Dell Latitude E6430
2015-07-27 19:59 - 2015-02-20 11:10 - 00000000 ____D C:\Qoobox
2015-07-27 19:57 - 2009-07-14 04:34 - 87293952 _____ C:\Windows\system32\config\SOFTWARE.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 44302336 _____ C:\Windows\system32\config\COMPONENTS.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 20709376 _____ C:\Windows\system32\config\SYSTEM.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00524288 _____ C:\Windows\system32\config\DEFAULT.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00065536 _____ C:\Windows\system32\config\SAM.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00024576 _____ C:\Windows\system32\config\SECURITY.bak
2015-07-27 19:57 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-07-27 19:56 - 2015-02-20 11:10 - 00000000 ____D C:\Windows\erdnt
2015-07-27 18:40 - 2015-02-19 01:18 - 00038989 _____ C:\Users\Dell Latitude E6430\Downloads\Addition.txt
2015-07-27 18:19 - 2015-02-19 01:13 - 00000500 _____ C:\Users\Dell Latitude E6430\Downloads\defogger_disable.log
2015-07-27 01:30 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-27 01:27 - 2014-07-24 22:34 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Roaming\vlc
2015-07-27 01:26 - 2009-07-14 06:45 - 00547104 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-27 01:07 - 2015-06-15 08:35 - 00000024 _____ C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-07-27 01:07 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2015-07-24 23:03 - 2015-04-06 07:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-24 23:03 - 2014-12-15 10:33 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-24 23:03 - 2014-05-11 08:33 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-24 23:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-23 20:59 - 2009-07-14 07:08 - 00032520 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-23 20:58 - 2014-05-11 09:03 - 00000000 ____D C:\Windows\system32\MRT
2015-07-22 19:48 - 2014-04-17 14:29 - 00165088 _____ C:\Users\Dell Latitude E6430\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-22 19:44 - 2010-11-21 09:17 - 00000000 ____D C:\Windows\ShellNew
2015-07-22 19:44 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-07-22 19:43 - 2015-05-26 22:05 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-07-22 19:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-07-17 19:02 - 2014-09-11 14:41 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\motory
2015-07-16 10:04 - 2014-08-14 11:17 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\gotgolsad
2015-07-13 13:43 - 2015-05-05 18:45 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-10 16:16 - 2015-05-07 08:24 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\changhong
2015-07-10 15:16 - 2015-06-28 10:32 - 00000154 ____H C:\Users\Dell Latitude E6430\Downloads\.~lock.umowapolsko-niemiecka.doc#
2015-07-10 10:29 - 2014-05-09 11:00 - 00000000 ____D C:\Users\Dell Latitude E6430\AppData\Local\Adobe-BackupByPhotoshopCS6Portable
2015-07-10 10:28 - 2014-05-09 11:00 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-09 13:12 - 2014-08-04 12:30 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\64
2015-07-07 16:15 - 2015-04-20 11:09 - 00000000 ____D C:\Users\Dell Latitude E6430\Desktop\Firmenpapier
2015-07-07 13:40 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-03 08:43 - 2014-05-11 09:03 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-02 15:51 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

==================== Files in the root of some directories =======

2015-06-15 08:35 - 2015-07-27 01:07 - 0000024 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\appdataFr25.bin
2015-02-24 01:49 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bak
2015-03-03 14:50 - 2015-04-12 10:05 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bk!
2015-03-03 14:50 - 2015-04-12 10:06 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.bko
2015-02-24 00:05 - 2015-04-12 14:26 - 0009306 _____ () C:\Users\Dell Latitude E6430\AppData\Roaming\PStrip.ini
2015-07-09 13:23 - 2015-07-11 09:24 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
2015-05-07 09:42 - 2015-06-08 08:17 - 0001496 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
2015-01-10 18:05 - 2015-01-10 18:05 - 0007603 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Resmon.ResmonCfg
2015-07-10 10:24 - 2015-07-10 10:24 - 0000000 _____ () C:\Users\Dell Latitude E6430\AppData\Local\Temp.dat
2014-05-09 10:53 - 2014-05-09 10:53 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
C:\Users\Dell Latitude E6430\AppData\Local\Temp\Quarantine.exe
C:\Users\Dell Latitude E6430\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-23 09:10

==================== End of log ============================
         

 Results of screen317's Security Check version 1.006  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Mozilla Firefox 33.1.1 Firefox out of Date!  
 Google Chrome (43.0.2357.124) 
 Google Chrome (43.0.2357.81) 
 Google Chrome (GoogleUpdateHelper.Vdll..) 
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

ESET Log?