Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 10.10.2013, 08:46   #16
schrauber
/// the machine
/// TB-Ausbilder
 

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



Bei Delfix Download vielleicht Werbung angeklickt? In welchem Browser?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 10.10.2013, 09:01   #17
CP3
 
Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



Ja ich hab ein Häkchen angeklickt:

Entfernen der Reinigungsprogramme

im Mozialla Firefox!!

LG
__________________


Alt 10.10.2013, 09:14   #18
schrauber
/// the machine
/// TB-Ausbilder
 

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Frisches FRST log bitte.
__________________
__________________

Alt 11.10.2013, 08:33   #19
CP3
 
Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!




FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Caroline (administrator) on CARO on 11-10-2013 09:28:03
Running from C:\Users\Caroline\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
() C:\Windows\System32\GFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(TOSHIBA Corporation) C:\windows\system32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Spotify Ltd) C:\Users\Caroline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Dropbox, Inc.) C:\Users\Caroline\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvUseMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeBtMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvProvider.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\klwtblfs.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoUpdateCheck.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12459112 2012-03-16] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound HD] - C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_HD.zip [223180 2012-03-22] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2866960 2011-12-19] (Synaptics Incorporated)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [989056 2011-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1548208 2011-11-24] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-12-15] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-11-26] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2012-05-10] (Toshiba Europe GmbH)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKCU\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Caroline\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1199576 2012-12-28] (Spotify Ltd)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [Pokki] - C:\windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\LaunchDeskband.dll",RunLaunchDeskband
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-10] (Google Inc.)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
MountPoints2: E - E:\Autorun.exe
MountPoints2: {19b3c57d-1ae9-11e3-bd6b-4c72b91a45e6} - E:\Startme.exe
MountPoints2: {aaee438e-2a61-11e2-98e5-4c72b91a45e6} - E:\Autorun.exe
MountPoints2: {d25a96c2-19c5-11e2-9e90-4c72b91a45e6} - E:\unlock.exe autoplay=true
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe [1492264 2011-11-18] (Nero AG)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-01-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-02] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Default\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\Default User\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL C:\PROGRA~2\MOVIES~1\SAFETY~1\x64\SAFETY~2.DLL  [97280 2009-07-14] ()
AppInit_DLLs-x32: c:\progra~3\wincert\win32c~1.dll c:\progra~2\movies~1\safety~1\safety~2.dll [ ] ()
IMEO\bitguard.exe: [Debugger] tasklist.exe
IMEO\bprotect.exe: [Debugger] tasklist.exe
IMEO\browserdefender.exe: [Debugger] tasklist.exe
IMEO\browserprotect.exe: [Debugger] tasklist.exe
Startup: C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Caroline\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120925085242.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: Movies Toolbar (Dist. by Somoto Ltd.) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - C:\PROGRA~2\MOVIES~1\SAFETY~1\SRTOOL~1\IE\searchresultsDx.dll No File
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120925085242.dll No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default
FF NewTab: www.google.com
FF DefaultSearchEngine: LEO Eng-Deu
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: LEO Eng-Deu
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pokki.com/PokkiDownloadHelper - C:\Users\Caroline\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki)
FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TubeSaver - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\132
FF Extension: Movies Toolbar (Dist. by Somoto Ltd.) - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{3444c3c5-6c56-4a16-a453-832b05bf6ea4}
FF Extension: New tab - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{9572F96B-8DD3-0D00-CE9F-956955F73C86}
FF Extension: Movies Toolbar (Dist. by Koyote-Lab, Inc.) - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{a3a8ba13-8b56-46e6-8bc6-2746089b6cb2}
FF Extension: New tab - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{B08F8994-AC71-AB07-5E09-CB39FD50DF38}
FF Extension: firefox - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\firefox@lemurleap.info.xpi
FF Extension: toolbar - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\toolbar@gmx.net.xpi
FF Extension: No Name - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
FF Extension: No Name - C:\Users\Caroline\AppData\Roaming\Mozilla\Firefox\Profiles\as2jpdpc.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF HKCU\...\Firefox\Extensions: [{c4cf403f-d86b-4e5a-a55a-ef6a06352881}] - C:\Program Files (x86)\TubeSaver\132.xpi
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi

Chrome: 
=======
CHR DefaultSearchURL: (Ask.com) - hxxp://dts.search.ask.com/sr?src=crb&gct=ds&appid=135&systemid=414&v=a9397-123&apn_uid=0203701102144170&apn_dtid=BND414&o=APN10649&apn_ptnrs=AGA&q={searchTerms}
CHR DefaultSuggestURL: (Ask.com) -       "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll ()
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll No File
CHR Plugin: (DealPlyLive Update) - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll No File
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Pokki Download Helper) - C:\Users\Caroline\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (Movies Toolbar) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaimdcedbpbcjjbbnfcbbjcngmomic\21.56058_0
CHR Extension: (Docs) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0
CHR Extension: (Safe Money) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.1.4190_0
CHR Extension: (Content Blocker) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0
CHR Extension: (Virtual Keyboard) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4292_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Anti-Banner) - C:\Users\Caroline\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaimdcedbpbcjjbbnfcbbjcngmomic] - C:\Users\Caroline\AppData\Local\somotomoviestoolbar1\GC\toolbar.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [ddjobbmbkpnhmiloopddfpnedcmhcdpg] - C:\Program Files (x86)\Movies Toolbar\Datamngr\chromeExtension.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [jlnfdbbladgcmhhamgkioifhbobjaoof] - C:\Program Files (x86)\LemurLeap\jlnfdbbladgcmhhamgkioifhbobjaoof.crx
CHR HKLM-x32\...\Chrome\Extension: [ojcdnngpmbenohhjlickdajclhbcaada] - C:\Program Files (x86)\TubeSaver\132.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-09-06] (WildTangent)
R2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-10] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2365792 2012-09-14] (TuneUp Software)
S2 SafetyNutManager; C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe [x]
S2 vToolbarUpdater17.0.12; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [x]

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [46368 2013-10-02] (AVG Technologies)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-09-13] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-09-13] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RtkBtFilter; C:\Windows\System32\DRIVERS\RtkBtfilter.sys [21096 2012-01-05] (Realtek Microelectronics)
R3 RTL8192Ce; C:\Windows\System32\DRIVERS\rtwlane.sys [1082472 2012-01-17] (Realtek Semiconductor Corporation                           )
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2010-07-27] (Huawei Technologies Co., Ltd.)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-09-13] (Kaspersky Lab ZAO)
S3 TDEIO; \??\C:\Windows\SysWOW64\sysprep\BOOTPRIO\tdeio64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-11 09:27 - 2013-10-11 09:27 - 01954124 _____ (Farbar) C:\Users\Caroline\Downloads\FRST64.exe
2013-10-11 09:27 - 2013-10-11 09:27 - 00000000 ____D C:\FRST
2013-10-11 00:36 - 2013-10-11 00:36 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-11 00:35 - 2013-10-11 00:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-11 00:35 - 2013-10-11 00:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-11 00:34 - 2013-10-11 00:34 - 00281896 _____ (Mozilla) C:\Users\Caroline\Downloads\Firefox Setup Stub 24.0.exe
2013-10-11 00:32 - 2013-10-11 00:32 - 00002288 _____ C:\Users\Caroline\Desktop\Safe Money.lnk
2013-10-10 10:22 - 2013-10-10 10:22 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Caroline\Downloads\revosetup95.exe
2013-10-10 10:22 - 2013-10-10 10:22 - 00001275 _____ C:\Users\Caroline\Desktop\Revo Uninstaller.lnk
2013-10-10 10:22 - 2013-10-10 10:22 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-10 09:55 - 2013-10-10 09:55 - 00706916 _____ C:\Users\Caroline\Downloads\delfix.exe
2013-10-09 18:36 - 2013-10-09 18:36 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-10-09 18:15 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-09 18:15 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-09 18:15 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-09 18:15 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 18:15 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 18:15 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 18:15 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 18:15 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 18:15 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 18:15 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-09 18:15 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-10-09 18:15 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 17:59 - 2013-10-09 18:03 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 17:59 - 2013-09-26 01:46 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-09 17:49 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-10-09 17:49 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-10-09 17:49 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-10-09 17:49 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-10-09 17:49 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-10-09 17:49 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-10-09 17:49 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-10-09 17:49 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-10-09 17:49 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-10-09 17:49 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-10-09 17:49 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-10-09 17:49 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-10-09 17:49 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-10-09 17:49 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-10-09 17:49 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-10-09 17:49 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-10-09 17:49 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-10-09 17:49 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-10-09 17:49 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-10-09 17:49 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 17:49 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 17:49 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 17:49 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 17:49 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 17:49 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-10-09 17:49 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 17:49 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-10-09 17:49 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-10-09 17:49 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-10-09 17:49 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 17:49 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-10-09 17:49 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys
2013-10-09 17:49 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 17:49 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 17:49 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 17:49 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-10-09 17:49 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-10-09 17:49 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-10-09 17:49 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 17:49 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-10-09 17:49 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-10-09 17:49 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-10-09 17:49 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 17:49 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-09 17:49 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 17:48 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-10-09 17:48 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-10-09 17:47 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 17:47 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 17:47 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 17:47 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 17:47 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 17:47 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-10-09 17:47 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 17:19 - 2013-10-09 19:04 - 00000755 _____ C:\DelFix.txt
2013-10-09 08:57 - 2013-10-09 09:29 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE
2013-10-09 08:54 - 2013-10-09 08:54 - 00000207 _____ C:\windows\tweaking.com-regbackup-CARO-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2013-10-09 08:53 - 2013-10-09 08:53 - 00000000 ____D C:\RegBackup
2013-10-09 08:22 - 2013-10-09 08:22 - 00003288 ____N C:\bootsqm.dat
2013-10-07 18:19 - 2013-10-07 17:16 - 00000000 ____D C:\Users\Caroline\fotos-verteilen
2013-10-07 18:16 - 2013-10-07 18:16 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-07 11:25 - 2013-10-07 11:25 - 00015412 _____ C:\Users\Caroline\Documents\bookmarks-2013-10-07.json
2013-10-04 10:37 - 2013-10-04 10:37 - 00002030 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-04 09:25 - 2013-10-09 17:19 - 00000000 ____D C:\windows\ERUNT
2013-10-04 09:10 - 2013-10-04 09:10 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-10-04 09:08 - 2013-10-04 09:08 - 00000000 ____D C:\Users\Caroline\AppData\Local\WebPlayer
2013-10-04 09:07 - 2013-10-04 09:07 - 00000000 ____D C:\Users\Caroline\AppData\Local\somotomoviestoolbar1
2013-10-04 09:06 - 2013-10-09 23:20 - 00000000 ____D C:\ProgramData\SafetyNut
2013-10-04 09:06 - 2013-10-04 09:06 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar
2013-10-04 09:03 - 2013-10-04 09:03 - 00166616 _____ () C:\Users\Caroline\Downloads\7ZipSetup.exe
2013-10-04 07:34 - 2013-10-09 18:38 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-04 07:34 - 2013-10-09 18:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-04 07:34 - 2013-10-04 07:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Malwarebytes
2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-04 07:34 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-10-03 16:35 - 2013-10-03 16:36 - 00000000 ____D C:\Users\Caroline\Downloads\James Horner - Avatar [2156] PL
2013-10-03 08:14 - 2013-10-03 08:23 - 00000000 ____D C:\AdwCleaner
2013-09-29 22:00 - 2013-09-29 22:01 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\WildTangent
2013-09-29 21:59 - 2013-09-29 21:59 - 00002625 ____N C:\Users\Public\Desktop\WildTangent Games App - toshiba.lnk
2013-09-19 11:57 - 2013-09-19 11:57 - 00001122 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-09-17 09:31 - 2013-09-17 09:31 - 02192667 _____ C:\Users\Caroline\Documents\Backup Samsung Caro 2013-09-17.mpb
2013-09-16 19:08 - 2013-09-16 19:08 - 00000000 ____D C:\Users\Caroline\Downloads\Kaspersky Internet Security 2013 v13.0.0.3370 FINAL + Keys [ThumperDC]
2013-09-14 15:45 - 2013-09-23 12:39 - 00000546 _____ C:\windows\wininit.ini
2013-09-13 09:08 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\windows\system32\klfphc.dll
2013-09-13 09:07 - 2013-10-11 09:19 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\windows\ELAMBKUP
2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-13 08:42 - 2013-09-13 08:42 - 00000000 ____D C:\Program Files\License Keys For all Antivirus Latest
2013-09-13 08:38 - 2013-09-13 08:38 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\HTML Executable
2013-09-13 08:14 - 2013-09-13 08:31 - 00000000 ____D C:\Users\Caroline\Downloads\The Best Antivirus Software of 2013 Premium Edition Mega Pack
2013-09-11 18:51 - 2013-09-19 08:18 - 00002037 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\ProgramData\Sony
2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\Program Files (x86)\Sony
2013-09-11 18:49 - 2013-09-11 18:49 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_wpdcomp_01_09_00.Wdf
2013-09-11 11:12 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-09-11 11:11 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-09-11 11:11 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-09-11 11:11 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-09-11 11:11 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-09-11 11:11 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-09-11 11:11 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 11:11 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 11:11 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-09-11 11:11 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-09-11 11:11 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-09-11 11:11 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-09-11 11:01 - 2013-09-11 11:01 - 97080355 _____ C:\windows\SysWOW64\⎇剼�B

==================== One Month Modified Files and Folders =======

2013-10-11 09:27 - 2013-10-11 09:27 - 01954124 _____ (Farbar) C:\Users\Caroline\Downloads\FRST64.exe
2013-10-11 09:27 - 2013-10-11 09:27 - 00000000 ____D C:\FRST
2013-10-11 09:21 - 2009-07-14 06:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-11 09:21 - 2009-07-14 06:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-11 09:20 - 2012-06-05 16:52 - 01079928 _____ C:\windows\WindowsUpdate.log
2013-10-11 09:20 - 2011-02-11 10:21 - 00640538 _____ C:\windows\system32\perfh007.dat
2013-10-11 09:20 - 2011-02-11 10:21 - 00126070 _____ C:\windows\system32\perfc007.dat
2013-10-11 09:20 - 2009-07-14 07:13 - 01498742 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-11 09:19 - 2013-09-13 09:07 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-10-11 09:17 - 2012-09-26 20:25 - 00000000 ___RD C:\Users\Caroline\Dropbox
2013-10-11 09:17 - 2012-09-25 22:39 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Dropbox
2013-10-11 09:16 - 2012-06-05 16:58 - 00000828 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-10-11 09:16 - 2012-05-10 23:30 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-11 09:15 - 2013-01-07 23:35 - 00000266 _____ C:\windows\Tasks\AutoKMS.job
2013-10-11 09:15 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-11 09:15 - 2009-07-14 06:51 - 00096937 _____ C:\windows\setupact.log
2013-10-11 00:46 - 2013-06-14 11:11 - 00002266 _____ C:\Users\Caroline\Desktop\Google Chrome.lnk
2013-10-11 00:36 - 2013-10-11 00:36 - 00001158 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-11 00:36 - 2013-10-11 00:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-11 00:36 - 2013-10-11 00:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-11 00:34 - 2013-10-11 00:34 - 00281896 _____ (Mozilla) C:\Users\Caroline\Downloads\Firefox Setup Stub 24.0.exe
2013-10-11 00:32 - 2013-10-11 00:32 - 00002288 _____ C:\Users\Caroline\Desktop\Safe Money.lnk
2013-10-11 00:29 - 2010-11-21 05:47 - 00361830 _____ C:\windows\PFRO.log
2013-10-10 10:22 - 2013-10-10 10:22 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Caroline\Downloads\revosetup95.exe
2013-10-10 10:22 - 2013-10-10 10:22 - 00001275 _____ C:\Users\Caroline\Desktop\Revo Uninstaller.lnk
2013-10-10 10:22 - 2013-10-10 10:22 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-10-10 10:18 - 2012-09-25 08:48 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Skype
2013-10-10 10:14 - 2012-05-10 23:30 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 10:01 - 2012-05-10 23:25 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-10 09:55 - 2013-10-10 09:55 - 00706916 _____ C:\Users\Caroline\Downloads\delfix.exe
2013-10-10 08:27 - 2012-07-25 14:53 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klmouflt.sys
2013-10-10 08:27 - 2012-05-25 19:38 - 00029280 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klkbdflt.sys
2013-10-10 08:26 - 2012-08-13 18:24 - 00626272 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klif.sys
2013-10-10 08:26 - 2012-06-19 17:28 - 07717984 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kl1.sys
2013-10-09 23:20 - 2013-10-04 09:06 - 00000000 ____D C:\ProgramData\SafetyNut
2013-10-09 19:04 - 2013-10-09 17:19 - 00000755 _____ C:\DelFix.txt
2013-10-09 18:38 - 2013-10-04 07:34 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-10-09 18:38 - 2013-10-04 07:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-09 18:36 - 2013-10-09 18:36 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-10-09 18:26 - 2009-07-14 06:45 - 00425400 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-09 18:25 - 2013-03-12 23:52 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 18:25 - 2013-03-12 23:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 18:21 - 2012-09-26 09:12 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-09 18:12 - 2012-10-11 17:37 - 00000000 ____D C:\Users\Caroline\Documents\UNIVERSITY
2013-10-09 18:03 - 2013-10-09 17:59 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 17:19 - 2013-10-04 09:25 - 00000000 ____D C:\windows\ERUNT
2013-10-09 10:50 - 2012-06-05 16:58 - 00000830 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-10-09 09:34 - 2012-09-20 13:20 - 00116496 _____ C:\Users\Caroline\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-09 09:31 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-10-09 09:29 - 2013-10-09 08:57 - 00181064 _____ (Sysinternals) C:\windows\PSEXESVC.EXE
2013-10-09 09:28 - 2009-07-14 04:34 - 00000546 _____ C:\windows\win.ini
2013-10-09 09:19 - 2012-12-10 12:07 - 00000000 ____D C:\Users\Caroline\Documents\Noten
2013-10-09 08:54 - 2013-10-09 08:54 - 00000207 _____ C:\windows\tweaking.com-regbackup-CARO-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2013-10-09 08:53 - 2013-10-09 08:53 - 00000000 ____D C:\RegBackup
2013-10-09 08:22 - 2013-10-09 08:22 - 00003288 ____N C:\bootsqm.dat
2013-10-07 18:19 - 2012-09-20 13:17 - 00000000 ____D C:\Users\Caroline
2013-10-07 18:16 - 2013-10-07 18:16 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-07 17:16 - 2013-10-07 18:19 - 00000000 ____D C:\Users\Caroline\fotos-verteilen
2013-10-07 11:25 - 2013-10-07 11:25 - 00015412 _____ C:\Users\Caroline\Documents\bookmarks-2013-10-07.json
2013-10-04 10:37 - 2013-10-04 10:37 - 00002030 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-10-04 09:30 - 2013-01-19 18:14 - 00000000 ____D C:\Users\Caroline\Documents\This and That
2013-10-04 09:10 - 2013-10-04 09:10 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-10-04 09:08 - 2013-10-04 09:08 - 00000000 ____D C:\Users\Caroline\AppData\Local\WebPlayer
2013-10-04 09:07 - 2013-10-04 09:07 - 00000000 ____D C:\Users\Caroline\AppData\Local\somotomoviestoolbar1
2013-10-04 09:06 - 2013-10-04 09:06 - 00000000 ____D C:\Program Files (x86)\Movies Toolbar
2013-10-04 09:03 - 2013-10-04 09:03 - 00166616 _____ () C:\Users\Caroline\Downloads\7ZipSetup.exe
2013-10-04 07:34 - 2013-10-04 07:34 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Caroline\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\Malwarebytes
2013-10-04 07:34 - 2013-10-04 07:34 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-03 17:10 - 2012-11-12 21:17 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\uTorrent
2013-10-03 16:36 - 2013-10-03 16:35 - 00000000 ____D C:\Users\Caroline\Downloads\James Horner - Avatar [2156] PL
2013-10-03 08:23 - 2013-10-03 08:14 - 00000000 ____D C:\AdwCleaner
2013-10-02 20:49 - 2013-05-24 09:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-10-02 20:49 - 2012-09-25 07:28 - 00000000 ____D C:\Users\Caroline\AppData\Local\Mozilla
2013-10-02 19:49 - 2013-06-27 11:55 - 00003728 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-10-02 19:49 - 2013-05-05 14:09 - 00046368 _____ (AVG Technologies) C:\windows\system32\Drivers\avgtpx64.sys
2013-09-29 22:05 - 2012-05-10 23:20 - 00000000 ____D C:\ProgramData\WildTangent
2013-09-29 22:01 - 2013-09-29 22:00 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\WildTangent
2013-09-29 22:00 - 2012-05-10 23:20 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2013-09-29 21:59 - 2013-09-29 21:59 - 00002625 ____N C:\Users\Public\Desktop\WildTangent Games App - toshiba.lnk
2013-09-28 08:03 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-09-26 01:46 - 2013-10-09 17:59 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-09-23 12:39 - 2013-09-14 15:45 - 00000546 _____ C:\windows\wininit.ini
2013-09-23 01:28 - 2013-10-09 18:15 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 18:15 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-23 01:27 - 2013-10-09 18:15 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-23 00:55 - 2013-10-09 18:15 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 18:15 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 18:15 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 18:15 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-23 00:54 - 2013-10-09 18:15 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-21 05:38 - 2013-10-09 18:15 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-09 18:15 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-09 18:15 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-09 18:15 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-19 11:57 - 2013-09-19 11:57 - 00001122 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-09-19 08:18 - 2013-09-11 18:51 - 00002037 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-09-19 08:18 - 2012-06-05 17:10 - 00345998 _____ C:\windows\DPINST.LOG
2013-09-19 08:17 - 2012-05-10 23:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-17 09:31 - 2013-09-17 09:31 - 02192667 _____ C:\Users\Caroline\Documents\Backup Samsung Caro 2013-09-17.mpb
2013-09-16 19:08 - 2013-09-16 19:08 - 00000000 ____D C:\Users\Caroline\Downloads\Kaspersky Internet Security 2013 v13.0.0.3370 FINAL + Keys [ThumperDC]
2013-09-14 03:10 - 2013-10-09 17:49 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-09-13 10:03 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kneps.sys
2013-09-13 10:03 - 2012-06-08 11:38 - 00054368 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\kltdi.sys
2013-09-13 09:58 - 2012-08-13 18:24 - 00090208 _____ (Kaspersky Lab ZAO) C:\windows\system32\Drivers\klflt.sys
2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\windows\ELAMBKUP
2013-09-13 09:07 - 2013-09-13 09:07 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-09-13 08:42 - 2013-09-13 08:42 - 00000000 ____D C:\Program Files\License Keys For all Antivirus Latest
2013-09-13 08:38 - 2013-09-13 08:38 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\HTML Executable
2013-09-13 08:31 - 2013-09-13 08:14 - 00000000 ____D C:\Users\Caroline\Downloads\The Best Antivirus Software of 2013 Premium Edition Mega Pack
2013-09-11 18:53 - 2013-09-06 19:18 - 00000000 ____D C:\Users\Caroline\AppData\Roaming\MyPhoneExplorer
2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\ProgramData\Sony
2013-09-11 18:50 - 2013-09-11 18:50 - 00000000 ____D C:\Program Files (x86)\Sony
2013-09-11 18:49 - 2013-09-11 18:49 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_wpdcomp_01_09_00.Wdf
2013-09-11 15:53 - 2012-09-20 13:19 - 00000000 ___RD C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-11 15:53 - 2012-09-20 13:17 - 00000000 ___RD C:\Users\Caroline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-11 11:01 - 2013-09-11 11:01 - 97080355 _____ C:\windows\SysWOW64\⎇剼�B

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-28 15:33

==================== End Of Log ============================
         
--- --- ---

Alt 11.10.2013, 09:01   #20
schrauber
/// the machine
/// TB-Ausbilder
 

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



Noch Probleme?

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 11.10.2013, 09:07   #21
CP3
 
Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



Ja leider die seitlichen Pop Up Fenster tauchen immer noch auf!

Alt 11.10.2013, 12:03   #22
schrauber
/// the machine
/// TB-Ausbilder
 

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



Kannste mir davon mal nen Screenshot machen? Immer noch nur in Firefox? Wurden wirklich keine Daten behalten? Addon Adblock Plus ist installiert?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 11.10.2013, 16:54   #23
CP3
 
Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



Ok, jetzt ist der Blocker wieder installiert und momentan kommen auch keine Pop Up Fenster!!!


Vielen lieben Dank!!!

LG

Alt 12.10.2013, 14:52   #24
schrauber
/// the machine
/// TB-Ausbilder
 

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Standard

Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!



ok
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!
adw cleaner, appdatalow, doppelt unterstrichene wörter, gmx.net, pup.babylon.a, pup.bundleinstaller.dw, pup.optional.babsolution.a, pup.optional.babylon.a, pup.optional.babylontoolbar.a, pup.optional.browsefox.a, pup.optional.datamngr.a, pup.optional.dealply.a, pup.optional.delta, pup.optional.delta.a, pup.optional.goforfiles.a, pup.optional.lemurleap.a, pup.optional.moviestoolbar.a, pup.optional.opencandy, pup.optional.performersoft.a, pup.optional.softonic, pup.optional.webcake.a, pup.optional.yontoo.a, registrierungsdatenbank, search the web, tarma, trojan:js/medfos.b




Ähnliche Themen: Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!


  1. Doppelt unterstrichene Wörter in Firefox
    Plagegeister aller Art und deren Bekämpfung - 01.12.2014 (12)
  2. Google Chrome, Mozilla, Virus oder Trojaner Fehlermeldung: Java Update erforderlich, Werbung, doppelt unterstrichene Wörter
    Plagegeister aller Art und deren Bekämpfung - 11.11.2014 (3)
  3. Blaue doppelt unterstrichene Wörter, Werbung (Firefox)
    Log-Analyse und Auswertung - 12.09.2014 (19)
  4. Pop Ups ohne Ende doppelt unterstrichene Wörter
    Plagegeister aller Art und deren Bekämpfung - 20.04.2014 (7)
  5. Doppelt grün unterstrichene Wörter mit Verlinkung
    Log-Analyse und Auswertung - 23.03.2014 (52)
  6. Doppelt unterstrichene Wörter mit Werbung bei Google Chrome
    Plagegeister aller Art und deren Bekämpfung - 18.03.2014 (22)
  7. Doppelt unterstrichene Wörter mit Pop-ups
    Log-Analyse und Auswertung - 17.02.2014 (17)
  8. doppelt unterstrichene Wörter, Werbetabs, Popups bei Firefox
    Log-Analyse und Auswertung - 24.12.2013 (7)
  9. grüne, doppelt-unterstrichene Wörter auf Webseiten öffnen Pop-up Fenster
    Plagegeister aller Art und deren Bekämpfung - 14.12.2013 (9)
  10. doppelt unterstrichene Wörter, Werbungsfenster, Firefox
    Log-Analyse und Auswertung - 20.11.2013 (13)
  11. Doppelt unterstrichene Wörter und Popups
    Log-Analyse und Auswertung - 17.11.2013 (2)
  12. auch bei mir: doppelt unterstrichene Wörter, Werbungsfenster, Firefox
    Plagegeister aller Art und deren Bekämpfung - 01.11.2013 (6)
  13. Doppelt unterstrichene Wörter und Popups
    Log-Analyse und Auswertung - 26.10.2013 (13)
  14. doppelt unterstrichene Wörter in roter Farbe
    Plagegeister aller Art und deren Bekämpfung - 17.10.2013 (6)
  15. doppelt unterstrichene markierte Wörter auf Websites und Werbebuttoms
    Log-Analyse und Auswertung - 06.10.2013 (15)
  16. Windows 7: Trojaner - doppelt blau unterstrichene Wörter im Browser
    Log-Analyse und Auswertung - 03.10.2013 (5)
  17. Windows XP: Doppelt unterstrichene, farbige Wörter mit WebLink
    Log-Analyse und Auswertung - 20.09.2013 (3)

Zum Thema Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! - Bei Delfix Download vielleicht Werbung angeklickt? In welchem Browser? - Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster!...
Archiv
Du betrachtest: Trojaner? doppelt unterstrichene Wörter und unzählige Pop up Fenster! auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.