Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Nationzoom entfernen

Nationzoom entfernen


Log-Analyse und Auswertung: Nationzoom entfernen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 01.12.2013, 19:53   #1
T2807
 
Nationzoom entfernen - Standard

Nationzoom entfernen


Hallo ich bin neu im Forum, ich habe seit heute Nationzoom im Browser und weiß nicht wie ich es los werde ich habe schon JRT benutzt das hat aber auch nichts geholfen
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by tina on 01.12.2013 at 18:10:23,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r484-n-bc_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iLividSetup-r484-n-bc_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup-r484-n-bc_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\iLividSetup-r484-n-bc_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{1D195E9C-7EDD-4D32-9840-BDA4663999CB}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99}



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho3B56.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho3D92.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho3ED8.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho686B.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho8A86.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoB425.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoB59E.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoC4EA.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoD840.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoDD76.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE0D2.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoF85B.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoF9FE.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\Users\tina\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Program Files (x86)\web layers"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{0437F93D-3978-421C-9BE6-2FAA4FA612EE}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{098ED9DE-D685-4791-8446-9F699B617BB0}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{09DEF591-32E3-4EDB-ABA8-B8212266F82E}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{0A48E771-1102-4341-9CF1-AC09F86F4142}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{11ADC4ED-7904-4089-AEAF-8B6FD0F9EEAA}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{1224436D-D17D-4FEF-AC5F-AE440C8E6329}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{1282A494-5FFC-410B-826E-FCF8143DB3C7}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{18699120-F626-4EB4-A2B4-C2B539363672}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{1C3274EE-7B71-4825-AF50-A4166CB990D7}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{1E70DCC1-8C17-4B03-8374-3CAE5B273316}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{2CEB2755-FAD5-4DBC-BE14-DF320F3E1C21}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{33547216-1535-41FA-BF94-3E48D56F6510}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{34606DDA-1C4E-4C7F-A86B-B6A0678D12E8}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{355D1DC6-1FE2-4960-941E-C1BACECF45DB}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{3C0DD5C5-03F8-4DA0-8A18-7079D895A5A1}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{3D0284D6-D273-4225-807A-794C158E5961}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{41DAAD02-3560-487B-A9AA-419A5F1E5F39}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{4F19BD5E-74FD-45DE-A95A-EB802809CADA}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{532CEE2D-1E27-4423-841B-4F852C9EF47B}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{58DF7D5C-30B7-4BDD-94FE-E1E7228C002E}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{59F4BC9E-473B-4A9B-B036-E7A9E4045076}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{5C18D652-D008-407C-A28F-F5B92A71B21A}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{60F3C4D1-721B-43F4-805E-2D0F82B8FC8E}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{62A60B8E-9422-4239-A42F-FDE70DFE29EA}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{645C78AD-0814-4252-905D-947FC83CEC5E}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{68D778DA-B9E2-4F52-B995-C8B2B165FD6A}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{6D41F914-83FA-46D6-ADE2-24EFCAF269BE}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{6DD3217B-E22C-4B17-AC3D-3CE85498E871}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{6F6349E1-0ACC-4443-9E54-DFD59602A99E}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{72D13142-1C05-4BA9-B496-4D71BB38625D}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{79DD45CB-E2CE-4681-B205-666AF783362C}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{82B06088-0E8E-4BB1-B4F0-A9830E5CF30B}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{82C3A529-B384-419A-BE7D-A153DD980CD1}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{8C019FA9-2ABB-4536-AE20-C8ED0EFC3CE2}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{8C852815-02BF-433C-BC9E-408552BEABC0}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{8CEFD1B4-1EA8-4071-9709-C2FC7E280147}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{900509ED-D0AC-490A-B870-83F4E752D3B1}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{91E91CD5-D267-4229-89FA-BD3019BB690B}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{966F4BA1-481B-47C1-8E07-2A62E740E9D2}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{967C1D47-964E-41B9-ADAB-8BFF71B8BB4B}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{98185614-CD8C-4E71-9476-F893BE9516C9}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{98DAD9E7-A2BD-41C4-AA5D-99D77CAAE846}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{9BAC4B08-57DC-4A5B-A486-0CAF481FF2B6}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{9C2590B7-3684-40F9-8DE8-77D8F6E75DBA}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{9C724DFA-E2F4-4E5D-ABC3-5B101A49DEC1}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{9D721370-BF9A-4060-8AA9-572D338B1747}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{9DA35540-BDB0-4DDF-82CD-3C60BA098164}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{9FB5D883-E323-4453-ABB1-66D816A0C3A6}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{AE1E7EF4-6D48-49C6-B36B-263DC4B2797E}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{AFB1F77D-56DF-48DA-95D7-9FFA118C81CC}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{B3CA179B-A1D0-4DD8-AB83-5D0DA2D8DAEB}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{B4E098C3-0569-4286-AEBF-1DC1483306A2}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{B878F2D8-ACB4-4143-9A37-E661F4688067}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{B94931D1-DD07-48F4-8D40-CA94285F6EE6}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{BED12EC3-5BF2-40C6-93F5-7DB472E299FA}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{BF0428EF-BDC2-4957-B49B-9B298F7B9025}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{C7534E62-7B6F-4CCE-9F02-A1CD5382F417}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{C7EC11A7-EAE7-40C8-8B6B-DB44E32A12F1}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{CCC73E1A-BD04-42E6-8018-545C7642760A}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{D04A9495-F4BF-4B76-8B20-4A9252DF0E65}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{D274FA2E-00CD-47E6-B331-B0B1B2B7D467}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{D9450D04-3230-4476-AAB1-29AF1724C502}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{D970BC76-9B92-4051-859B-38EA79C765B9}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{DAB82182-FA41-4131-A5F2-D2360CC8E9AD}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{DB906E68-BD61-4A54-BCD7-0F73C9BBA3F2}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{DD1E21ED-58FD-42F0-94B6-A400F2E62239}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{E2DFE288-BF57-468E-A5AB-8F0DC8A9270C}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{E61785ED-C897-4C46-AF44-D9B39D4F5CA7}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{E63A9ED2-B5E0-4A4B-B92F-3181043D14E8}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{F1020A33-0673-42F2-B8FE-2B70054CAEB9}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{F828DD97-3980-468E-A9DF-31CBBCCCE2BA}
Successfully deleted: [Empty Folder] C:\Users\tina\appdata\local\{FC009BCD-7D91-436F-85AD-20D7DE430B96}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.12.2013 at 18:36:30,77
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Alt 01.12.2013, 21:48   #2
M-K-D-B
/// TB-Ausbilder
 
Nationzoom entfernen - Standard

Nationzoom entfernen





Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 4 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
    Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
    Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
    Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.





Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
Alt 01.12.2013, 23:26   #3
T2807
 
Nationzoom entfernen - Standard

Nationzoom entfernen



FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2013
Ran by tina (administrator) on TIM-HP on 01-12-2013 23:11:34
Running from C:\Users\tina\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccsvchst.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Spotify Ltd) C:\Users\tina\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Users\tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\tina\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\tina\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-21] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6602856 2011-01-11] (Realtek Semiconductor)
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-21] (Hewlett-Packard Company)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-11-27] (Hewlett-Packard)
HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [26624 2010-11-21] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [Google Update] - C:\Users\tina\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-01-16] (Google Inc.)
HKCU\...\Run: [Facebook Update] - C:\Users\tina\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-13] (Facebook Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\tina\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-19] (Spotify Ltd)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [Windows] - "C:\Users\tina\AppData\Roaming\Picture_74596856.Exe"
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
MountPoints2: G - G:\AutoRun.exe
MountPoints2: {7c230f5e-f6a3-11e1-b967-2c27d70ce6a7} - G:\AutoRun.exe
MountPoints2: {8d45f60a-d87f-11e1-92df-2c27d70ce6a7} - F:\Startme.exe
MountPoints2: {a5b9625f-4257-11e3-9a91-2c27d70ce6a7} - G:\Startme.exe
MountPoints2: {d76d1ac5-4103-11e1-bb3e-2c27d70ce6a7} - G:\AutoRun.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-03-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-02-10] (EasyBits Software AS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-11-28] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Tv-Plug-In] - "C:\Program Files (x86)\Tv-Plug-In\Tv-Plug-In.exe" nogui
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\MAMA\...\Run: [Google Update] - C:\Users\MAMA\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-01-18] (Google Inc.)
HKU\MAMA\...\Run: [Facebook Update] - C:\Users\MAMA\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-08-19] (Facebook Inc.)
HKU\MAMA\...\Policies\system: [LogonHoursAction] 2
HKU\MAMA\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Tom\...\Run: [Google Update] - C:\Users\Tom\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-03-11] (Google Inc.)
HKU\Tom\...\Run: [Facebook Update] - C:\Users\Tom\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKU\Tom\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKU\Tom\...\Policies\system: [LogonHoursAction] 2
HKU\Tom\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs:     [ ] ()
Startup: C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1385909237&from=tugs&uid=HitachiXHTS543232A7A384_E2034243C4K1ZDC4K1ZDX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1385909237&from=tugs&uid=HitachiXHTS543232A7A384_E2034243C4K1ZDC4K1ZDX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1385909237&from=tugs&uid=HitachiXHTS543232A7A384_E2034243C4K1ZDC4K1ZDX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1385909237&from=tugs&uid=HitachiXHTS543232A7A384_E2034243C4K1ZDC4K1ZDX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1385909237&from=tugs&uid=HitachiXHTS543232A7A384_E2034243C4K1ZDC4K1ZDX&q={searchTerms}
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coieplg.dll (Symantec Corporation)
BHO-x32: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coieplg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-04-26] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (ProxTube) - C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.5_0
CHR Extension: (YouTube) - C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1
CHR Extension: (Google Search) - C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1
CHR Extension: (KWICK! Community) - C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfmlccgdifmjkichgfmelkappjdfabka\1_1
CHR Extension: (Google Wallet) - C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Mass Effect 3 1920x1080) - C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbajkfcoapbkccklekmjkhikfdcciojo\1_0
CHR Extension: (Gmail) - C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR StartMenuInternet: Google Chrome - C:\Users\tina\AppData\Local\Google\Chrome\Application\chrome.exe hxxp://www.nationzoom.com/?type=sc&ts=1385909237&from=tugs&uid=HitachiXHTS543232A7A384_E2034243C4K1ZDC4K1ZDX

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-03-04] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe [130008 2011-04-17] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-10-26] ()
R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [199600 2010-08-02] (Telefónica I+D)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [106904 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20120121.002\BHDrvx64.sys [1157240 2011-12-23] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [482936 2012-01-16] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138360 2012-01-16] (Symantec Corporation)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20120124.005\IDSvia64.sys [488568 2011-12-16] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20120124.035\ENG64.SYS [117880 2012-01-16] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20120124.035\EX64.SYS [2048632 2012-01-16] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1206000.01D\SRTSP64.SYS [744568 2011-03-31] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1206000.01D\SRTSPX64.SYS [40568 2011-03-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1206000.01D\SYMDS64.SYS [450680 2011-01-27] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1206000.01D\SYMEFA64.SYS [912504 2011-03-15] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2012-01-17] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1206000.01D\Ironx64.SYS [171128 2011-01-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1206000.01D\SYMNETS.SYS [386168 2011-07-08] (Symantec Corporation)
S3 ALSysIO; \??\C:\Users\ADMINI~1\AppData\Local\Temp\ALSysIO64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [114560 2010-03-20] (Huawei Technologies Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-01 23:11 - 2013-12-01 23:11 - 00018415 _____ C:\Users\tina\Desktop\FRST.txt
2013-12-01 18:10 - 2013-12-01 18:10 - 00000000 ____D C:\Windows\ERUNT
2013-12-01 18:05 - 2013-12-01 18:06 - 01034531 _____ (Thisisu) C:\Users\tina\Downloads\JRT.exe
2013-12-01 16:54 - 2013-12-01 16:56 - 00033270 _____ C:\Users\tina\Downloads\Addition.txt
2013-12-01 16:52 - 2013-12-01 18:57 - 00000000 ____D C:\AdwCleaner
2013-12-01 16:51 - 2013-12-01 16:53 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tina\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-12-01 16:46 - 2013-12-01 16:46 - 01959184 _____ (Farbar) C:\Users\tina\Downloads\FRST64 (1).exe
2013-12-01 16:25 - 2013-12-01 16:26 - 58901968 _____ (GridinSoft LLC) C:\Users\tina\Downloads\gtk-2.1.9.8-setup.exe
2013-12-01 16:18 - 2013-12-01 16:56 - 00065106 _____ C:\Users\tina\Downloads\FRST.txt
2013-12-01 16:18 - 2013-12-01 16:18 - 00000000 ____D C:\FRST
2013-12-01 16:17 - 2013-12-01 16:18 - 01959184 _____ (Farbar) C:\Users\tina\Desktop\FRST64.exe
2013-12-01 16:09 - 2013-12-01 16:09 - 01937144 _____ (Bleeping Computer, LLC) C:\Users\tina\Downloads\rkill.exe
2013-12-01 16:09 - 2013-12-01 16:09 - 01059064 _____ (Bleeping Computer, LLC) C:\Users\tina\Downloads\rkill64.exe
2013-11-26 23:38 - 2013-11-26 23:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-26 23:28 - 2013-11-26 23:28 - 32004832 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\tina\Downloads\FreeYouTubeDownload (2).exe
2013-11-24 08:52 - 2013-11-24 08:52 - 105869762 _____ C:\Windows\SysWOW64\륙뭭ᵌ˜
2013-11-23 19:55 - 2013-11-23 19:55 - 105869762 _____ C:\Windows\SysWOW64\룩ᵌ
2013-11-16 00:07 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-15 23:52 - 2013-11-15 23:52 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-15 23:52 - 2013-11-15 23:52 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-15 23:52 - 2013-11-15 23:52 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-15 23:52 - 2013-11-15 23:52 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-15 23:52 - 2013-11-15 23:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-15 23:52 - 2013-11-15 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-15 23:51 - 2013-11-15 23:51 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-15 23:51 - 2013-11-15 23:51 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 23:51 - 2013-11-15 23:51 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 23:51 - 2013-11-15 23:51 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 23:51 - 2013-11-15 23:51 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-15 23:48 - 2013-11-16 00:07 - 00011303 _____ C:\Windows\IE11_main.log
2013-11-15 21:02 - 2013-11-28 21:04 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleFortina
2013-11-15 21:02 - 2013-11-28 21:04 - 00000328 _____ C:\Windows\Tasks\HPCeeScheduleFortina.job
2013-11-15 16:29 - 2013-11-15 16:29 - 104401821 _____ C:\Windows\SysWOW64\ᳳᵌZ
2013-11-13 19:48 - 2013-11-13 19:48 - 00000000 ____D C:\190e394a0aceaadfb494
2013-11-13 19:44 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 19:44 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 19:43 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 19:43 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 19:43 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 19:43 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 19:43 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 19:43 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 19:43 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 19:42 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 19:42 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 19:42 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 19:42 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 19:42 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 19:42 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 19:42 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 19:42 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 19:42 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 19:42 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 19:42 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 19:42 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 19:42 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 19:42 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 19:39 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 19:39 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 19:39 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 19:39 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 19:39 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 19:39 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 19:39 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-05 17:47 - 2013-11-05 17:47 - 00002026 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-11-02 14:59 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-11-02 14:59 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-11-02 14:59 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-11-02 14:59 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-11-02 14:59 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-11-02 14:59 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-11-02 14:59 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

==================== One Month Modified Files and Folders =======

2013-12-01 23:14 - 2013-12-01 23:11 - 00018415 _____ C:\Users\tina\Desktop\FRST.txt
2013-12-01 23:06 - 2012-01-16 20:56 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1001UA.job
2013-12-01 23:05 - 2012-04-16 14:21 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-01 22:58 - 2012-06-05 12:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-01 22:54 - 2012-01-18 16:29 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1002UA.job
2013-12-01 22:35 - 2012-03-11 20:29 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1003UA.job
2013-12-01 22:19 - 2012-06-16 08:55 - 00001130 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1003UA.job
2013-12-01 22:15 - 2009-07-14 05:51 - 00155243 _____ C:\Windows\setupact.log
2013-12-01 21:12 - 2012-01-21 22:49 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1002UA.job
2013-12-01 21:04 - 2012-04-16 14:21 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-01 20:32 - 2012-01-17 21:23 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1001UA.job
2013-12-01 20:06 - 2012-01-16 20:56 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1001Core.job
2013-12-01 19:54 - 2012-01-18 16:29 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1002Core.job
2013-12-01 18:57 - 2013-12-01 16:52 - 00000000 ____D C:\AdwCleaner
2013-12-01 18:10 - 2013-12-01 18:10 - 00000000 ____D C:\Windows\ERUNT
2013-12-01 18:09 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-01 18:09 - 2009-07-14 05:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-01 18:06 - 2013-12-01 18:05 - 01034531 _____ (Thisisu) C:\Users\tina\Downloads\JRT.exe
2013-12-01 17:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-01 17:54 - 2011-05-27 13:39 - 01485945 _____ C:\Windows\WindowsUpdate.log
2013-12-01 17:50 - 2012-02-25 00:21 - 00000000 ____D C:\ProgramData\ICQ
2013-12-01 17:34 - 2010-11-21 04:47 - 00197000 _____ C:\Windows\PFRO.log
2013-12-01 17:32 - 2012-01-17 21:23 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1001Core.job
2013-12-01 17:01 - 2013-05-01 17:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-01 16:56 - 2013-12-01 16:54 - 00033270 _____ C:\Users\tina\Downloads\Addition.txt
2013-12-01 16:56 - 2013-12-01 16:18 - 00065106 _____ C:\Users\tina\Downloads\FRST.txt
2013-12-01 16:53 - 2013-12-01 16:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tina\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-12-01 16:46 - 2013-12-01 16:46 - 01959184 _____ (Farbar) C:\Users\tina\Downloads\FRST64 (1).exe
2013-12-01 16:26 - 2013-12-01 16:25 - 58901968 _____ (GridinSoft LLC) C:\Users\tina\Downloads\gtk-2.1.9.8-setup.exe
2013-12-01 16:19 - 2012-06-16 08:55 - 00001108 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1003Core.job
2013-12-01 16:18 - 2013-12-01 16:18 - 00000000 ____D C:\FRST
2013-12-01 16:18 - 2013-12-01 16:17 - 01959184 _____ (Farbar) C:\Users\tina\Desktop\FRST64.exe
2013-12-01 16:09 - 2013-12-01 16:09 - 01937144 _____ (Bleeping Computer, LLC) C:\Users\tina\Downloads\rkill.exe
2013-12-01 16:09 - 2013-12-01 16:09 - 01059064 _____ (Bleeping Computer, LLC) C:\Users\tina\Downloads\rkill64.exe
2013-12-01 15:54 - 2012-01-16 19:42 - 00000000 ___RD C:\Users\tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-01 15:47 - 2012-01-16 20:57 - 00002571 _____ C:\Users\tina\Desktop\Google Chrome.lnk
2013-12-01 15:47 - 2012-01-16 19:42 - 00001655 _____ C:\Users\tina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-01 13:35 - 2012-03-11 20:29 - 00001060 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1003Core.job
2013-11-29 20:44 - 2013-01-18 20:46 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-11-29 20:44 - 2012-02-18 21:41 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-11-29 12:12 - 2012-01-21 22:49 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1445592238-4143421246-3948701370-1002Core.job
2013-11-28 21:04 - 2013-11-15 21:02 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleFortina
2013-11-28 21:04 - 2013-11-15 21:02 - 00000328 _____ C:\Windows\Tasks\HPCeeScheduleFortina.job
2013-11-27 00:11 - 2012-07-29 00:25 - 00000000 ___RD C:\Users\tina\Desktop\Für Handy
2013-11-26 23:45 - 2013-02-12 12:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-26 23:39 - 2013-06-07 17:05 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-26 23:38 - 2013-11-26 23:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-26 23:37 - 2012-07-17 22:25 - 00000000 ____D C:\Users\tina\AppData\Roaming\DVDVideoSoft
2013-11-26 23:28 - 2013-11-26 23:28 - 32004832 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\tina\Downloads\FreeYouTubeDownload (2).exe
2013-11-26 12:17 - 2011-04-26 23:57 - 00654852 _____ C:\Windows\system32\perfh007.dat
2013-11-26 12:17 - 2011-04-26 23:57 - 00130434 _____ C:\Windows\system32\perfc007.dat
2013-11-26 12:17 - 2009-07-14 06:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-25 19:29 - 2013-05-22 20:00 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-25 19:29 - 2013-05-01 23:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 19:29 - 2013-05-01 23:25 - 00106904 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-11-25 19:29 - 2013-05-01 23:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-24 19:53 - 2012-08-21 17:01 - 00000000 ____D C:\Users\tina\AppData\Roaming\.minecraft
2013-11-24 18:20 - 2012-06-04 13:26 - 00000000 ____D C:\Users\Tom\AppData\Local\CrashDumps
2013-11-24 08:52 - 2013-11-24 08:52 - 105869762 _____ C:\Windows\SysWOW64\륙뭭ᵌ˜
2013-11-23 19:55 - 2013-11-23 19:55 - 105869762 _____ C:\Windows\SysWOW64\룩ᵌ
2013-11-23 08:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-19 19:20 - 2012-05-10 18:05 - 00000000 ____D C:\Users\tina\AppData\Roaming\Spotify
2013-11-19 18:58 - 2012-05-10 18:05 - 00000000 ____D C:\Users\tina\AppData\Local\Spotify
2013-11-19 15:51 - 2012-01-21 08:56 - 00001425 _____ C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-18 16:37 - 2012-04-12 16:45 - 00000000 ____D C:\Users\tina\AppData\Local\CrashDumps
2013-11-16 18:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-16 00:07 - 2013-11-15 23:48 - 00011303 _____ C:\Windows\IE11_main.log
2013-11-15 23:52 - 2013-11-15 23:52 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-15 23:52 - 2013-11-15 23:52 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-15 23:52 - 2013-11-15 23:52 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-15 23:52 - 2013-11-15 23:52 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-15 23:52 - 2013-11-15 23:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-15 23:52 - 2013-11-15 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-15 23:52 - 2013-11-15 23:52 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-15 23:52 - 2013-11-15 23:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-15 23:51 - 2013-11-15 23:51 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-15 23:51 - 2013-11-15 23:51 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-15 23:51 - 2013-11-15 23:51 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-15 23:51 - 2013-11-15 23:51 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-15 23:51 - 2013-11-15 23:51 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-15 23:51 - 2013-11-15 23:51 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-15 23:51 - 2013-11-15 23:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-15 16:29 - 2013-11-15 16:29 - 104401821 _____ C:\Windows\SysWOW64\ᳳᵌZ
2013-11-13 19:48 - 2013-11-13 19:48 - 00000000 ____D C:\190e394a0aceaadfb494
2013-11-13 19:48 - 2013-07-22 22:18 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 19:48 - 2012-01-22 18:00 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-12 18:39 - 2012-01-23 11:58 - 00000000 ____D C:\Users\MAMA\AppData\Local\CrashDumps
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-05 17:47 - 2013-11-05 17:47 - 00002026 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-11-05 17:47 - 2011-05-27 13:39 - 00284520 _____ C:\Windows\DPINST.LOG
2013-11-05 17:46 - 2011-04-26 14:54 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-02 15:31 - 2012-08-28 16:18 - 00103424 ___SH C:\Users\tina\Desktop\Thumbs.db

Some content of TEMP:
====================
C:\Users\MAMA\AppData\Local\Temp\AskSLib.dll
C:\Users\tina\AppData\Local\Temp\air38BF.exe
C:\Users\tina\AppData\Local\Temp\airBF5D.exe
C:\Users\tina\AppData\Local\Temp\AskSLib.dll
C:\Users\tina\AppData\Local\Temp\avgnt.exe
C:\Users\tina\AppData\Local\Temp\BackupSetup.exe
C:\Users\tina\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\tina\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\tina\AppData\Local\Temp\Extract.exe
C:\Users\tina\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\tina\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\tina\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\tina\AppData\Local\Temp\MybabylonTB.exe
C:\Users\tina\AppData\Local\Temp\propsys.dll
C:\Users\tina\AppData\Local\Temp\ResetDevice.exe
C:\Users\tina\AppData\Local\Temp\SkypeSetup.exe
C:\Users\tina\AppData\Local\Temp\SP55152.exe
C:\Users\tina\AppData\Local\Temp\SP56929.exe
C:\Users\tina\AppData\Local\Temp\SP57049.exe
C:\Users\tina\AppData\Local\Temp\SP60713.exe
C:\Users\tina\AppData\Local\Temp\xyhhsbqw.dll
C:\Users\Tom\AppData\Local\Temp\AskSLib.dll
C:\Users\Tom\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-23 08:25

==================== End Of Log ============================
--- --- ---

Das kam jetzt nach dem ich den scan gemacht habe
__________________
Alt 02.12.2013, 14:29   #4
M-K-D-B
/// TB-Ausbilder
 
Nationzoom entfernen - Standard

Nationzoom entfernen


Servus,




Schritt 1
Mir ist aufgefallen, dass Du mehr als ein Anti-Virus-Programm mit Hintergrundwächter laufen hast:
Code:
ATTFilter
Norton Internet Security
Avira
Das ist gefährlich, da sich die Programme in die Quere kommen können und dadurch Viren erst recht auf dem Rechner landen können. Ausserdem bremst es auch das System aus. Entscheide Dich für eine Variante und deinstalliere die andere über Systemsteuerung => Programme deinstallieren / Software.
Berichte, für welches Anti-Virus-Programm Du Dich entschieden hast.

Zitat:
Speedy hat letztens eine einleuchtende Erklärung dazu geliefert: "Man stelle sich einen Torwart vor, der das Tor hüten soll (Anti-Virus-Programm), der Ball kommt angeflogen (Virus), der Torhüter konzentriert sich auf den Ball und fängt ihn. Jetzt stelle Dir zwei Torhüter im Tor vor ...., die knallen aneinander und der Ball kann ungehindert ins Tor wandern."




Schritt 2
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).





Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.







Schritt 4
Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/
  • Bitte deaktiviere während des Scans alle Virenscanner, da sie das Ergebnis beeinflussen
  • Starte Zoek.exe mit einem Doppelklick.
  • Achtung: Das folgende Skript wurde nur für diesen speziellen Fall geschrieben und könnte andere Computer beschädigen.
  • Kopiere den Text der folgenden Box in das Skriptfenster von zoek:
    Code:
    ATTFilter
    FFdefaults;
CHRdefaults;
iedefaults;
emptyclsid;
autoclean;
  • Nun klicke auf "Run script" und sei geduldig bis das Skript durchläuft.
  • Wenn das Tool fertig ist wird sich Notepad mit dem Logfile öffnen (ggf. erst nach einem Neustart). Das Log befindet sich aber auch noch unter c:
  • Bitte poste mir das ZOEK-Log (möglichst in CODE-Tags - #-Symbol im Antwortfenster klicken)





Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von MBAM,
  • die Logdatei von Zoek.
Alt 02.12.2013, 22:02   #5
T2807
 
Nationzoom entfernen - Standard

Nationzoom entfernen


Wegen dem Antiviren programm hab ich mich für Avira entschieden und Norton deinstalliert

Code:
ATTFilter
# AdwCleaner v3.014 - Bericht erstellt am 02/12/2013 um 18:31:18
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : tina - TIM-HP
# Gestartet von : C:\Users\tina\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Ordner Gelöscht : C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf
Ordner Gelöscht : C:\Users\MAMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpkbfdhlbdkjohbhnhabfecpmcdlcmff
Ordner Gelöscht : C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpkbfdhlbdkjohbhnhabfecpmcdlcmff
Datei Gelöscht : C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v

[ Datei : C:\Users\tina\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : urls_to_restore_on_startup

[ Datei : C:\Users\MAMA\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Tom\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [10561 octets] - [01/12/2013 17:46:27]
AdwCleaner[R1].txt - [1641 octets] - [01/12/2013 18:54:32]
AdwCleaner[R2].txt - [1863 octets] - [02/12/2013 18:26:15]
AdwCleaner[S0].txt - [9968 octets] - [01/12/2013 17:50:04]
AdwCleaner[S1].txt - [1745 octets] - [02/12/2013 18:31:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1805 octets] ##########
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.02.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
tina :: TIM-HP [Administrator]

02.12.2013 18:43:51
mbam-log-2013-12-02 (18-43-51).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 286105
Laufzeit: 26 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Das hat alles geklappt aber dann bei zoek kam das
Nationzoom entfernen-unbenannt.jpg
und wenn ich auf ok klicke kommt das immer wieder.


Alt 03.12.2013, 19:12   #6
M-K-D-B
/// TB-Ausbilder
 
Nationzoom entfernen - Standard

Nationzoom entfernen


Servus,



Wir spüren die letzten Reste auf, damit wir sie später entfernen können:





Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.





Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

    Code:
    ATTFilter
    :filefind
*nationzoom*

:folderfind
*nationzoom*

:regfind
nationzoom
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.








Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?





Bitte poste mit deiner nächsten Antwort
  • die beiden Logdateien von FRST,
  • die Logdatei von SystemLook,
  • die Beantwortung der gestellten Fragen.
Antwort

Themen zu Nationzoom entfernen
appdata, c:\windows, ccc, entferne, entfernen, forum, heute, interne, internet, internet explorer, microsoft, msil/spy.agent.bp, nationzoom, nationzoom entfernen, neu, nichts, removal, software, spyhunter, spyhunter entfernen, viewer, web, windows 7


« Windows 7: Java/Lamar.thf.3, langsame Internetperformance | Firefox meldet sich mind. 2 mal täglich selbst ab »


Ähnliche Themen: Nationzoom entfernen


  1. nationzoom lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 15.02.2014 (11)
  2. nationzoom auf dem PC
    Plagegeister aller Art und deren Bekämpfung - 15.01.2014 (13)
  3. Nationzoom & Spy Hunter 4
    Log-Analyse und Auswertung - 08.01.2014 (9)
  4. Nationzoom & Spy Hunter 4
    Plagegeister aller Art und deren Bekämpfung - 07.01.2014 (3)
  5. Nationzoom
    Plagegeister aller Art und deren Bekämpfung - 06.01.2014 (9)
  6. Nationzoom als Startseite lässt sich nicht ändern/entfernen
    Plagegeister aller Art und deren Bekämpfung - 18.12.2013 (1)
  7. NationZoom läasst sich nicht entfernen und Datein werden verknüpft und gestartet
    Plagegeister aller Art und deren Bekämpfung - 17.12.2013 (11)
  8. Nationzoom lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 17.12.2013 (30)
  9. Wie kann ich Nationzoom entfernen?
    Plagegeister aller Art und deren Bekämpfung - 17.12.2013 (9)
  10. Nationzoom lässt sich nicht entfernen...
    Plagegeister aller Art und deren Bekämpfung - 11.12.2013 (4)
  11. Nationzoom.com Browser Hijacker entfernen
    Anleitungen, FAQs & Links - 09.12.2013 (2)
  12. Nationzoom entfernen
    Plagegeister aller Art und deren Bekämpfung - 08.12.2013 (11)
  13. Nationzoom Entfernung
    Plagegeister aller Art und deren Bekämpfung - 06.12.2013 (7)
  14. Nationzoom entfernen
    Plagegeister aller Art und deren Bekämpfung - 04.12.2013 (9)
  15. Nationzoom
    Mülltonne - 03.12.2013 (3)
  16. Nationzoom
    Plagegeister aller Art und deren Bekämpfung - 01.12.2013 (3)
  17. nationzoom.com entfernen
    Anleitungen, FAQs & Links - 22.11.2013 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Nationzoom entfernen - Hallo ich bin neu im Forum, ich habe seit heute Nationzoom im Browser und weiß nicht wie ich es los werde ich habe schon JRT benutzt das hat aber auch - Nationzoom entfernen...
Archiv
Du betrachtest: Nationzoom entfernen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55