Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 15.01.2014, 12:08   #16
kallenator
 
Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner - Standard

Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner



Hi,

IE ist aktualisiert.

Allerdings habe ich seit der Installation des Tools zum Defragentieren ein neues Problem:
Ich muss irgendein Programm namens Conduit mitinstalliert haben. Dieses hat mir Einstellungen im Firefox, wie de Suchmaschine oder die Startseite verstellt und sich dagegen gewehrt, wenn ich die Einstellungen wieder ändern wollte. Und vor allem: Facebook funktioniert nicht mehr.
Die Seite ist komplett weiß mit einzelnen Links auf der linken Seite (siehe Anhang)
Besteht da ein Zusammenhang?

Hier die Logfile

gruß kallenator

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014
Ran by flo (administrator) on FLO-LAPTOP on 15-01-2014 12:00:33
Running from C:\Users\flo\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official downoad link fo FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Windows\AsScrPro.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
() C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Futuredial Inc.) C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Dropbox, Inc.) C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Deutsche Telekom AG) C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] ()
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2922496 2011-06-16] (Eastman Kodak Company)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-10-28] ()
HKLM-x32\...\Run: [ASUS Sync Loader] - C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe [638976 2012-06-15] (Futuredial Inc.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2068856 2011-10-12] (Flexera Software LLC.)
MountPoints2: {cf467c60-55b4-11e3-bbfc-f46d041e025e} - F:\SETUP.EXE
AppInit_DLLs: c:\windows\system32\nvinitx.dll [226920 2011-04-18] (NVIDIA Corporation)
Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk
ShortcutTarget: Mediencenter.lnk -> C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)
Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://asus.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD5EF5A6A1C9FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPC5204990-1C64-4C56-B2A3-3AF9C2B3E814&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC5204990-1C64-4C56-B2A3-3AF9C2B3E814&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC5204990-1C64-4C56-B2A3-3AF9C2B3E814&q={searchTerms}&SSPV=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Dragon NaturallySpeaking Rich Internet Application Support - Extension - {73A89C60-CF59-4EC7-9215-9B7EF05ECEA4} - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ieShim.dll (Nuance Communications, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} https://juniper.net/dana-cached/sc/JuniperSetupClient64.cab
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://ssl.swisslife-select.de/dana-cached/sc/JuniperSetupClient.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: nuance.com/DragonRIAPlugin - C:\PROGRA~2\Nuance\NATURA~1\Program\npDgnRia.dll (Nuance Communications Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\ich@maltegoetz.de [2013-12-18]
FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2013-10-27]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-27]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-07]
FF HKLM-x32\...\Firefox\Extensions: [jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi
FF Extension: Dragon NaturallySpeaking Rich Internet Application Support - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2013-10-15]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchProvider: Search the web (Softonic)
CHR DefaultSearchURL: hxxp://www.google.com
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\gcswf32.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Extension: (ProxTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.2_0 [2012-07-03]
CHR Extension: (YouTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 [2012-03-05]
CHR Extension: (Google Search) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 [2012-04-01]
CHR Extension: (Gmail) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 [2012-01-08]
CHR HKLM-x32\...\Chrome\Extension: [mikhcaiakabeeokmenglcdebplfdjicn] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\chromeShim.crx [2013-10-15]

==================== Services (Whitelisted) =================

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2401632 2012-11-29] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-08-02] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-25] (Disc Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-08-02] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-10-28] (Samsung Electronics)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-15 11:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-01-15 11:39 - 2014-01-15 11:51 - 00010819 _____ C:\Windows\IE11_main.log
2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe
2014-01-14 22:39 - 2014-01-14 23:38 - 00000000 _____ C:\autoexec.bat
2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-14 22:38 - 2014-01-14 23:41 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe
2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics
2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd                                      ) C:\Users\flo\Downloads\disk-defrag-setup.exe
2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt
2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe
2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe
2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 00:21 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe
2014-01-10 21:59 - 2014-01-10 21:59 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps
2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt
2014-01-10 21:48 - 2014-01-15 12:00 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion
2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt
2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe
2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT
2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt
2014-01-10 21:22 - 2014-01-10 21:23 - 00000000 ____D C:\AdwCleaner
2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe
2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log
2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt
2014-01-09 21:47 - 2014-01-09 21:48 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp
2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump
2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe
2014-01-09 21:34 - 2014-01-09 21:33 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt
2014-01-09 21:34 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt
2014-01-09 21:32 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt
2014-01-09 21:30 - 2014-01-15 12:00 - 00019767 _____ C:\Users\flo\Downloads\FRST.txt
2014-01-09 21:30 - 2014-01-15 12:00 - 00000000 ____D C:\FRST
2014-01-09 21:29 - 2014-01-15 12:00 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe
2014-01-09 21:28 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log
2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable
2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe
2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-01-08 14:12 - 2010-12-13 14:12 - 00252712 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll
2014-01-07 14:31 - 2014-01-10 21:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-17 10:37 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-17 10:37 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-17 10:37 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-17 10:37 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-17 10:29 - 2013-12-17 10:31 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls

==================== One Month Modified Files and Folders =======

2014-01-15 12:01 - 2014-01-09 21:30 - 00019767 _____ C:\Users\flo\Downloads\FRST.txt
2014-01-15 12:00 - 2014-01-10 21:48 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion
2014-01-15 12:00 - 2014-01-09 21:30 - 00000000 ____D C:\FRST
2014-01-15 12:00 - 2014-01-09 21:29 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe
2014-01-15 11:59 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-15 11:59 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-15 11:58 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Dropbox
2014-01-15 11:56 - 2013-10-06 21:46 - 00000000 ___RD C:\Users\flo\Mediencenter
2014-01-15 11:56 - 2012-01-26 15:39 - 00000000 ___RD C:\Users\flo\Dropbox
2014-01-15 11:55 - 2013-01-11 22:11 - 00001427 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-15 11:53 - 2011-12-23 16:24 - 00000000 ____D C:\ProgramData\Kodak
2014-01-15 11:53 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-15 11:53 - 2009-07-14 05:51 - 00119564 _____ C:\Windows\setupact.log
2014-01-15 11:52 - 2011-04-18 10:20 - 01728150 _____ C:\Windows\WindowsUpdate.log
2014-01-15 11:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-15 11:51 - 2014-01-15 11:39 - 00010819 _____ C:\Windows\IE11_main.log
2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe
2014-01-15 11:12 - 2012-06-11 18:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-15 08:20 - 2011-04-18 11:26 - 00725190 _____ C:\Windows\PFRO.log
2014-01-14 23:41 - 2014-01-14 22:38 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-14 23:38 - 2014-01-14 22:39 - 00000000 _____ C:\autoexec.bat
2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe
2014-01-14 22:10 - 2011-04-18 12:01 - 00001442 _____ C:\Windows\system32\ServiceFilter.ini
2014-01-14 21:03 - 2013-11-28 20:15 - 00001515 _____ C:\Users\flo\AppData\Roaming\SAS7_000.DAT
2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics
2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd                                      ) C:\Users\flo\Downloads\disk-defrag-setup.exe
2014-01-14 11:18 - 2009-08-04 10:51 - 00708510 _____ C:\Windows\system32\perfh007.dat
2014-01-14 11:18 - 2009-08-04 10:51 - 00152114 _____ C:\Windows\system32\perfc007.dat
2014-01-14 11:18 - 2009-07-14 06:13 - 01644172 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-13 19:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt
2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe
2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe
2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe
2014-01-10 21:59 - 2014-01-10 21:59 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps
2014-01-10 21:57 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt
2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt
2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe
2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT
2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt
2014-01-10 21:23 - 2014-01-10 21:22 - 00000000 ____D C:\AdwCleaner
2014-01-10 21:23 - 2014-01-07 14:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-10 21:23 - 2012-12-12 10:07 - 00000000 ____D C:\ProgramData\Uniblue
2014-01-10 21:23 - 2011-06-20 20:48 - 00000000 ____D C:\ProgramData\ICQ
2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe
2014-01-10 21:21 - 2011-06-20 20:28 - 00000000 ___RD C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-10 21:20 - 2012-01-26 15:39 - 00001017 _____ C:\Users\flo\Desktop\Dropbox.lnk
2014-01-10 21:20 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log
2014-01-09 22:10 - 2014-01-09 21:28 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log
2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt
2014-01-09 21:48 - 2014-01-09 21:47 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp
2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump
2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe
2014-01-09 21:33 - 2014-01-09 21:34 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt
2014-01-09 21:33 - 2014-01-09 21:34 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt
2014-01-09 21:33 - 2014-01-09 21:32 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt
2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable
2014-01-09 21:28 - 2011-06-20 20:27 - 00000000 ____D C:\Users\flo
2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe
2014-01-09 20:49 - 2012-01-11 14:50 - 00000000 ____D C:\Program Files (x86)\Opera
2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-01-09 20:45 - 2011-06-20 20:53 - 00000000 ____D C:\Users\flo\AppData\Roaming\DVDVideoSoft
2014-01-08 14:13 - 2012-11-13 18:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-08 12:57 - 2013-07-03 15:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2014-01-07 22:52 - 2011-11-01 20:04 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-12-18 12:00 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-18 11:44 - 2009-07-14 05:45 - 00467312 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-17 10:37 - 2011-10-16 13:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-17 10:31 - 2013-12-17 10:29 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls

Some content of TEMP:
====================
C:\Users\flo\AppData\Local\Temp\nsd8E11.exe
C:\Users\flo\AppData\Local\Temp\nso69FD.exe
C:\Users\flo\AppData\Local\Temp\nso6C20.exe
C:\Users\flo\AppData\Local\Temp\nst67AB.exe
C:\Users\flo\AppData\Local\Temp\nsuAD76.exe
C:\Users\flo\AppData\Local\Temp\nsuB0D1.exe
C:\Users\flo\AppData\Local\Temp\nszA950.exe
C:\Users\flo\AppData\Local\Temp\SHSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 12:05

==================== End Of Log ============================
         
--- --- ---

--- --- ---
Miniaturansicht angehängter Grafiken
Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner-unbenannt.jpg  

Alt 15.01.2014, 14:59   #17
Aneri
/// Malwareteam
 
Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner - Standard

Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner



Zitat:
Zitat von kallenator Beitrag anzeigen
Ich muss irgendein Programm namens Conduit mitinstalliert haben. Dieses hat mir
Conduit ist eine Sogennante PUP. die kommt öfters mal mit, bekommen wir weg kein Problem

Zitat:
Und vor allem: Facebook funktioniert nicht mehr.
Die Seite ist komplett weiß mit einzelnen Links auf der linken Seite (siehe Anhang)
Besteht da ein Zusammenhang?
Das schauen wir uns mal an, kommst du nur im Internetexplorer nicht auf Facebook oder mit allen Browsern?

Schritt 1:

Sollte den Conduit erledigen:

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 2:

poste ein neues FRST Logfile
__________________

__________________

Alt 15.01.2014, 16:21   #18
kallenator
 
Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner - Standard

Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner



hi,

im IE funktioniert es. Nutze normalerweise Firefox. Da geht es nicht.

Code:
ATTFilter
# AdwCleaner v3.017 - Bericht erstellt am 15/01/2014 um 16:05:31
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : flo - FLO-LAPTOP
# Gestartet von : C:\Users\flo\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf
Datei Gelöscht : C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\searchplugins\conduit-search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\FLEXnet

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [17265 octets] - [10/01/2014 21:22:18]
AdwCleaner[R1].txt - [1835 octets] - [15/01/2014 16:03:56]
AdwCleaner[S0].txt - [15659 octets] - [10/01/2014 21:23:24]
AdwCleaner[S1].txt - [1452 octets] - [15/01/2014 16:05:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1512 octets] ##########
         

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014
Ran by flo (administrator) on FLO-LAPTOP on 15-01-2014 16:20:06
Running from C:\Users\flo\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official downoad link fo FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(ASUS) C:\Windows\AsScrPro.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Eastman Kodak Company) C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Dropbox, Inc.) C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(Deutsche Telekom AG) C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Futuredial Inc.) C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
() C:\Windows\Samsung\PanelMgr\caller64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncablesMAPI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ASUS WebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-16] ()
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [EKIJ5000StatusMonitor] - C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe [2922496 2011-06-16] (Eastman Kodak Company)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-10-28] ()
HKLM-x32\...\Run: [ASUS Sync Loader] - C:\Program Files (x86)\ASUS\ASUS Sync\asusUPCTLoader.exe [638976 2012-06-15] (Futuredial Inc.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [Syncables] - C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2068856 2011-10-12] (Flexera Software LLC.)
MountPoints2: {cf467c60-55b4-11e3-bbfc-f46d041e025e} - F:\SETUP.EXE
AppInit_DLLs: c:\windows\system32\nvinitx.dll [226920 2011-04-18] (NVIDIA Corporation)
Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\flo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk
ShortcutTarget: Mediencenter.lnk -> C:\Users\flo\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)
Startup: C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://asus.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD5EF5A6A1C9FCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Dragon NaturallySpeaking Rich Internet Application Support - Extension - {73A89C60-CF59-4EC7-9215-9B7EF05ECEA4} - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ieShim.dll (Nuance Communications, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} https://juniper.net/dana-cached/sc/JuniperSetupClient64.cab
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://ssl.swisslife-select.de/dana-cached/sc/JuniperSetupClient.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: nuance.com/DragonRIAPlugin - C:\PROGRA~2\Nuance\NATURA~1\Program\npDgnRia.dll (Nuance Communications Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\ich@maltegoetz.de [2013-12-18]
FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2013-10-27]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\flo\AppData\Roaming\Mozilla\Firefox\Profiles\e7ozgwke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-27]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-07]
FF HKLM-x32\...\Firefox\Extensions: [jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi
FF Extension: Dragon NaturallySpeaking Rich Internet Application Support - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2013-10-15]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchProvider: Search the web (Softonic)
CHR DefaultSearchURL: hxxp://www.google.com
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\gcswf32.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Extension: (ProxTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.2_0 [2012-07-03]
CHR Extension: (YouTube) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 [2012-03-05]
CHR Extension: (Google Search) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 [2012-04-01]
CHR Extension: (Gmail) - C:\Users\flo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 [2012-01-08]
CHR HKLM-x32\...\Chrome\Extension: [mikhcaiakabeeokmenglcdebplfdjicn] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\chromeShim.crx [2013-10-15]

==================== Services (Whitelisted) =================

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2401632 2012-11-29] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-08-02] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-25] (Disc Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-08-02] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-10-28] (Samsung Electronics)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-15 16:14 - 2014-01-15 16:14 - 00001592 _____ C:\Users\flo\Desktop\AdwCleaner[S1].txt
2014-01-15 16:03 - 2014-01-15 16:03 - 01236282 _____ C:\Users\flo\Desktop\adwcleaner.exe
2014-01-15 12:01 - 2014-01-15 12:01 - 00057407 _____ C:\Users\flo\Desktop\FRST3.txt
2014-01-15 11:51 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-01-15 11:39 - 2014-01-15 11:51 - 00010819 _____ C:\Windows\IE11_main.log
2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe
2014-01-14 22:39 - 2014-01-14 23:38 - 00000000 _____ C:\autoexec.bat
2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-14 22:38 - 2014-01-14 23:41 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe
2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics
2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd                                      ) C:\Users\flo\Downloads\disk-defrag-setup.exe
2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt
2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe
2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe
2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 00:21 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe
2014-01-10 21:59 - 2014-01-15 14:02 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps
2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt
2014-01-10 21:48 - 2014-01-15 12:00 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion
2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt
2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe
2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT
2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt
2014-01-10 21:22 - 2014-01-15 16:05 - 00000000 ____D C:\AdwCleaner
2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe
2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log
2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt
2014-01-09 21:47 - 2014-01-09 21:48 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp
2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump
2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe
2014-01-09 21:34 - 2014-01-09 21:33 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt
2014-01-09 21:34 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt
2014-01-09 21:32 - 2014-01-09 21:33 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt
2014-01-09 21:30 - 2014-01-15 16:20 - 00019122 _____ C:\Users\flo\Downloads\FRST.txt
2014-01-09 21:30 - 2014-01-15 12:00 - 00000000 ____D C:\FRST
2014-01-09 21:29 - 2014-01-15 12:00 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe
2014-01-09 21:28 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log
2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable
2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe
2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-01-08 14:12 - 2010-12-13 14:12 - 00252712 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll
2014-01-07 14:31 - 2014-01-10 21:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-17 10:37 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-17 10:37 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-17 10:37 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-17 10:37 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-17 10:29 - 2013-12-17 10:31 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls

==================== One Month Modified Files and Folders =======

2014-01-15 16:20 - 2014-01-09 21:30 - 00019122 _____ C:\Users\flo\Downloads\FRST.txt
2014-01-15 16:16 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Dropbox
2014-01-15 16:15 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-15 16:15 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-15 16:14 - 2014-01-15 16:14 - 00001592 _____ C:\Users\flo\Desktop\AdwCleaner[S1].txt
2014-01-15 16:14 - 2013-10-06 21:46 - 00000000 ___RD C:\Users\flo\Mediencenter
2014-01-15 16:14 - 2012-01-26 15:39 - 00000000 ___RD C:\Users\flo\Dropbox
2014-01-15 16:12 - 2012-06-11 18:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-15 16:07 - 2011-12-23 16:24 - 00000000 ____D C:\ProgramData\Kodak
2014-01-15 16:07 - 2011-04-18 10:20 - 01743487 _____ C:\Windows\WindowsUpdate.log
2014-01-15 16:07 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-15 16:07 - 2009-07-14 05:51 - 00119620 _____ C:\Windows\setupact.log
2014-01-15 16:05 - 2014-01-10 21:22 - 00000000 ____D C:\AdwCleaner
2014-01-15 16:03 - 2014-01-15 16:03 - 01236282 _____ C:\Users\flo\Desktop\adwcleaner.exe
2014-01-15 14:02 - 2014-01-10 21:59 - 00000000 ____D C:\Users\flo\AppData\Local\CrashDumps
2014-01-15 13:29 - 2011-10-16 13:35 - 00000000 ____D C:\Users\flo\AppData\Local\Microsoft Help
2014-01-15 12:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-15 12:01 - 2014-01-15 12:01 - 00057407 _____ C:\Users\flo\Desktop\FRST3.txt
2014-01-15 12:00 - 2014-01-10 21:48 - 00000000 ____D C:\Users\flo\Downloads\FRST-OlderVersion
2014-01-15 12:00 - 2014-01-09 21:30 - 00000000 ____D C:\FRST
2014-01-15 12:00 - 2014-01-09 21:29 - 02076160 _____ (Farbar) C:\Users\flo\Downloads\FRST64.exe
2014-01-15 11:55 - 2013-01-11 22:11 - 00001427 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-15 11:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2014-01-15 11:51 - 2014-01-15 11:39 - 00010819 _____ C:\Windows\IE11_main.log
2014-01-15 11:44 - 2014-01-15 11:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-15 11:44 - 2014-01-15 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-15 11:43 - 2014-01-15 11:43 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-01-15 11:43 - 2014-01-15 11:43 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-15 11:43 - 2014-01-15 11:43 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-15 11:43 - 2014-01-15 11:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-15 11:43 - 2014-01-15 11:43 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-15 11:43 - 2014-01-15 11:43 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-15 11:43 - 2014-01-15 11:43 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-01-15 11:39 - 2014-01-15 11:39 - 02077392 _____ (Microsoft Corporation) C:\Users\flo\Downloads\IE11-Windows6.1.exe
2014-01-15 08:20 - 2011-04-18 11:26 - 00725190 _____ C:\Windows\PFRO.log
2014-01-14 23:41 - 2014-01-14 22:38 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-14 23:38 - 2014-01-14 22:39 - 00000000 _____ C:\autoexec.bat
2014-01-14 22:39 - 2014-01-14 22:39 - 00000000 ____D C:\Program Files\Enigma Software Group
2014-01-14 22:36 - 2014-01-14 22:36 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\flo\Downloads\SpyHunter-Installer.exe
2014-01-14 22:10 - 2011-04-18 12:01 - 00001442 _____ C:\Windows\system32\ServiceFilter.ini
2014-01-14 21:03 - 2013-11-28 20:15 - 00001515 _____ C:\Users\flo\AppData\Roaming\SAS7_000.DAT
2014-01-14 20:15 - 2014-01-14 20:15 - 00000000 ____D C:\ProgramData\Auslogics
2014-01-14 20:13 - 2014-01-14 20:13 - 05744392 _____ (Auslogics Labs Pty Ltd                                      ) C:\Users\flo\Downloads\disk-defrag-setup.exe
2014-01-14 11:18 - 2009-08-04 10:51 - 00708510 _____ C:\Windows\system32\perfh007.dat
2014-01-14 11:18 - 2009-08-04 10:51 - 00152114 _____ C:\Windows\system32\perfc007.dat
2014-01-14 11:18 - 2009-07-14 06:13 - 01644172 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-13 13:21 - 2014-01-13 13:21 - 00033107 _____ C:\Users\flo\Desktop\FRST2.txt
2014-01-13 13:06 - 2014-01-13 13:06 - 00987410 _____ C:\Users\flo\Desktop\SecurityCheck.exe
2014-01-13 00:41 - 2014-01-13 00:41 - 02347384 _____ (ESET) C:\Users\flo\Downloads\esetsmartinstaller_enu.exe
2014-01-13 00:21 - 2014-01-13 00:21 - 00001115 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Users\flo\AppData\Roaming\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-13 00:21 - 2014-01-13 00:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-13 00:19 - 2014-01-13 00:19 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\flo\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-13 00:15 - 2014-01-13 00:15 - 00448512 _____ (OldTimer Tools) C:\Users\flo\Desktop\TFC.exe
2014-01-10 21:57 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-10 21:51 - 2014-01-10 21:51 - 00032513 _____ C:\Users\flo\Desktop\FRST1.txt
2014-01-10 21:39 - 2014-01-10 21:39 - 00002474 _____ C:\Users\flo\Desktop\JRT.txt
2014-01-10 21:30 - 2014-01-10 21:30 - 01037068 _____ (Thisisu) C:\Users\flo\Downloads\JRT.exe
2014-01-10 21:30 - 2014-01-10 21:30 - 00000000 ____D C:\Windows\ERUNT
2014-01-10 21:29 - 2014-01-10 21:29 - 00015659 _____ C:\Users\flo\Desktop\AdwCleaner[S0].txt
2014-01-10 21:23 - 2014-01-07 14:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-10 21:23 - 2012-12-12 10:07 - 00000000 ____D C:\ProgramData\Uniblue
2014-01-10 21:23 - 2011-06-20 20:48 - 00000000 ____D C:\ProgramData\ICQ
2014-01-10 21:21 - 2014-01-10 21:21 - 01233962 _____ C:\Users\flo\Downloads\adwcleaner.exe
2014-01-10 21:21 - 2011-06-20 20:28 - 00000000 ___RD C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-10 21:20 - 2012-01-26 15:39 - 00001017 _____ C:\Users\flo\Desktop\Dropbox.lnk
2014-01-10 21:20 - 2012-01-26 15:38 - 00000000 ____D C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-09 22:10 - 2014-01-09 22:10 - 00000468 _____ C:\Users\flo\Desktop\defogger_disable.log
2014-01-09 22:10 - 2014-01-09 21:28 - 00000468 _____ C:\Users\flo\Downloads\defogger_disable.log
2014-01-09 22:04 - 2014-01-09 22:04 - 00007422 _____ C:\Users\flo\Desktop\gmer.txt
2014-01-09 21:48 - 2014-01-09 21:47 - 00262144 _____ C:\Windows\Minidump\010914-89045-01.dmp
2014-01-09 21:47 - 2014-01-09 21:47 - 00000000 ____D C:\Windows\Minidump
2014-01-09 21:36 - 2014-01-09 21:36 - 00377856 _____ C:\Users\flo\Downloads\gmer_2.1.19163.exe
2014-01-09 21:33 - 2014-01-09 21:34 - 00033497 _____ C:\Users\flo\Desktop\FRST.txt
2014-01-09 21:33 - 2014-01-09 21:34 - 00032539 _____ C:\Users\flo\Desktop\Addition.txt
2014-01-09 21:33 - 2014-01-09 21:32 - 00032539 _____ C:\Users\flo\Downloads\Addition.txt
2014-01-09 21:28 - 2014-01-09 21:28 - 00000168 _____ C:\Users\flo\defogger_reenable
2014-01-09 21:28 - 2011-06-20 20:27 - 00000000 ____D C:\Users\flo
2014-01-09 21:27 - 2014-01-09 21:27 - 00050477 _____ C:\Users\flo\Downloads\Defogger.exe
2014-01-09 20:49 - 2012-01-11 14:50 - 00000000 ____D C:\Program Files (x86)\Opera
2014-01-09 20:46 - 2014-01-09 20:46 - 00001166 _____ C:\Users\flo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-01-09 20:45 - 2011-06-20 20:53 - 00000000 ____D C:\Users\flo\AppData\Roaming\DVDVideoSoft
2014-01-08 14:13 - 2012-11-13 18:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-08 12:57 - 2013-07-03 15:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2014-01-07 22:52 - 2011-11-01 20:04 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-12-18 12:00 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-18 11:44 - 2009-07-14 05:45 - 00467312 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-17 10:37 - 2011-10-16 13:35 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-17 10:31 - 2013-12-17 10:29 - 04732928 _____ C:\Users\flo\Downloads\HORBACH_VST-FB_2014_1.5.xls

Some content of TEMP:
====================
C:\Users\flo\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\flo\AppData\Local\Temp\nsd8E11.exe
C:\Users\flo\AppData\Local\Temp\nso69FD.exe
C:\Users\flo\AppData\Local\Temp\nso6C20.exe
C:\Users\flo\AppData\Local\Temp\nst67AB.exe
C:\Users\flo\AppData\Local\Temp\nsuAD76.exe
C:\Users\flo\AppData\Local\Temp\nsuB0D1.exe
C:\Users\flo\AppData\Local\Temp\nszA950.exe
C:\Users\flo\AppData\Local\Temp\Quarantine.exe
C:\Users\flo\AppData\Local\Temp\SHSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 12:05

==================== End Of Log ============================
         
--- --- ---


gruß kallenator
__________________

Alt 16.01.2014, 12:25   #19
Aneri
/// Malwareteam
 
Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner - Standard

Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner



Installiere dir den Firefox neu.

Wenn sonst nichts mehr auffällig ist:

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

__________________
Gruß Aneri
Mitglied von UNITE

Lob oder Kritik? hier wirst du es los

Alt 16.01.2014, 15:56   #20
kallenator
 
Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner - Standard

Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner



hi,

alles erledigt. Nur das Problem mit Facebook bleibt. Wie gesagt: Komplett weiße Seite mit einzelnen Links. Auf anderen Seiten ist mir das bisher nicht aufgefallen.

Gruß Kallenator

alles roger. habe firefox zurück gesetzt. jetzt gehts es wieder


Alt 16.01.2014, 16:03   #21
Aneri
/// Malwareteam
 
Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner - Standard

Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner




Wunderbar dein System ist soweit ich das sehen kann sauber.

Hier noch ein paar Tipps zur Absicherung deines Systems.


Benutzerkonto Einstellungen:


Wir sehen immer wieder User mit Administratorrechten. Hier kann jeder Nutzer eines Windowsrechners schon die erste Türe schließen. Arbeite mit einem eingeschränkten Benutzerkonto anstelle eines Kontos mit Administratorrechten. Diese sind für das tägliche Arbeiten nicht nötig, und solltest du einmal Software installieren wollen wirst du im normalfall nach deinem Passwort gefragt.

Solltest du Hilfe bei der Erstellung eines "eingeschränkten Kontos" benötigen helfe ich dir gern weiter.


Systemupdates:


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Besonders Java erfährt zur Zeit regelmäßig sicherheitsrelevante Updates


Ältere Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
  • Downloade dir bitte die neueste Java-Version von hier
  • Speichere die jxpiinstall.exe
  • Schließe alle laufenden Programme. Speziell deinen Browser.
  • Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 45 ) herunter laden.
  • Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
  • Wenn die Installation beendet wurde
    Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
  • Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.
Nach dem Neustart
  • Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
  • Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
  • Klicke auf Dateien löschen....
  • Gehe sicher das überall ein Haken gesetzt ist und klicke OK.
  • Klicke erneut OK.
schneller Plugin-Test: PluginCheck


Antivirensoftware


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz

  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen

  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


alternatives Browsen


Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe



Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.


Wenn du möchtest, kannst du das Trojaner Board Forum mit einer kleinen Spende unterstützen.
__________________
--> Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner

Antwort

Themen zu Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner
4d36e972-e325-11ce-bfc1-08002be10318, adblock, auslastung, browser, computer, desktop, error, excel, firefox, flash player, focus, homepage, js/adware.yontoo.a, js/adware.yontoo.b, mozilla, msiinstaller, newtab, plug-in, pup.optional.opencandy, realtek, registry, richtlinie, security, smartbar, software, svchost.exe, system, system error, tippen, trojaner, usb, win32/adware.yontoo.b, windows, yahoo community smartbar, zugemüllt




Ähnliche Themen: Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner


  1. Windows 7: svhost.exe hohe Auslastung
    Plagegeister aller Art und deren Bekämpfung - 02.10.2015 (7)
  2. Windows Vista: svchost.exe verursacht sehr hohe CPU-Auslastung
    Log-Analyse und Auswertung - 22.09.2015 (15)
  3. Hohe CPU Auslastung (WIndows 7)
    Plagegeister aller Art und deren Bekämpfung - 17.09.2015 (1)
  4. Windows 7: svchost netsvcs verursacht hohe CPU auslastung
    Log-Analyse und Auswertung - 10.09.2015 (21)
  5. svchost.exe (netsvcs) verursacht hohe CPU-Auslastung (windows 7)
    Plagegeister aller Art und deren Bekämpfung - 02.09.2015 (21)
  6. Ntoskrnl verursachen sehr hohe HDD-Auslastung | Windows 8.1, McAfee hat ARTEMIS entdeckt
    Log-Analyse und Auswertung - 29.06.2014 (13)
  7. Windows 7 - Hohe CPU-Auslastung
    Plagegeister aller Art und deren Bekämpfung - 19.05.2014 (5)
  8. TaskMgr,Windows Sicherheitsdient, Firewall lassen sich nicht starten und hohe CPU-Auslastung.
    Log-Analyse und Auswertung - 28.03.2014 (36)
  9. Windows 7, hohe CPU Auslastung, Windows Sicherheitsupdate fehlgeschlagen, Bluescreen im abgesicherten Modus
    Plagegeister aller Art und deren Bekämpfung - 07.03.2014 (13)
  10. Windows 7 64bit: hohe CPU Auslastung direkt nach Start
    Plagegeister aller Art und deren Bekämpfung - 27.02.2014 (15)
  11. System / Ntoskrnl verursachen sehr hohe HDD-Auslastung | Windows 8.1
    Plagegeister aller Art und deren Bekämpfung - 15.02.2014 (3)
  12. Windows 7 [64bit] : Abbruch von Downloads, permanent hohe CPU- und RAM-Auslastung
    Log-Analyse und Auswertung - 22.12.2013 (4)
  13. Windows 7, langsames Hochfahren, hohe CPU-Auslastung (>60%) bereits bei Sitzungs-Start
    Log-Analyse und Auswertung - 07.11.2013 (9)
  14. Hohe Cpu Auslastung + Seltsame Prozesse im Windows Task Manager was tun ?
    Plagegeister aller Art und deren Bekämpfung - 14.03.2013 (3)
  15. Hohe CPU Auslastung cmd.de Windows 7
    Log-Analyse und Auswertung - 16.11.2010 (1)
  16. Hohe CPU-Auslastung und voller RAM! Verdacht auf Trojaner
    Log-Analyse und Auswertung - 17.07.2009 (3)
  17. Bluescreen nach Windows Anmeldung. Häufig hohe Auslastung und Trojaner endeckt.
    Log-Analyse und Auswertung - 04.07.2009 (36)

Zum Thema Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner - Hi, IE ist aktualisiert. Allerdings habe ich seit der Installation des Tools zum Defragentieren ein neues Problem: Ich muss irgendein Programm namens Conduit mitinstalliert haben. Dieses hat mir Einstellungen im - Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner...
Archiv
Du betrachtest: Windows 7: Diktiersoftware hakt- hohe CPU-Auslastung und garantiert Trojaner auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.