![]() |
|
Plagegeister aller Art und deren Bekämpfung: www.feed.plusnetwork.com ändert die websiten startseite immer um -.-*Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #16 |
![]() ![]() ![]() | ![]() www.feed.plusnetwork.com ändert die websiten startseite immer um -.-* bitte sehr ![]() ![]() ![]() ![]() FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by Daniel (administrator) on MEDION on 31-03-2014 00:44:56 Running from C:\Users\Daniel\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (Reimage®) C:\Program Files\AntiToolbar\ReiGuard.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Hewlett-Packard Company) C:\Program Files (x86)\HP\HP Color LaserJet CM1312 MFP Series\hppfaxprintersrv.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (MagicISO, Inc.) C:\Program Files (x86)\MagicDisc\MagicDisc.exe (Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (Wistron) C:\Program Files (x86)\Launch Manager\HotkeyApp.exe (Wistron Corp.) C:\Program Files (x86)\Launch Manager\OSD.exe (Wistron Corp.) C:\Program Files (x86)\Launch Manager\WButton.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (arvato digital services llc) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Wistron Corp.) C:\Program Files (x86)\Launch Manager\WisLMSvc.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11548264 2010-11-11] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-11] (Synaptics Incorporated) HKLM\...\Run: [HP Color LaserJet CM1312 MFP Series Fax] - C:\Program Files (x86)\HP\HP Color LaserJet CM1312 MFP Series\hppfaxprintersrv.exe [3700736 2009-09-22] (Hewlett-Packard Company) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-11] (Renesas Electronics Corporation) HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink) HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2010-10-28] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [224352 2010-10-28] (CyberLink Corp.) HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC) HKLM-x32\...\Run: [HotkeyApp] - C:\Program Files (x86)\Launch Manager\HotkeyApp.exe [200704 2009-12-14] (Wistron) HKLM-x32\...\Run: [LMgrVolOSD] - C:\Program Files (x86)\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.) HKLM-x32\...\Run: [Wbutton] - C:\Program Files (x86)\Launch Manager\Wbutton.exe [436264 2010-06-21] (Wistron Corp.) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [HPUsageTracking] - C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe [24576 2009-05-11] (Hewlett-Packard Company) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.) HKLM-x32\...\Run: [Adobe_ID0ENQBO] - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-03-29] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-490725143-3289892566-3385816065-1000\...\Run: [Personal ID] - C:\Program Files (x86)\coolspot AG\Personal ID\pid.exe [1132984 2013-08-01] (coolspot AG, Düsseldorf) HKU\S-1-5-21-490725143-3289892566-3385816065-1000\...\Run: [ISUSPM] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [213936 2006-05-16] (Macrovision Corporation) HKU\S-1-5-21-490725143-3289892566-3385816065-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20728480 2014-01-14] (Skype Technologies S.A.) Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {C6135BFC-325F-4C89-B5A9-5C016F700BE7} URL = https://www.google.com/search?q={searchTerms} SearchScopes: HKCU - {C6135BFC-325F-4C89-B5A9-5C016F700BE7} URL = https://www.google.com/search?q={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Chrome: ======= CHR HomePage: CHR RestoreOnStartup: "sync": { "app_settings": true, "apps": true, "autofill": true, "autofill_profile": true, "bookmarks": true, "dictionary": true, "encryption_bootstrap_token": "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAATplyssRhTkmLrzZn5shSowAAAAACAAAAAAAQZgAAAAEAACAAAADZdCJleZ6pl/FwD48LV4myi1IuQ//ABBhNdgdtpcKSyQAAAAAOgAAAAAIAACAAAACVkF6ZF8NXhNrDMoaTYbXTxPM2FZC8I3mXT7P1MbNwAkAAAAAb3ZSnieFT7UKPrq9BdJfRbx3feyinVd3IgiMBaHqsPYK3YqcMOqHXpmHOR/EoP9IMZERiL/jmSj+UMgKfhNaoQAAAANiIUP9I5il1mZGMjR2HhCxaOkJVKxyiK1TCqIBbA9WGTz4f0rmqyfzBDSvm/8CeikNcll479aYlFtkJbD8lwmA=", "extension_settings": true, "extensions": true, "favicon_images": true, "favicon_tracking": true, "has_setup_completed": true, "history_delete_directives": true, "keystore_encryption_bootstrap_token": "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAATplyssRhTkmLrzZn5shSowAAAAACAAAAAAAQZgAAAAEAACAAAAA3iLdA8Mpg1fBLX8vIvaNMg7a51a4sZf9uvz4NyLoTrQAAAAAOgAAAAAIAACAAAAArJ8U+vDASH891DD8dKJIw5GoY4hlanAkCKr9C7Tyzb1AAAAAufoZc6GRdyCn6Ph1mRUwmXNaOJa8eECtpc2DKp9BxXDEwTcE3Yb76NbPi3qMyQb6d/ooBtNm1cZfED19PgGuoXtn975dDvxpAP1rC1zblTEAAAADLR+61Xv+5E4bbaBCh1BO2BFfHNRelYnbgNxCa7xKsXt1Lu5eFtg5OPBvUE8eVUDlP8ir/REziVUgT/6IM+djC", "last_synced_time": "13040693075824733", "managed_users": true, "passwords": true, "preferences": true, "priority_preferences": true, "search_engines": true, "session_sync_guid": "session_syncOa2DFbo2Ay8y4nqHEBhpMg==", "sessions": true, "suppress_start": false, "synced_notifications": true, "tabs": true, "themes": true, "typed_urls" CHR Extension: (Google Docs) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-11] CHR Extension: (Google Drive) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-11] CHR Extension: (Schalten Sie das Licht) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2013-11-13] CHR Extension: (YouTube) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-11] CHR Extension: (Cake Mania Main Street) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bohogdkongdgejlnndnnhamjgfnbfoon [2013-11-13] CHR Extension: (tattoo girl) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bolmkphclbnmjlbmibfcnfggbakghpck [2013-11-13] CHR Extension: (Adblock Plus) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-11] CHR Extension: (Mangas und Comics auf Deutsch) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\chmidfbpiiicmkfimcbcoagpmchgmkpl [2013-11-13] CHR Extension: (Google-Suche) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-11] CHR Extension: (Search by Image (by Google)) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2013-11-13] CHR Extension: (avast! Online Security) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-09] CHR Extension: (TinEye Reverse Image Search) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl [2013-11-13] CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2014-03-02] CHR Extension: (Cake Mania) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kckjnbilaljpiclmpmnomoapakjmoapj [2013-11-13] CHR Extension: (SparkChess 7) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\khgabmflimjjbclkmljlpmgaleanedem [2013-11-13] CHR Extension: (Sand 2) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\klicmgamjpclmbhppmdeamffedflmkcn [2013-11-13] CHR Extension: (convert2mp3.net Online Video Converter) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmhoigapbeidamhadadmpbhpaodamjce [2014-02-18] CHR Extension: (Google Wallet) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-11] CHR Extension: (YouTube Unblocker) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-02-07] CHR Extension: (Google Mail) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-11] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-03-29] ==================== Services (Whitelisted) ================= S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated) R2 AntiToolbarProtector; C:\Program Files\AntiToolbar\ReiGuard.exe [5101928 2014-01-23] (Reimage®) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-29] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-03-29] (AVAST Software) R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2010-09-17] (Firebird Project) R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-08-24] () R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [336824 2010-11-30] (arvato digital services llc) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-02-10] () R3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2009-10-22] (Wistron Corp.) S2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10) ==================== Drivers (Whitelisted) ==================== S3 ActionReplayDS; C:\Windows\System32\Drivers\ActionReplayDS_x64.sys [51600 2007-02-08] (Thesycon GmbH, Germany) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-03-29] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-03-29] (AVAST Software) R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [445304 2014-03-29] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-03-29] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-29] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-03-29] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-03-29] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-03-29] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-03-29] () R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-10-10] () S3 FlashUSB; C:\Windows\System32\DRIVERS\FlashUSB_x64.sys [19968 2010-12-21] (Danish Wireless Design A/S) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-10-10] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [913888 2009-09-24] (DiBcom SA) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-03-21] (Duplex Secure Ltd.) R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.) S2 {09BB444F-B2E2-4009-BAF2-7B727681223E}; C:\Program Files (x86)\VMLaunch\BuddyVM.sys [15872 2004-10-05] (Interlex Inc.) S3 catchme; \??\C:\ComboFix\catchme.sys [X] U3 DfSdkS; S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-30 23:49 - 2014-03-30 23:50 - 00001804 ____C () C:\sc-cleaner.txt 2014-03-30 23:47 - 2014-03-30 23:48 - 00406264 ____C (Bleeping Computer, LLC) C:\Users\Daniel\Desktop\sc-cleaner.exe 2014-03-30 01:44 - 2014-03-30 01:44 - 00000000 ___DC () C:\Program Files (x86)\ESET 2014-03-30 01:42 - 2014-03-30 01:42 - 02347384 ____C (ESET) C:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe 2014-03-29 23:06 - 2014-03-15 01:55 - 00915558 ____C () C:\Users\Daniel\Downloads\com.dotgears.flappybird.apk 2014-03-29 23:05 - 2014-03-29 22:58 - 26291411 ____C () C:\Users\Daniel\Downloads\sky_burger.apk 2014-03-29 22:51 - 2014-03-29 23:39 - 170443072 ____C () C:\Users\Daniel\Downloads\plants_vs_zombies_2.zip 2014-03-29 18:33 - 2014-03-29 23:17 - 00000000 ___DC () C:\Windroy 2014-03-29 18:29 - 2014-03-29 18:31 - 83252212 ____C (Windroy, Inc. ) C:\Users\Daniel\Downloads\windroy_20140113.exe 2014-03-29 18:08 - 2014-03-29 18:13 - 00000000 ___DC () C:\ProgramData\BlueStacksSetup 2014-03-29 18:07 - 2014-03-29 18:07 - 10245808 ____C (BlueStack Systems Inc.) C:\Users\Daniel\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe 2014-03-29 18:05 - 2014-03-29 18:06 - 04999351 ____C () C:\Users\Daniel\Downloads\tower-bloxx-deluxe-3d-320-480.swf 2014-03-29 13:14 - 2014-03-29 13:16 - 00076034 ____C () C:\Users\Daniel\Desktop\Addition.txt 2014-03-29 13:13 - 2014-03-31 00:44 - 00022203 ____C () C:\Users\Daniel\Desktop\FRST.txt 2014-03-29 13:12 - 2014-03-31 00:44 - 00000000 ___DC () C:\FRST 2014-03-29 13:11 - 2014-03-29 13:11 - 02157056 ____C (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2014-03-29 12:55 - 2014-03-29 12:55 - 00000000 ___DC () C:\ProgramData\Package Cache 2014-03-29 12:55 - 2014-03-29 12:55 - 00000000 ___DC () C:\Program Files\Adblock Plus for IE 2014-03-29 12:52 - 2014-03-29 12:52 - 04741136 ____C () C:\Users\Daniel\Downloads\adblockplusie-1.1.exe 2014-03-29 12:20 - 2014-03-29 12:20 - 00991232 ____C () C:\Users\Daniel\Downloads\MicrosoftFixit50267.msi 2014-03-29 11:19 - 2014-03-29 11:19 - 00043152 ____C (AVAST Software) C:\Windows\avastSS.scr 2014-03-29 11:18 - 2014-03-29 11:18 - 00445304 ____C (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2014-03-28 23:17 - 2014-03-28 23:23 - 25467065 ____C () C:\Users\Daniel\Downloads\1309StOb.rar 2014-03-24 17:58 - 2014-03-24 18:34 - 78938112 ____C () C:\Users\Daniel\Downloads\1102StOb.rar 2014-03-24 17:08 - 2014-03-24 17:54 - 00000000 ___DC () C:\Users\Daniel\Downloads\sims 2014-03-24 17:04 - 2014-03-24 17:04 - 00000000 ___DC () C:\Users\Daniel\Downloads\video 2014-03-24 17:01 - 2014-03-24 17:04 - 00000000 ___DC () C:\Users\Daniel\Downloads\dokumente 2014-03-24 16:58 - 2014-03-24 16:58 - 00000000 ___DC () C:\Users\Daniel\Downloads\flash spiele 2014-03-22 16:24 - 2014-03-22 16:24 - 00003337 ____C () C:\Users\Daniel\Downloads\NRaas_NoCD.zip 2014-03-22 01:43 - 2014-03-22 01:43 - 00000000 ___DC () C:\Program Files (x86)\Hex-Editor MX 2014-03-21 19:18 - 2014-03-21 19:18 - 00000000 ___DC () C:\Users\Public\Documents\DAEMON Tools Images 2014-03-21 19:01 - 2014-03-21 19:17 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\DAEMON Tools Lite 2014-03-21 18:59 - 2014-03-21 19:19 - 00000000 ___DC () C:\ProgramData\DAEMON Tools Lite 2014-03-18 19:07 - 2014-03-18 19:07 - 00000000 ___DC () C:\Users\Daniel\Documents\Epubsoft 2014-03-18 19:07 - 2014-03-18 19:07 - 00000000 ___DC () C:\ProgramData\Epubsoft 2014-03-18 19:06 - 2014-03-18 19:06 - 00002819 ____C () C:\Users\Public\Desktop\EPubsoft Adobe PDF ePub DRM Removal.lnk 2014-03-18 19:06 - 2014-03-18 19:06 - 00000000 ___DC () C:\Program Files (x86)\EPUBSOFT 2014-03-18 18:59 - 2014-03-18 18:59 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\Adobe_Systems_Incorporate 2014-03-18 18:58 - 2014-03-18 19:10 - 00000000 ___DC () C:\Users\Daniel\Documents\My Digital Editions 2014-03-18 18:37 - 2014-03-18 18:37 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\SomePDF 2014-03-18 18:37 - 2014-03-18 18:37 - 00000000 ___DC () C:\Program Files (x86)\SomePDF 2014-03-18 16:18 - 2014-03-18 16:18 - 00000000 ___DC () C:\Users\Daniel\Documents\4Media 2014-03-18 16:18 - 2014-03-18 16:18 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\4Media 2014-03-18 16:17 - 2014-03-18 16:17 - 00000000 ___DC () C:\Program Files (x86)\4Media 2014-03-16 20:20 - 2007-07-23 13:11 - 00425984 ____C () C:\Users\Daniel\Desktop\AnimalMap.exe 2014-03-16 20:20 - 2007-07-22 13:05 - 00000031 ____C () C:\Users\Daniel\Desktop\AnimalMap_AdvancedMode.bat 2014-03-16 14:13 - 2014-03-16 14:13 - 00132628 ____C () C:\Users\Daniel\Desktop\usrcheat.dat 2014-03-15 20:16 - 2014-03-15 20:16 - 00000000 ___DC () C:\Users\Daniel\Desktop\r4cce086 2014-03-15 19:56 - 2014-03-15 19:56 - 00002990 ____C () C:\Windows\System32\Tasks\{A5C24906-6C19-4574-85F9-6616289EB799} 2014-03-15 19:54 - 2014-03-15 20:13 - 00000000 ___DC () C:\Users\Daniel\Desktop\Cheat code editor 2014-03-13 00:05 - 2014-03-13 00:05 - 00000000 ___DC () C:\Users\Daniel\Downloads\de 2014-03-12 23:54 - 2014-03-18 19:11 - 00000000 ___DC () C:\Users\Daniel\Desktop\pokesavplat_en 2014-03-12 20:03 - 2014-03-12 20:03 - 00000000 ___DC () C:\Users\Daniel\Downloads\R4 V1.78b German 2014-03-12 12:38 - 2014-03-13 04:03 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-12 12:38 - 2014-03-13 04:03 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-12 12:38 - 2014-03-13 04:03 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-12 12:38 - 2014-03-13 04:02 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-12 12:38 - 2014-03-13 04:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-12 12:38 - 2014-03-13 04:02 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-12 12:38 - 2014-03-13 04:02 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-12 12:38 - 2014-03-13 04:02 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-12 12:38 - 2014-03-13 04:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-12 12:38 - 2014-03-13 04:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-12 12:38 - 2014-03-13 04:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-12 12:38 - 2014-03-13 04:02 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-12 12:38 - 2014-03-13 04:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-12 12:37 - 2014-03-13 04:02 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-12 12:37 - 2014-03-13 04:02 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-12 12:36 - 2014-03-13 04:02 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-12 12:36 - 2014-03-13 04:02 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-12 12:36 - 2014-03-13 04:01 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-12 12:36 - 2014-03-13 04:01 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-11 17:00 - 2014-03-24 17:54 - 00000000 ___DC () C:\Users\Daniel\Downloads\en 2014-03-11 13:47 - 2014-03-11 13:47 - 00002962 ____C () C:\Windows\System32\Tasks\{7438BE65-7E2E-47AC-B28F-7D1B1CD340BF} 2014-03-11 13:04 - 2014-03-12 18:16 - 00000000 ___DC () C:\Users\Daniel\Desktop\mew sav 2014-03-11 12:33 - 2014-03-11 12:40 - 00000000 ___DC () C:\Users\Daniel\Downloads\Marvelous Designer 2 (64 bit) 3.8.3 Multilanguage [ChingLiu] 2014-03-09 16:51 - 2014-03-09 16:51 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\DropboxMaster 2014-03-09 00:34 - 2014-03-09 00:34 - 00001182 ____C () C:\Users\Daniel\Desktop\Cheatbook Database 2014.lnk 2014-03-09 00:34 - 2014-03-09 00:34 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cheatbook Database2014 2014-03-09 00:30 - 2014-03-09 02:32 - 00000000 ___DC () C:\Program Files (x86)\Cheatbook Database 2014 2014-03-09 00:22 - 2014-03-09 00:31 - 00000000 ___DC () C:\Program Files (x86)\Cheatbook 07.2013 2014-03-08 18:51 - 2014-03-08 22:53 - 00000000 ___DC () C:\Users\Daniel\Downloads\MotherLoad.Goldium.Edition 2014-03-06 20:20 - 2014-03-06 20:38 - 00000000 ___DC () C:\Windows\erdnt 2014-03-06 12:33 - 2014-03-06 12:33 - 00001026 ____C () C:\Users\Public\Desktop\DivX Player.lnk 2014-03-05 16:42 - 2014-03-05 16:42 - 00001120 ____C () C:\Users\Public\Desktop\MAGIX Web Designer 9 Premium (32-bit).lnk 2014-03-05 16:41 - 2014-03-05 16:41 - 00000000 ___DC () C:\Program Files\Common Files\MAGIX Services 2014-03-05 15:53 - 2014-03-05 15:53 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\Xara 2014-03-02 01:21 - 2014-03-02 01:21 - 00000000 ___DC () C:\Users\Daniel\Downloads\129791_ndssaveconverter25 ==================== One Month Modified Files and Folders ======= 2014-03-31 00:45 - 2014-03-29 13:13 - 00022203 ____C () C:\Users\Daniel\Desktop\FRST.txt 2014-03-31 00:44 - 2014-03-29 13:12 - 00000000 ___DC () C:\FRST 2014-03-31 00:44 - 2013-08-01 17:23 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\Skype 2014-03-31 00:10 - 2013-11-11 17:47 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-31 00:08 - 2013-07-31 22:11 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-30 23:50 - 2014-03-30 23:49 - 00001804 ____C () C:\sc-cleaner.txt 2014-03-30 23:48 - 2014-03-30 23:47 - 00406264 ____C (Bleeping Computer, LLC) C:\Users\Daniel\Desktop\sc-cleaner.exe 2014-03-30 11:10 - 2013-11-11 17:47 - 00001106 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-30 04:00 - 2013-08-14 09:41 - 01882528 ____C () C:\Windows\WindowsUpdate.log 2014-03-30 01:44 - 2014-03-30 01:44 - 00000000 ___DC () C:\Program Files (x86)\ESET 2014-03-30 01:42 - 2014-03-30 01:42 - 02347384 ____C (ESET) C:\Users\Daniel\Desktop\esetsmartinstaller_enu.exe 2014-03-29 23:39 - 2014-03-29 22:51 - 170443072 ____C () C:\Users\Daniel\Downloads\plants_vs_zombies_2.zip 2014-03-29 23:17 - 2014-03-29 18:33 - 00000000 ___DC () C:\Windroy 2014-03-29 23:01 - 2013-11-01 17:13 - 00000000 ___DC () C:\Users\Daniel\Downloads\programe 2014-03-29 22:58 - 2014-03-29 23:05 - 26291411 ____C () C:\Users\Daniel\Downloads\sky_burger.apk 2014-03-29 22:51 - 2013-07-31 19:47 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\VirtualStore 2014-03-29 18:55 - 2009-07-14 05:20 - 00000000 _RHDC () C:\Users\Public\Libraries 2014-03-29 18:31 - 2014-03-29 18:29 - 83252212 ____C (Windroy, Inc. ) C:\Users\Daniel\Downloads\windroy_20140113.exe 2014-03-29 18:13 - 2014-03-29 18:08 - 00000000 ___DC () C:\ProgramData\BlueStacksSetup 2014-03-29 18:07 - 2014-03-29 18:07 - 10245808 ____C (BlueStack Systems Inc.) C:\Users\Daniel\Downloads\BlueStacks-SplitInstaller_native_0.8.4.3036.exe 2014-03-29 18:06 - 2014-03-29 18:05 - 04999351 ____C () C:\Users\Daniel\Downloads\tower-bloxx-deluxe-3d-320-480.swf 2014-03-29 17:53 - 2013-11-21 01:43 - 00000000 ___DC () C:\Users\Daniel\Desktop\bilder 2014-03-29 13:16 - 2014-03-29 13:14 - 00076034 ____C () C:\Users\Daniel\Desktop\Addition.txt 2014-03-29 13:11 - 2014-03-29 13:11 - 02157056 ____C (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2014-03-29 12:55 - 2014-03-29 12:55 - 00000000 ___DC () C:\ProgramData\Package Cache 2014-03-29 12:55 - 2014-03-29 12:55 - 00000000 ___DC () C:\Program Files\Adblock Plus for IE 2014-03-29 12:52 - 2014-03-29 12:52 - 04741136 ____C () C:\Users\Daniel\Downloads\adblockplusie-1.1.exe 2014-03-29 12:38 - 2009-07-14 06:45 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-29 12:38 - 2009-07-14 06:45 - 00009888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-29 12:24 - 2013-11-18 11:37 - 00012184 ____C () C:\Windows\setupact.log 2014-03-29 12:24 - 2009-07-14 07:08 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT 2014-03-29 12:20 - 2014-03-29 12:20 - 00991232 ____C () C:\Users\Daniel\Downloads\MicrosoftFixit50267.msi 2014-03-29 12:05 - 2013-11-11 17:47 - 00004106 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-03-29 12:05 - 2013-11-11 17:47 - 00003854 ____C () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-03-29 12:03 - 2013-11-11 17:48 - 00002127 ____C () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-29 11:53 - 2013-11-20 01:00 - 00257204 ____C () C:\Windows\PFRO.log 2014-03-29 11:20 - 2013-12-09 02:50 - 00001976 ____C () C:\Users\Public\Desktop\avast! Internet Security.lnk 2014-03-29 11:19 - 2014-03-29 11:19 - 00043152 ____C (AVAST Software) C:\Windows\avastSS.scr 2014-03-29 11:19 - 2013-12-22 00:19 - 00084816 ____C (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 01039096 ____C (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 00423240 ____C (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 00334648 ____C (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-03-29 11:19 - 2013-12-09 02:49 - 00208928 ____C () C:\Windows\system32\Drivers\aswVmm.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 00093568 ____C (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 00079184 ____C (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 00065776 ____C () C:\Windows\system32\Drivers\aswRvrt.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 00028184 ____C (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2014-03-29 11:19 - 2013-12-09 02:49 - 00003924 ____C () C:\Windows\System32\Tasks\avast! Emergency Update 2014-03-29 11:18 - 2014-03-29 11:18 - 00445304 ____C (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2014-03-29 09:04 - 2013-08-07 20:01 - 00000000 ___DC () C:\Program Files (x86)\DVDVideoSoft 2014-03-28 23:23 - 2014-03-28 23:17 - 25467065 ____C () C:\Users\Daniel\Downloads\1309StOb.rar 2014-03-27 23:16 - 2010-05-12 10:18 - 00699342 ____C () C:\Windows\system32\perfh007.dat 2014-03-27 23:16 - 2010-05-12 10:18 - 00149450 ____C () C:\Windows\system32\perfc007.dat 2014-03-27 23:16 - 2009-07-14 07:13 - 01619284 ____C () C:\Windows\system32\PerfStringBackup.INI 2014-03-25 17:02 - 2013-10-30 16:15 - 00000000 ___DC () C:\Users\Daniel\Downloads\bilder 2014-03-24 18:34 - 2014-03-24 17:58 - 78938112 ____C () C:\Users\Daniel\Downloads\1102StOb.rar 2014-03-24 17:54 - 2014-03-24 17:08 - 00000000 ___DC () C:\Users\Daniel\Downloads\sims 2014-03-24 17:54 - 2014-03-11 17:00 - 00000000 ___DC () C:\Users\Daniel\Downloads\en 2014-03-24 17:05 - 2013-07-31 21:43 - 00000000 __RDC () C:\Users\Daniel\Desktop\Dj Musik 2014-03-24 17:04 - 2014-03-24 17:04 - 00000000 ___DC () C:\Users\Daniel\Downloads\video 2014-03-24 17:04 - 2014-03-24 17:01 - 00000000 ___DC () C:\Users\Daniel\Downloads\dokumente 2014-03-24 16:58 - 2014-03-24 16:58 - 00000000 ___DC () C:\Users\Daniel\Downloads\flash spiele 2014-03-24 16:56 - 2013-11-01 17:12 - 00000000 ___DC () C:\Users\Daniel\Downloads\rar verzeichnisse 2014-03-24 15:34 - 2013-11-19 19:45 - 00000000 ___DC () C:\Users\Daniel\Desktop\sims 2014-03-23 14:23 - 2013-12-16 03:22 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\BitTorrent 2014-03-22 20:58 - 2013-08-21 23:22 - 00000000 ___DC () C:\Users\Daniel\Desktop\spiele 2014-03-22 20:57 - 2013-08-13 18:16 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\SecondLife 2014-03-22 20:50 - 2013-08-01 17:06 - 00000000 ___DC () C:\Users\Daniel\Documents\Youcam 2014-03-22 19:30 - 2013-08-13 18:30 - 00000000 ____C () C:\conversation.log 2014-03-22 19:28 - 2013-08-13 18:14 - 00000000 ___DC () C:\Program Files (x86)\SecondLifeViewer 2014-03-22 16:24 - 2014-03-22 16:24 - 00003337 ____C () C:\Users\Daniel\Downloads\NRaas_NoCD.zip 2014-03-22 13:57 - 2013-10-26 18:48 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\Notepad++ 2014-03-22 13:57 - 2013-10-26 18:48 - 00000000 ___DC () C:\Program Files (x86)\Notepad++ 2014-03-22 01:43 - 2014-03-22 01:43 - 00000000 ___DC () C:\Program Files (x86)\Hex-Editor MX 2014-03-21 20:08 - 2013-08-21 23:55 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\Apps\2.0 2014-03-21 19:19 - 2014-03-21 18:59 - 00000000 ___DC () C:\ProgramData\DAEMON Tools Lite 2014-03-21 19:18 - 2014-03-21 19:18 - 00000000 ___DC () C:\Users\Public\Documents\DAEMON Tools Images 2014-03-21 19:17 - 2014-03-21 19:01 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\DAEMON Tools Lite 2014-03-21 19:02 - 2013-10-21 17:29 - 00386680 ____C (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-03-20 22:45 - 2014-02-09 15:24 - 00000000 ___DC () C:\Users\Daniel\Desktop\überweisungen 2014-03-18 19:11 - 2014-03-12 23:54 - 00000000 ___DC () C:\Users\Daniel\Desktop\pokesavplat_en 2014-03-18 19:10 - 2014-03-18 18:58 - 00000000 ___DC () C:\Users\Daniel\Documents\My Digital Editions 2014-03-18 19:07 - 2014-03-18 19:07 - 00000000 ___DC () C:\Users\Daniel\Documents\Epubsoft 2014-03-18 19:07 - 2014-03-18 19:07 - 00000000 ___DC () C:\ProgramData\Epubsoft 2014-03-18 19:06 - 2014-03-18 19:06 - 00002819 ____C () C:\Users\Public\Desktop\EPubsoft Adobe PDF ePub DRM Removal.lnk 2014-03-18 19:06 - 2014-03-18 19:06 - 00000000 ___DC () C:\Program Files (x86)\EPUBSOFT 2014-03-18 19:02 - 2013-08-03 20:09 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\CrashDumps 2014-03-18 18:59 - 2014-03-18 18:59 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\Adobe_Systems_Incorporate 2014-03-18 18:58 - 2013-12-08 21:28 - 00000000 ___DC () C:\Users\Daniel\Desktop\programme 2014-03-18 18:58 - 2013-07-31 22:15 - 00000000 ___DC () C:\Program Files (x86)\Adobe 2014-03-18 18:37 - 2014-03-18 18:37 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\SomePDF 2014-03-18 18:37 - 2014-03-18 18:37 - 00000000 ___DC () C:\Program Files (x86)\SomePDF 2014-03-18 16:18 - 2014-03-18 16:18 - 00000000 ___DC () C:\Users\Daniel\Documents\4Media 2014-03-18 16:18 - 2014-03-18 16:18 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\4Media 2014-03-18 16:17 - 2014-03-18 16:17 - 00000000 ___DC () C:\Program Files (x86)\4Media 2014-03-18 14:28 - 2013-08-01 11:11 - 00000000 ___DC () C:\Windows\system32\MRT 2014-03-18 14:20 - 2013-07-31 23:46 - 90015360 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-03-16 14:13 - 2014-03-16 14:13 - 00132628 ____C () C:\Users\Daniel\Desktop\usrcheat.dat 2014-03-15 20:16 - 2014-03-15 20:16 - 00000000 ___DC () C:\Users\Daniel\Desktop\r4cce086 2014-03-15 20:13 - 2014-03-15 19:54 - 00000000 ___DC () C:\Users\Daniel\Desktop\Cheat code editor 2014-03-15 19:56 - 2014-03-15 19:56 - 00002990 ____C () C:\Windows\System32\Tasks\{A5C24906-6C19-4574-85F9-6616289EB799} 2014-03-15 01:55 - 2014-03-29 23:06 - 00915558 ____C () C:\Users\Daniel\Downloads\com.dotgears.flappybird.apk 2014-03-13 08:24 - 2013-11-18 11:37 - 03268448 ____C () C:\Windows\system32\FNTCACHE.DAT 2014-03-13 04:03 - 2014-03-12 12:38 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-13 04:03 - 2014-03-12 12:38 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-13 04:03 - 2014-03-12 12:38 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-13 04:02 - 2014-03-12 12:38 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-13 04:02 - 2014-03-12 12:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-13 04:02 - 2014-03-12 12:38 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-13 04:02 - 2014-03-12 12:38 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-13 04:02 - 2014-03-12 12:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-13 04:02 - 2014-03-12 12:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-13 04:02 - 2014-03-12 12:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-13 04:02 - 2014-03-12 12:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-13 04:02 - 2014-03-12 12:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-13 04:02 - 2014-03-12 12:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-13 04:02 - 2014-03-12 12:37 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-13 04:02 - 2014-03-12 12:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-13 04:02 - 2014-03-12 12:36 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-13 04:02 - 2014-03-12 12:36 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-13 04:01 - 2014-03-12 12:36 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-13 04:01 - 2014-03-12 12:36 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-13 00:05 - 2014-03-13 00:05 - 00000000 ___DC () C:\Users\Daniel\Downloads\de 2014-03-12 22:19 - 2013-08-03 16:10 - 00000000 __RDC () C:\Users\Daniel\Dropbox 2014-03-12 22:11 - 2013-08-03 16:06 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\Dropbox 2014-03-12 20:03 - 2014-03-12 20:03 - 00000000 ___DC () C:\Users\Daniel\Downloads\R4 V1.78b German 2014-03-12 19:08 - 2013-07-31 22:11 - 00692616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-12 19:08 - 2013-07-31 22:11 - 00071048 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-12 19:08 - 2013-07-31 22:11 - 00003822 ____C () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-03-12 18:16 - 2014-03-11 13:04 - 00000000 ___DC () C:\Users\Daniel\Desktop\mew sav 2014-03-11 13:47 - 2014-03-11 13:47 - 00002962 ____C () C:\Windows\System32\Tasks\{7438BE65-7E2E-47AC-B28F-7D1B1CD340BF} 2014-03-11 12:40 - 2014-03-11 12:33 - 00000000 ___DC () C:\Users\Daniel\Downloads\Marvelous Designer 2 (64 bit) 3.8.3 Multilanguage [ChingLiu] 2014-03-11 04:39 - 2009-07-14 05:20 - 00000000 ___DC () C:\Windows\system32\NDF 2014-03-09 17:44 - 2013-08-07 20:01 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\DVDVideoSoft 2014-03-09 17:42 - 2013-08-07 20:01 - 00001203 ____C () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-03-09 17:07 - 2013-08-03 16:08 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-03-09 16:51 - 2014-03-09 16:51 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\DropboxMaster 2014-03-09 02:32 - 2014-03-09 00:30 - 00000000 ___DC () C:\Program Files (x86)\Cheatbook Database 2014 2014-03-09 00:34 - 2014-03-09 00:34 - 00001182 ____C () C:\Users\Daniel\Desktop\Cheatbook Database 2014.lnk 2014-03-09 00:34 - 2014-03-09 00:34 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cheatbook Database2014 2014-03-09 00:31 - 2014-03-09 00:22 - 00000000 ___DC () C:\Program Files (x86)\Cheatbook 07.2013 2014-03-09 00:31 - 2009-07-14 04:34 - 00000634 ____C () C:\Windows\win.ini 2014-03-08 22:53 - 2014-03-08 18:51 - 00000000 ___DC () C:\Users\Daniel\Downloads\MotherLoad.Goldium.Edition 2014-03-06 21:44 - 2013-11-15 14:02 - 00001026 ____C () C:\DelFix.txt 2014-03-06 20:38 - 2014-03-06 20:20 - 00000000 ___DC () C:\Windows\erdnt 2014-03-06 20:36 - 2009-07-14 04:34 - 00000215 ____C () C:\Windows\system.ini 2014-03-06 14:51 - 2013-08-03 17:19 - 00000000 ___DC () C:\Users\Daniel\Documents\MAGIX 2014-03-06 14:41 - 2013-07-31 19:47 - 00000000 ___DC () C:\Users\Daniel 2014-03-06 12:33 - 2014-03-06 12:33 - 00001026 ____C () C:\Users\Public\Desktop\DivX Player.lnk 2014-03-06 12:33 - 2013-07-31 22:36 - 00001612 ____C () C:\Users\Daniel\Desktop\DivX Movies.lnk 2014-03-06 12:33 - 2013-07-31 22:31 - 00000000 ___DC () C:\Program Files (x86)\DivX 2014-03-06 12:33 - 2013-07-31 22:29 - 00000000 ___DC () C:\ProgramData\DivX 2014-03-06 12:32 - 2013-09-10 01:46 - 00001091 ____C () C:\Users\Public\Desktop\DivX Converter.lnk 2014-03-06 12:32 - 2013-07-31 22:36 - 00000000 ___DC () C:\Program Files\DivX 2014-03-05 17:33 - 2013-08-14 17:22 - 00000952 __SHC () C:\ProgramData\KGyGaAvL.sys 2014-03-05 17:28 - 2013-11-19 17:01 - 00217648 ____C () C:\Users\Daniel\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-05 16:42 - 2014-03-05 16:42 - 00001120 ____C () C:\Users\Public\Desktop\MAGIX Web Designer 9 Premium (32-bit).lnk 2014-03-05 16:41 - 2014-03-05 16:41 - 00000000 ___DC () C:\Program Files\Common Files\MAGIX Services 2014-03-05 16:41 - 2013-08-03 17:38 - 00000000 ___DC () C:\Program Files (x86)\MAGIX 2014-03-05 15:53 - 2014-03-05 15:53 - 00000000 ___DC () C:\Users\Daniel\AppData\Local\Xara 2014-03-05 15:53 - 2013-08-03 17:19 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\MAGIX 2014-03-05 15:53 - 2013-08-03 17:17 - 00000000 ___DC () C:\ProgramData\MAGIX 2014-03-05 15:53 - 2007-04-27 10:43 - 00120200 ____C () C:\Windows\SysWOW64\DLLDEV32i.dll 2014-03-03 06:46 - 2013-08-19 07:16 - 00000919 ____C () C:\Users\Public\Desktop\VLC media player.lnk 2014-03-02 23:32 - 2013-08-06 01:06 - 00000000 ___DC () C:\ProgramData\firebird 2014-03-02 03:22 - 2013-08-19 07:16 - 00000000 ___DC () C:\Users\Daniel\AppData\Roaming\vlc 2014-03-02 01:21 - 2014-03-02 01:21 - 00000000 ___DC () C:\Users\Daniel\Downloads\129791_ndssaveconverter25 Some content of TEMP: ==================== C:\Users\Daniel\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpmfxln_.dll C:\Users\Daniel\AppData\Local\Temp\npp.6.5.5.Installer.exe C:\Users\Daniel\AppData\Local\Temp\SWFXXLRT.DLL C:\Users\Daniel\AppData\Local\Temp\Upgrade.exe C:\Users\Daniel\AppData\Local\Temp\xmlUpdater.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-30 08:18 ==================== End Of Log ============================ --- --- --- --- --- --- |
Themen zu www.feed.plusnetwork.com ändert die websiten startseite immer um -.-* |
ahnung, avast, direkt, funde, gescannt, js/exploit.pdfka.pny, keine ahnung, keine funde, manipulierung, mbam, nervig, seite, start, startseite, website, websiten, win32/toolbar.conduit, win32/toolbar.conduit.b, win32/toolbar.zugo, win32/topmedia.b, woran, ändert |