Windows Virus, Run DLL Error mit fehlenden Desktopsymbolen und Taskleiste

Bibibrownie · 25.11.2014, 12:02

Hallo,
ich bin wirklich verzweifelt und hoffe, jemand kann mir helfen!

Fing alles damit an, als ich gestern ein Programm aus dem Internet geladen habe und dummerweise mein Antivirenprogramm deaktiviert habe, weil ich so naiv war.

Habe gestern mit Avira und Malwarebites zahlreiche Scans durchgeführt und dachte, ich konnte den Virus löschen. Heute jedoch, als ich meinen PC hochgefahren habe, kam mir die Fehlermeldung Run DLL Problem Beim Starten von C:... Modul wurde nicht gefunden, außerdem sind alle Symbole und die Taskleiste verschwunden und nur noch das Hintergrundbild da. Das einzige Fenster ist der Explorer mit den Ordnern.

Habe gelesen, dass ich den Log posten muss, hier der erste, habe alles danach in Quarantäne verschoben. Danach den Pc neugestartet und noch einen durchgeführt.
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 25.11.2014
Suchlauf-Zeit: 12:06:30
Logdatei:
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.09.19.05
Rootkit Datenbank: v2014.11.22.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Bianca

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 356914
Verstrichene Zeit: 20 Min, 42 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 25
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [afd26b84cfacfa3c98ed5736fd0508f8],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\20891, In Quarantäne, [c9b8f0ff641776c0103a0329fa09d030],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, In Quarantäne, [b1d010df7b00f54141096fbdaa59c838],
PUP.Optional.iWebar.A, HKLM\SOFTWARE\WOW6432NODE\iWebar, In Quarantäne, [3051559a3843c96d6f4baaac778d58a8],
PUP.Optional.ObjectBrowser.A, HKLM\SOFTWARE\WOW6432NODE\Object Browser, In Quarantäne, [176a32bdd8a31b1b8d312f2744c007f9],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, In Quarantäne, [f091915e433882b4a184cf42d330b24e],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\20891, In Quarantäne, [572a638c4e2d1d19db6f38f405fe7d83],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21836, In Quarantäne, [a9d8b23deb905cda5ceefb319d6655ab],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [4938549bd2a9d066b776155dd232d42c],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [b5cc6e81324981b5032b1f5305ff29d7],
PUP.Optional.WebSearches.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SupHpUISoft, Löschen bei Neustart, [dfa28e610477db5b5a2c35d562a1fa06],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Löschen bei Neustart, [4140846b0378d75ff646f96a1aeaf30d],
PUP.Optional.iWebar.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, Löschen bei Neustart, [6a17757a34471e18946aa68dc04327d9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\20891, Löschen bei Neustart, [f38e6b84027925114a6f4cb8f90a21df],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, Löschen bei Neustart, [eb96ae41e19adf57b40512f258ab54ac],
PUP.Optional.iWebar.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\iWebar, Löschen bei Neustart, [b5cc608fc4b770c6ec842c097d86b54b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Object Browser, Löschen bei Neustart, [83fe97584239c76fb468194b996b6799],
PUP.Optional.Qone8, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Löschen bei Neustart, [5d2406e9126944f2761c0159ae5660a0],
PUP.Optional.FastStart.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS, Löschen bei Neustart, [7e03aa453e3dd462dcde877eb3500bf5],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [4f32fdf29ae1b284c248ff0d0ef7fd03],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [4f32fdf29ae1b284c248ff0d0ef7fd03],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [4f32fdf29ae1b284c248ff0d0ef7fd03],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [4f32fdf29ae1b284c248ff0d0ef7fd03],

Registrierungswerte: 5
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [f091915e433882b4a184cf42d330b24e]
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1413\jsdrv.exe, In Quarantäne, [334e77785328dc5a6b5fbb51db28ef11]
PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com, In Quarantäne, [2a57f8f7601bec4ac45a333b1ee69769]
PUP.Optional.ShopperPro, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1413\jsdrv.exe, Löschen bei Neustart, [2d5428c7a0db7cbaed79c149a85bd927]
PUP.Optional.FastStart.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, Löschen bei Neustart, [7e03aa453e3dd462dcde877eb3500bf5]

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 37
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\include, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\include\tools, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\lib, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\module, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\pack, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\en, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\en-US, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\es, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\es-419, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\it, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\pl, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\ru, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\tr, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\vi, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\defaults, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\defaults\preferences, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, In Quarantäne, [225f6788de9d0b2bd74145b6ec16817f],

Dateien: 138
PUP.Optional.crossRider.A, C:\Program Files (x86)\Object Browser\utils.exe, In Quarantäne, [067be30c0972a29461b7a59b916fe51b],
PUP.Optional.Goobzo, C:\Users\Bianca\AppData\Local\Temp\dufgmr4c.exe, In Quarantäne, [ee931fd00d6e171faee4565437caf010],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_333132343334353538382d415b343437414545785a5a6c, In Quarantäne, [cdb4ec03b9c255e1b590030552b19070],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperPro, In Quarantäne, [50315f90f38834020ac807056d96a35d],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperProJSUpd, In Quarantäne, [84fd6d82205b9c9a21b2b05c55aef808],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPDriver, In Quarantäne, [f28f2cc3a2d9fb3b8b49fb11bb4847b9],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-1, In Quarantäne, [245d8a6556250135fe22f918ae555ea2],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-11, In Quarantäne, [69188867c5b679bd55cbff1239ca9b65],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-2, In Quarantäne, [d9a8cd22027942f441dfa869f50e28d8],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-4, In Quarantäne, [b4cd34bb23583ff7ea3666ab768d27d9],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-5, In Quarantäne, [fb8667880873ff37c25e55bcdd26c040],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-5_user, In Quarantäne, [532e7b74f2893ef8819f44cdc83b5ca4],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-6, In Quarantäne, [0081e50ab8c39d99e13f51c0907315eb],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-7, In Quarantäne, [a8d94ca3c0bb11254cd468a98f74d62a],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-1, In Quarantäne, [0a77b23de5967eb8e33df0210df6e818],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-11, In Quarantäne, [aed312ddc1ba72c4c06015fcef1414ec],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-2, In Quarantäne, [f9885e915625be78fd23c9480bf825db],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-3, In Quarantäne, [4f3212dda3d84bebf32d33de8c77619f],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-4, In Quarantäne, [8cf5638c7209092d2af62ee3be45a45c],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-5, In Quarantäne, [5d24608ff08bf73fa37d78997e8508f8],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-5_user, In Quarantäne, [2b5646a90d6ec373869ac24f34cfce32],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-6, In Quarantäne, [d7aa658a3b4065d19888ab6617ec9070],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-7, In Quarantäne, [463b836c067592a470b03dd4b0533fc1],
PUP.Optional.Superfish.A, C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, In Quarantäne, [2c5547a80e6d2f07208a928eaa590ef2],
PUP.Optional.Superfish.A, C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, In Quarantäne, [255cc926a3d8181e149672aee023e020],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\background.html, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\1293297481.mxaddon, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\32e70cc9-a38d-47ea-93ac-2f00e4b82bd4.crx, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\bgNova.html, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\dad1b571-414c-4a8d-979f-733e7855cbb5.crx, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\fa62ca28-7e59-46fc-8a53-8b821cc30946.crx, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\fa62ca28-7e59-46fc-8a53-8b821cc30946.xpi, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\Object Browser.ico, In Quarantäne, [b3ce01ee86f55ed8e9d24f079a6a857b],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-1.job, In Quarantäne, [d7aa5d926417b97dcadb2e419f6548b8],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-11.job, In Quarantäne, [d7aa58972e4de650fbaacca30ff53fc1],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-2.job, In Quarantäne, [166ba7483d3e4aec9c0974fbef1519e7],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-4.job, In Quarantäne, [bdc433bcc2b926105b4abfb06b99cf31],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-5.job, In Quarantäne, [374a0de2f78457df762f9ad552b2f60a],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-5_user.job, In Quarantäne, [dea3529deb9050e6465f0867b54fc23e],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-6.job, In Quarantäne, [631ed916dc9f34026441343b11f3ad53],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3b3d435e-37a5-4518-8a78-9d63de706c8d-7.job, In Quarantäne, [5031dc131d5e1125bfe670ff7e86728e],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-1.job, In Quarantäne, [4e330ee14c2f78bea8fdfa75f311718f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-11.job, In Quarantäne, [730eb43bf78490a651542e41eb1912ee],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-2.job, In Quarantäne, [88f968873f3c79bdfbaa1e518d77619f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-3.job, In Quarantäne, [87fadf108cefab8b782d8be41aead52b],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-4.job, In Quarantäne, [245d42ad80fb9b9be0c5bfb0af551ae6],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-5.job, In Quarantäne, [6819826d73086fc7fea7511e7c8809f7],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-5_user.job, In Quarantäne, [3e43e90680fb2610cbdae18e72922dd3],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-6.job, In Quarantäne, [720f29c67efd50e63570bab50004e719],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\fa62ca28-7e59-46fc-8a53-8b821cc30946-7.job, In Quarantäne, [3d449f500b70a98d0a9bb3bc3bc9c937],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome.manifest, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\install.rdf, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\index.html, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\quick_start.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\include\tools\about_blank_ho ok.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\include\tools\popup_image_he lper.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\include\tools\urlrequestor.j s, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\js.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery.autocomplete.j s, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\module\mostgrid.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\icon.png, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\loading.gif, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\logo.png, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\newtab.ico, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\simple.css, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\chrome\skin\style.css, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\addonmanager.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\aes.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\config.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\dialogs.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\last_tab.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\misc.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\properties.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\remoterequest.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\restoreprefs.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.FastStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\extensions\faststartff@gmail.com\modules\settings.js, In Quarantäne, [0180935c4e2d39fd685a628a3ec43bc5],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\GoogleCrashHandler.exe, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\GoogleUpdate.exe, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\GoogleUpdateBroker.exe, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\GoogleUpdateHelper.msi, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\GoogleUpdateOnDemand.exe, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\goopdate.dll, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\goopdateres_en.dll, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\npGoogleUpdate4.dll, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\psmachine.dll, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.361848\psuser.dll, In Quarantäne, [522f05eae69581b5a74d37b86f93ce32],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\GoogleCrashHandler.exe, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\GoogleUpdate.exe, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\GoogleUpdateBroker.exe, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\GoogleUpdateHelper.msi, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\GoogleUpdateOnDemand.exe, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\goopdate.dll, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\goopdateres_en.dll, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\npGoogleUpdate4.dll, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\psmachine.dll, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.GlobalUpdate.A, C:\Users\Bianca\AppData\Local\Temp\comh.473806\psuser.dll, In Quarantäne, [2f52925d8eed51e5b341c82752b014ec],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, In Quarantäne, [225f6788de9d0b2bd74145b6ec16817f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici32.dll, In Quarantäne, [225f6788de9d0b2bd74145b6ec16817f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, In Quarantäne, [225f6788de9d0b2bd74145b6ec16817f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, In Quarantäne, [225f6788de9d0b2bd74145b6ec16817f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, In Quarantäne, [225f6788de9d0b2bd74145b6ec16817f],
PUP.Optional.QuickStart.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html")

, Ersetzt,[503144ab572467cf376dba7d17eef10f]
PUP.Optional.CrossRider.A, C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "149dec01fb5fe7415a003a6aec036b95")

, Ersetzt,[3948a54a0d6ec472fcea7ebae71e3bc5]

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)

(end)

2. Protokoll:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 25.11.2014
Suchlauf-Zeit: 12:38:58
Logdatei:
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.11.25.05
Rootkit Datenbank: v2014.11.22.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Bianca

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 368823
Verstrichene Zeit: 22 Min, 42 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, , [cc2d91ae5725e84e4e44c77663a0c53b],

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 2
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hp&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L),,[fdfc19267705a393bb1980d6a85ddd23]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-3245239941-1007233972-3716969042-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hp&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hp&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L),,[35c44bf4c7b52610db6860e964a1b749]

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 2
PUP.Optional.CrossRider.A, C:\Users\Bianca\AppData\Local\Temp\awh694F.tmp, , [b049e45b730974c2ac034992d92807f9],
PUP.Optional.MyStartSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mystartsearch.xml, , [ea0f74cb9be14de9088818256e953ac6],

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)

(end)

Bin jeder Hilfe dankbar!!!

schrauber · 25.11.2014, 12:06

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Bibibrownie · 25.11.2014, 17:24

1.
FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2014 01
Ran by Bianca (administrator) on BIANCA-PC on 25-11-2014 13:37:07
Running from C:\Users\Bianca\Downloads
Loaded Profiles: UpdatusUser & Bianca (Available profiles: UpdatusUser & Bianca)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] => C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-10] (UPEK Inc.)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-04-18] (cyberlink)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [YTDownloader] => /boot
HKLM\...\RunOnce: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-10-01] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [BlazeServoTool] => C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe [286720 2010-03-06] (BlazeVideo Company)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [YTDownloader] => /boot
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\MountPoints2: {68af602c-4c87-11e2-b01b-806e6f6e6963} - E:\Autorun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [239720 2011-06-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [200808 2011-06-12] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Audible Download Manager.lnk
ShortcutTarget: Audible Download Manager.lnk -> C:\Program Files (x86)\Audible\Bin\AudibleDownloadHelper.exe (Audible, Inc.)
Startup: C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [UEAFOverlay] -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe mystartsearch
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: iWebar -> {11111111-1111-1111-1111-110611511123} -> C:\Program Files (x86)\iWebar\iWebar-bho64.dll No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO-x32: iWebar -> {11111111-1111-1111-1111-110611511123} -> C:\Program Files (x86)\iWebar\iWebar-bho.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 78.96.7.88 95.77.94.88

FireFox:
========
FF ProfilePath: C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @citrixonline.com/appdetectorplugin -> C:\Users\Bianca\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Bianca\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\abs@avira.com [2014-11-21]
FF Extension: FoxyProxy Standard - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\foxyproxy@eric.h.jung [2014-09-08]
FF Extension: FireShot - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-11-11]
FF Extension: ProxTube - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ich@maltegoetz.de.xpi [2014-09-12]
FF Extension: Tea Timer - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ttimer@addons.mozilla.org.xpi [2013-09-24]
FF Extension: NoScript - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-09-24]
FF Extension: Adblock Plus - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-24]
FF Extension: QuickJava - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-09-29]

Chrome: 
=======
CHR Profile: C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-16]
CHR Extension: (Google Drive) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-27]
CHR Extension: (YouTube) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-16]
CHR Extension: (Google-Suche) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-16]
CHR Extension: (Avira Browser Safety) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-16]
CHR Extension: (Google Wallet) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-16]
CHR Extension: (Google Mail) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-04-18] (CyberLink)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S1 acedrv07; C:\Windows\system32\drivers\acedrv07.sys [125440 2014-07-25] () [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 fspad_wlh64; C:\Windows\system32\drivers\fspad_wlh64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 fspad_xp64; C:\Windows\system32\drivers\fspad_xp64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164736 2012-12-31] (ITE                      )
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-25] (Malwarebytes Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S2 SPDRIVER_1.37.0.1413; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1413\jsdrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-25 13:37 - 2014-11-25 13:37 - 00019718 _____ () C:\Users\Bianca\Downloads\FRST.txt
2014-11-25 13:36 - 2014-11-25 13:37 - 00000000 ____D () C:\FRST
2014-11-25 13:36 - 2014-11-25 13:36 - 02118144 _____ (Farbar) C:\Users\Bianca\Downloads\FRST64.exe
2014-11-24 00:58 - 2014-11-24 00:58 - 00003158 _____ () C:\Windows\System32\Tasks\{0939E6A5-44F4-4695-B08E-5CF7198C1ACB}
2014-11-24 00:54 - 2014-11-24 00:54 - 00271512 _____ () C:\Windows\Minidump\112414-31106-01.dmp
2014-11-24 00:49 - 2014-11-24 00:49 - 00262144 _____ () C:\Windows\Minidump\112414-36223-01.dmp
2014-11-24 00:35 - 2014-11-25 13:04 - 00074426 _____ () C:\Windows\PFRO.log
2014-11-24 00:35 - 2014-11-24 00:54 - 426902672 _____ () C:\Windows\MEMORY.DMP
2014-11-24 00:35 - 2014-11-24 00:54 - 00000000 ____D () C:\Windows\Minidump
2014-11-24 00:35 - 2014-11-24 00:35 - 00262144 _____ () C:\Windows\Minidump\112414-49935-01.dmp
2014-11-24 00:22 - 2014-11-25 13:05 - 00001342 _____ () C:\Windows\Tasks\SALOZB.job
2014-11-24 00:22 - 2014-11-24 00:22 - 00004372 _____ () C:\Windows\System32\Tasks\SALOZB
2014-11-24 00:21 - 2014-11-25 13:05 - 00001342 _____ () C:\Windows\Tasks\OJVHXW.job
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\577b89aa-8b53-4c0a-bbf1-550258fc77d9
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\45a2cf91-6499-4bbd-a461-df42dfc4c8c1
2014-11-24 00:21 - 2014-11-24 00:21 - 00004372 _____ () C:\Windows\System32\Tasks\OJVHXW
2014-11-24 00:21 - 2014-11-24 00:21 - 00000000 ____D () C:\Users\Bianca\AppData\Local\globalUpdate
2014-11-24 00:20 - 2014-11-24 00:20 - 00003726 _____ () C:\Windows\System32\Tasks\SMupdate1
2014-11-24 00:20 - 2014-11-24 00:20 - 00003586 _____ () C:\Windows\System32\Tasks\YTDownloader
2014-11-24 00:19 - 2014-11-24 00:19 - 00000000 ____D () C:\Users\Bianca\AppData\Local\CrashRpt
2014-11-19 14:01 - 2014-11-19 14:06 - 32891392 _____ () C:\Users\Bianca\Downloads\Lecture 5.ppt
2014-11-18 23:07 - 2014-11-11 05:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-18 23:07 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 17:54 - 2014-11-25 13:04 - 00001288 _____ () C:\Windows\setupact.log
2014-11-18 17:54 - 2014-11-18 17:54 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-18 12:16 - 2014-11-25 13:27 - 00440973 _____ () C:\Windows\WindowsUpdate.log
2014-11-18 11:42 - 2014-11-18 11:42 - 00000000 __SHD () C:\Users\Bianca\AppData\Local\EmieBrowserModeList
2014-11-12 03:46 - 2014-11-07 21:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 03:46 - 2014-11-07 21:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 03:46 - 2014-11-06 06:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 06:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 03:46 - 2014-11-06 06:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 03:46 - 2014-11-06 05:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 05:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 03:46 - 2014-11-06 05:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 05:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 03:46 - 2014-11-06 05:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 03:46 - 2014-11-06 05:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 05:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 04:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 04:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 04:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 03:46 - 2014-11-06 04:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 03:46 - 2014-11-06 04:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 03:46 - 2014-11-06 04:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 03:46 - 2014-11-06 04:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 03:46 - 2014-11-06 04:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 03:46 - 2014-11-06 03:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 03:46 - 2014-11-06 03:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 03:46 - 2014-11-06 03:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 03:46 - 2014-11-06 03:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 03:46 - 2014-10-14 04:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 03:46 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 03:46 - 2014-10-14 04:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 03:46 - 2014-10-14 04:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 03:46 - 2014-10-14 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 03:46 - 2014-10-14 03:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 03:46 - 2014-10-14 03:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 03:46 - 2014-10-14 03:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 03:46 - 2014-10-14 03:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 03:45 - 2014-10-03 04:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 03:45 - 2014-08-21 08:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 03:45 - 2014-08-21 08:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 03:45 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 03:45 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 03:44 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 03:44 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 03:44 - 2014-10-18 04:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 03:44 - 2014-10-18 03:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 03:44 - 2014-10-10 02:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 03:44 - 2014-09-19 11:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-10 17:24 - 2014-11-10 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-09 02:30 - 2014-11-09 02:30 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-09 02:30 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-09 02:29 - 2014-11-09 02:29 - 00000000 ____D () C:\Program Files\iPod
2014-11-06 13:51 - 2014-11-06 13:51 - 23032887 _____ () C:\Users\Bianca\Downloads\instrumentar de mana curs.key.zip
2014-11-03 23:12 - 2014-11-03 23:12 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Oracle
2014-11-03 23:11 - 2014-11-03 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-03 23:11 - 2014-11-03 23:10 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-03 23:10 - 2014-11-03 23:10 - 00000000 ____D () C:\Program Files (x86)\Java
2014-11-03 08:17 - 2014-11-03 08:17 - 00002124 _____ () C:\Users\Bianca\Desktop\Samsung Smart Switch - CHIP Downloader.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-25 13:13 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-25 13:13 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-25 13:12 - 2013-09-17 21:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-25 13:05 - 2012-12-22 15:40 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-25 13:04 - 2011-07-18 22:58 - 00000000 ____D () C:\Windows\da
2014-11-25 13:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-25 12:58 - 2012-12-22 15:40 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-25 12:50 - 2014-02-10 19:59 - 00000540 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002.job
2014-11-25 12:34 - 2014-08-25 10:04 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-25 12:29 - 2011-07-18 22:55 - 00000000 ____D () C:\Windows\es
2014-11-25 11:08 - 2012-12-22 21:59 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Skype
2014-11-25 10:36 - 2011-05-16 16:04 - 00656294 _____ () C:\Windows\system32\perfh007.dat
2014-11-25 10:36 - 2011-05-16 16:04 - 00130894 _____ () C:\Windows\system32\perfc007.dat
2014-11-25 10:36 - 2009-07-14 07:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-24 19:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-24 19:26 - 2014-02-02 23:35 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{592F5D89-18D6-46CB-AE76-F63655573261}
2014-11-24 15:26 - 2011-07-18 23:06 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-24 07:34 - 2014-08-25 10:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2014-08-25 10:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2013-06-08 19:23 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-24 01:01 - 2014-08-16 23:11 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 15:44 - 00001429 _____ () C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-24 01:01 - 2012-12-22 15:40 - 00002141 _____ () C:\Users\Public\Desktop\MEDIONplay.lnk
2014-11-23 18:18 - 2014-10-13 22:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-23 18:18 - 2012-12-22 21:59 - 00000000 ____D () C:\ProgramData\Skype
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files\Google
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-18 11:42 - 2012-12-22 15:47 - 00000000 ____D () C:\Users\Bianca\AppData\Local\Google
2014-11-18 11:42 - 2012-12-22 15:40 - 00000000 ____D () C:\ProgramData\Google
2014-11-18 11:41 - 2014-07-31 00:04 - 00000000 ____D () C:\Users\Bianca\Documents\Horse Life
2014-11-17 06:21 - 2014-02-10 19:59 - 00003574 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002
2014-11-14 19:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-11-14 11:53 - 2012-12-22 15:40 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 11:53 - 2012-12-22 15:40 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-13 16:12 - 2013-09-17 21:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-13 16:12 - 2012-12-22 18:20 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-13 16:12 - 2011-08-10 21:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-12 22:26 - 2009-07-14 06:45 - 00311768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 18:24 - 2013-07-15 00:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 08:12 - 2011-07-18 22:31 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-11 09:52 - 2012-12-22 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-09 02:29 - 2014-09-17 17:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-11-09 02:29 - 2012-12-22 17:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-09 02:17 - 2014-09-11 10:24 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-09 02:17 - 2014-08-14 14:29 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-09 02:17 - 2012-12-22 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-09 02:17 - 2012-12-22 17:26 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-06 14:04 - 2012-12-22 19:00 - 00000000 ____D () C:\Users\Bianca\Documents\Dental Medicine
2014-11-05 22:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-04 14:30 - 2010-11-21 05:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-03 23:11 - 2013-09-15 00:12 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-03 17:06 - 2014-02-03 13:31 - 00000000 ____D () C:\Users\Bianca\Documents\Business !
2014-11-03 00:27 - 2014-08-29 15:50 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Samsung

Some content of TEMP:
====================
C:\Users\Bianca\AppData\Local\Temp\avgnt.exe
C:\Users\Bianca\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Bianca\AppData\Local\Temp\tu17p84.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-17 02:52

==================== End Of Log ============================

--- --- ---

--- --- ---
2.FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2014 01
Ran by Bianca at 2014-11-25 13:37:56
Running from C:\Users\Bianca\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
B110 (x32 Version: 140.0.142.000 - Hewlett-Packard) Hidden
BlazeDTV 6.0 (HKLM-x32\...\BlazeDTV 6.0_is1) (Version:  - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.17 - Piriform)
Citrix Online Launcher (HKLM-x32\...\{AC7E7905-8C59-4806-A96D-30936A2B1FC5}) (Version: 1.0.168 - Citrix)
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.1327 - CyberLink Corp.)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5108.52 - CyberLink Corp.)
CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.3503 - CyberLink Corp.)
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.4125 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.55.4 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.7000.4 - Dolby Laboratories Inc)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.65 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GoToMeeting 7.0.3.1963 (HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\GoToMeeting) (Version: 7.0.3.1963 - CitrixOnline)
HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{014E482A-0C27-47E3-BA82-307E9DCA2F47}) (Version: 14.0 - HP)
HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel PROSet Wireless (x32 Version:  - ) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2418 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{821B4CA1-D404-4CCA-AEA4-C7D3F40841B1}) (Version: 1.0.0.0135 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{C7B40C35-85AE-4303-9EEA-1A1EA779664D}) (Version: 1.0.2.0518 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{3C41721F-AF0F-4086-AA1C-4C7F29076228}) (Version: 14.01.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Medion Home Cinema (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.3216 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
MetaTrader 4 (HKLM-x32\...\MetaTrader 4) (Version: 4.00 - MetaQuotes Software Corp.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (Version: 140.0.212.000 - Hewlett-Packard) Hidden
NVIDIA Graphics Driver 275.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 275.48 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.11.2678 - Electronic Arts, Inc.)
PC Inspector smart recovery (HKLM-x32\...\{C9A87D86-FDFD-418B-BF96-EF09320973B3}) (Version: 4.50 - )
PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0038 - Pegatron Corporation)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Protector Suite 2011 (HKLM\...\{BF30D9F5-23B6-4E1C-B580-C9CDBA2CD894}) (Version: 5.9.4.6894 - UPEK Inc.)
PS_AIO_07_B110_SW_Min (x32 Version: 140.0.142.000 - Hewlett-Packard) Hidden
QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6353 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.48 - Piriform)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.4.0 - Synaptics Incorporated)
Toolbox (x32 Version: 140.0.424.000 - Hewlett-Packard) Hidden
Tropico 4 1.00 (HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Tropico 4) (Version: 1.00 - Kalypso Media)
Unity Web Player (HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Zero Assumption Digital Image Recovery 1.2 (HKLM-x32\...\Zero Assumption Digital Image Recovery_is1) (Version:  - Zero Assumption Recovery Software)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\1350\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)

==================== Restore Points  =========================

19-11-2014 01:00:15 Windows Update
23-11-2014 22:27:41 Wiederherstellungsvorgang
23-11-2014 23:38:19 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2013-04-30 21:15 - 00000000 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {114F297A-E70C-4DF3-823E-26403C579967} - System32\Tasks\{80F5BDE3-626E-4BEE-8A54-A010E945F83C} => C:\Program Files (x86)\Xplosiv\Equestrian Challenge\EquestrianChallenge.exe
Task: {197B1AED-1208-4B1B-9B34-3054C3E2AC97} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {209DA5D4-E256-4132-AD82-9A7B966FF29F} - \SPBIW_UpdateTask_Time_333132343334353538382d415b343437414545785a5a6c No Task File <==== ATTENTION
Task: {254356B1-31B7-43F8-A710-147CEDC29BA4} - System32\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002 => C:\Program Files (x86)\Citrix\GoToMeeting\1963\g2mupdate.exe [2014-11-17] (Citrix Online, a division of Citrix Systems, Inc.)
Task: {2994A459-6B1C-49BD-A1AA-6873E8E5C1B8} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {3DD1E7F9-19A8-427C-954E-78C4578E13E1} - System32\Tasks\{DB485E2B-00FC-4029-91FA-CE15B807FEEA} => C:\Program Files (x86)\EA GAMES\Need for Speed Underground 2\speed2.exe
Task: {4A153332-F00E-441B-92D6-D964D13A7E69} - System32\Tasks\{4D17F4E9-8A12-4E47-9324-6763AB59824F} => C:\Program Files (x86)\Xplosiv\Equestrian Challenge\EquestrianChallenge.exe
Task: {5E0839DA-C44C-486F-8C10-F70E5FEBC5F4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-13] (Adobe Systems Incorporated)
Task: {61947A48-4D6E-4765-A2DA-F694372005F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {69237DE7-DA51-4F10-983B-8BAE55770E41} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe <==== ATTENTION
Task: {694BCD1D-C050-4312-A7C7-7E914C0AAA4E} - System32\Tasks\{A9075522-EBAF-4324-B778-2957307AE72F} => C:\Program Files (x86)\Xplosiv\Equestrian Challenge\EquestrianChallenge.exe
Task: {7DFA415A-AE6F-451B-A174-30B020CE727F} - \ShopperPro No Task File <==== ATTENTION
Task: {7E5EBCA4-D64D-4D0F-9A1D-A45560FB2CA6} - System32\Tasks\SMupdate1 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update1 <==== ATTENTION
Task: {90770F4B-0362-49AA-B42B-9A8FE1B1D5C5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {96BDC829-69D8-40CA-A163-DEF6B88CD586} - System32\Tasks\{D9420F17-8D17-4C17-BAF9-B40EA87B4CC5} => C:\Program Files (x86)\EA GAMES\Need for Speed Underground 2\speed2.exe
Task: {96D2FC31-CA14-4423-932E-D62E5514016D} - \ShopperProJSUpd No Task File <==== ATTENTION
Task: {9740CB90-8D56-4144-B116-DA2E9DC25770} - System32\Tasks\OJVHXW => C:\Users\Bianca\AppData\Roaming\OJVHXW.exe <==== ATTENTION
Task: {A3AB48B9-F6E8-4D31-8C66-64E117271D32} - System32\Tasks\{97119FE7-2418-41E8-8523-6C0247CD7696} => C:\Program Files (x86)\Xplosiv\Equestrian Challenge\EquestrianChallenge.exe
Task: {D78C2C93-EF2B-4E95-AF6A-F40A7B43B3AD} - System32\Tasks\{60B4D096-3908-47F6-958F-3205B663C5B3} => C:\Program Files (x86)\Xplosiv\Equestrian Challenge\EquestrianChallenge.exe
Task: {DA551C0C-715D-4EF7-8D13-5F2DB77C9901} - System32\Tasks\SALOZB => C:\Users\Bianca\AppData\Roaming\SALOZB.exe <==== ATTENTION
Task: {DE417A43-DB28-433F-8D5F-D924632C36D4} - System32\Tasks\{E803A6A8-A3A5-4ECF-86EA-24DDCCCF7679} => C:\Program Files (x86)\Xplosiv\Equestrian Challenge\EquestrianChallenge.exe
Task: {E213D0D8-1AF1-4E80-BB7F-D341BA3597CC} - \SPDriver No Task File <==== ATTENTION
Task: {E2E45C33-F9A4-4A85-8519-EB865303D6F3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-08-21] (Piriform Ltd)
Task: {EB30E578-4D3B-4679-A55F-464E3593DDB1} - System32\Tasks\{0B360738-14F6-4FE0-9B86-C15842F536A4} => C:\Program Files (x86)\Xplosiv\Equestrian Challenge\EquestrianChallenge.exe
Task: {FA7BCCDD-491A-455B-BBAF-86B76C85FDAE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002.job => C:\Program Files (x86)\Citrix\GoToMeeting\1963\g2mupdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\OJVHXW.job => C:\Users\Bianca\AppData\Roaming\OJVHXW.exe <==== ATTENTION
Task: C:\Windows\Tasks\SALOZB.job => C:\Users\Bianca\AppData\Roaming\SALOZB.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2011-08-31 00:31 - 2009-12-19 00:40 - 00104968 ____R () C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
2011-05-02 22:41 - 2011-05-02 22:41 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-08-31 00:31 - 2010-10-07 02:46 - 00159752 ____R () C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
2011-08-31 00:31 - 2011-07-09 01:50 - 00824328 ____R () C:\Program Files (x86)\PHotkey\PHotkey.exe
2011-08-31 00:31 - 2010-01-13 02:36 - 00117256 ____R () C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
2011-08-31 00:31 - 2010-01-13 02:36 - 00121864 ____R () C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
2011-08-31 00:31 - 2010-12-17 23:04 - 00449032 ____R () C:\Program Files (x86)\PHotkey\ATouch64.exe
2011-08-31 00:31 - 2010-12-27 23:14 - 00776200 _____ () C:\Program Files (x86)\PHotkey\PVDesktop.exe
2011-08-31 00:31 - 2011-04-12 23:32 - 00483336 _____ () C:\Program Files (x86)\PHotkey\PVDAgent.exe
2011-08-31 00:31 - 2011-07-13 22:56 - 03426312 _____ () C:\Program Files (x86)\PHotkey\POSD.exe
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-08-31 00:31 - 2009-12-19 00:36 - 00973432 ____R () C:\Program Files (x86)\PHotkey\acAuth.dll
2011-08-31 00:31 - 2009-12-19 00:41 - 00129544 ____R () C:\Program Files (x86)\PHotkey\GFNEX.dll
2011-10-11 14:46 - 2011-06-12 12:43 - 00004096 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2014-11-10 17:24 - 2014-11-10 17:24 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-10-16 02:41 - 2014-10-16 02:41 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2011-08-31 00:15 - 2010-11-06 08:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3245239941-1007233972-3716969042-500 - Administrator - Disabled)
Bianca (S-1-5-21-3245239941-1007233972-3716969042-1002 - Administrator - Enabled) => C:\Users\Bianca
Gast (S-1-5-21-3245239941-1007233972-3716969042-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3245239941-1007233972-3716969042-1004 - Limited - Enabled)
UpdatusUser (S-1-5-21-3245239941-1007233972-3716969042-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============

Name: SPDRIVER_1.37.0.1413
Description: SPDRIVER_1.37.0.1413
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: SPDRIVER_1.37.0.1413
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 19

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 18

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 17

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 16

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 15


System errors:
=============
Error: (11/25/2014 01:05:55 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (11/25/2014 01:05:06 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
acedrv07

Error: (11/25/2014 01:04:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SPDRIVER_1.37.0.1413" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (11/25/2014 00:30:45 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (11/25/2014 00:30:05 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
acedrv07

Error: (11/25/2014 00:29:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SPDRIVER_1.37.0.1413" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (11/25/2014 11:56:17 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (11/25/2014 11:56:06 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
acedrv07

Error: (11/25/2014 11:55:58 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (11/25/2014 11:55:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SPDRIVER_1.37.0.1413" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3


Microsoft Office Sessions:
=========================
Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 19

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 18

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 17

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 16

Error: (11/25/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 15


CodeIntegrity Errors:
===================================
  Date: 2014-11-25 13:04:28.402
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-25 13:04:28.371
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-25 12:29:19.118
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-25 12:29:19.087
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-25 11:54:54.070
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-25 11:54:54.039
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-25 11:51:44.980
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-25 11:51:44.948
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-24 19:22:46.948
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-24 19:22:46.917
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\acedrv07.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz
Percentage of memory in use: 34%
Total physical RAM: 6055.05 MB
Available physical RAM: 3970.47 MB
Total Pagefile: 12108.29 MB
Available Pagefile: 9633.58 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:414.66 GB) (Free:150.11 GB) NTFS
Drive d: (Recover) (Fixed) (Total:50 GB) (Free:28.87 GB) NTFS
Drive e: (Sims3) (CDROM) (Total:5.56 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=414.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

hatte das Zeichen übersehen

schrauber · 26.11.2014, 08:55

MBAM updaten, scannen, Funde löschen.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Bibibrownie · 26.11.2014, 15:44

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.102 - Bericht erstellt am 26/11/2014 um 16:21:45
# Aktualisiert 23/11/2014 von Xplode
# Database : 2014-11-26.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Bianca - BIANCA-PC
# Gestartet von : C:\Users\Bianca\Downloads\AdwCleaner_4.102.exe
# Option : Suchen

***** [ Dienste ] *****

Dienst Gefunden : globalUpdatem

***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\foxydeal.sqlite
Ordner Gefunden : C:\ProgramData\Partner
Ordner Gefunden : C:\Users\Bianca\AppData\Local\CrashRpt
Ordner Gefunden : C:\Users\Bianca\AppData\Local\globalUpdate

***** [ Tasks ] *****

Task Gefunden : ShopperPro
Task Gefunden : ShopperProJSUpd
Task Gefunden : SMupdate1
Task Gefunden : SPDriver
Task Gefunden : YTDownloader

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Daten Gefunden : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Object Browser
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\GlobalUpdate
Schlüssel Gefunden : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\GlobalUpdate
Schlüssel Gefunden : [x64] HKCU\Software\InstalledBrowserExtensions
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611511123}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622512223}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344284450}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644514423}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644514423}
Schlüssel Gefunden : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gefunden : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gefunden : HKLM\SOFTWARE\iWebar-nv
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611511123}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gefunden : HKLM\SOFTWARE\ShopperPro
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611511123}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622512223}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611511123}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\YTDownloader

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.1 (x86 de)

[q2qyj2e5.default] - Zeile gefunden : user_pref("extensions.quick_start.enable_search1", false);
[q2qyj2e5.default] - Zeile gefunden : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

-\\ Google Chrome v39.0.2171.65

[C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L&q={searchTerms}
[C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L&q={searchTerms}

*************************

AdwCleaner[R0].txt - [6905 octets] - [26/11/2014 16:21:45]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [6965 octets] ##########

[/CODE]
--- --- ---
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.102 - Bericht erstellt am 26/11/2014 um 16:25:47
# Aktualisiert 23/11/2014 von Xplode
# Database : 2014-11-26.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Bianca - BIANCA-PC
# Gestartet von : C:\Users\Bianca\Downloads\AdwCleaner_4.102.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : globalUpdatem

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Users\Bianca\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Bianca\AppData\Local\CrashRpt
Datei Gelöscht : C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\foxydeal.sqlite

***** [ Tasks ] *****

Task Gelöscht : ShopperPro
Task Gelöscht : ShopperProJSUpd
Task Gelöscht : SMupdate1
Task Gelöscht : SPDriver
Task Gelöscht : YTDownloader

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611511123}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622512223}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644514423}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344284450}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611511123}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611511123}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322282250}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622512223}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611511123}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Object Browser
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\iWebar-nv
Schlüssel Gelöscht : HKLM\SOFTWARE\ShopperPro
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\YTDownloader

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.1 (x86 de)

[q2qyj2e5.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[q2qyj2e5.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

-\\ Google Chrome v39.0.2171.65

[C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L&q={searchTerms}
[C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1416781321&from=amt&uid=ST9500325AS_5VEMJR5LXXXX5VEMJR5L&q={searchTerms}

*************************

AdwCleaner[R0].txt - [7109 octets] - [26/11/2014 16:21:45]
AdwCleaner[S0].txt - [6542 octets] - [26/11/2014 16:25:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6602 octets] ##########

--- --- ---
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.9 (11.15.2014:2)
OS: Windows 7 Home Premium x64
Ran by Bianca on 26.11.2014 at 16:32:55,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ytdownloader
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ytdownloader

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{05F18838-E72A-404D-BD53-EC58080CBA1A}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{132D4C5E-D38B-43D0-B4CF-77F35960AC8F}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{136E3035-249A-4822-B843-9C22242CC37A}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{36A55B90-7F09-4B9B-B03B-B45F7DF45F80}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{3A2437A3-6589-4C29-ABDB-5091A8FCCEEE}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{46776DCE-20BA-4F27-B113-3308071F2F8C}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{5F92364D-751B-4D3D-9CA9-CE26276FA64D}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{6A99A880-D665-462C-8ECA-EA48E072AFCF}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{7112EEB8-15B4-4406-9694-0F60AD8056EE}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{71CF64BC-E3C2-4E17-8769-D91000428FD2}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{94088950-2F66-4BF2-B3F6-E57349E2D442}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{977E2926-E3F8-4940-8F50-FBD7E42EECBC}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{9DFB733E-A580-46DA-BDB3-F83F1AA67CCF}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{A4A0FA79-CBE2-4D29-976E-140B7BCF2180}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{A8C54941-1DEA-472F-AE21-40E6F3BDAF97}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{B4675C52-CA0F-4473-9CF1-DF9E1360C9B3}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{CCB4A16C-C23E-49A8-BCFA-B5FB5E0CC956}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{CDEC5A38-D3E4-4B2C-A92F-15EA094E7306}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{DB689E1C-150A-45D4-97AD-F31AD5A57842}
Successfully deleted: [Empty Folder] C:\Users\Bianca\appdata\local\{E52E0942-F9DB-47F3-939D-156A9A961091}

~~~ FireFox

Emptied folder: C:\Users\Bianca\AppData\Roaming\mozilla\firefox\profiles\q2qyj2e5.default\minidumps [195 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.11.2014 at 16:36:00,83
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014
Ran by Bianca (administrator) on BIANCA-PC on 26-11-2014 16:41:32
Running from C:\Users\Bianca\Downloads
Loaded Profiles: UpdatusUser & Bianca (Available profiles: UpdatusUser & Bianca)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Farbar) C:\Users\Bianca\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] => C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-10] (UPEK Inc.)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-04-18] (cyberlink)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\RunOnce: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-10-01] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [BlazeServoTool] => C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe [286720 2010-03-06] (BlazeVideo Company)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[S0].txt [6730 2014-11-26] ()
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\MountPoints2: {68af602c-4c87-11e2-b01b-806e6f6e6963} - E:\Autorun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [239720 2011-06-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [200808 2011-06-12] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Audible Download Manager.lnk
ShortcutTarget: Audible Download Manager.lnk -> C:\Program Files (x86)\Audible\Bin\AudibleDownloadHelper.exe (Audible, Inc.)
Startup: C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [UEAFOverlay] -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 78.96.7.88 95.77.94.88

FireFox:
========
FF ProfilePath: C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @citrixonline.com/appdetectorplugin -> C:\Users\Bianca\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Bianca\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\abs@avira.com [2014-11-21]
FF Extension: FoxyProxy Standard - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\foxyproxy@eric.h.jung [2014-09-08]
FF Extension: FireShot - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-11-11]
FF Extension: ProxTube - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ich@maltegoetz.de.xpi [2014-09-12]
FF Extension: Tea Timer - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ttimer@addons.mozilla.org.xpi [2013-09-24]
FF Extension: NoScript - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-09-24]
FF Extension: Adblock Plus - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-24]
FF Extension: QuickJava - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-09-29]

Chrome: 
=======
CHR Profile: C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-16]
CHR Extension: (Google Drive) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-27]
CHR Extension: (YouTube) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-16]
CHR Extension: (Google-Suche) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-16]
CHR Extension: (Avira Browser Safety) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-16]
CHR Extension: (Google Wallet) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-16]
CHR Extension: (Google Mail) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-04-18] (CyberLink)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S1 acedrv07; C:\Windows\system32\drivers\acedrv07.sys [125440 2014-07-25] () [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 fspad_wlh64; C:\Windows\system32\drivers\fspad_wlh64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 fspad_xp64; C:\Windows\system32\drivers\fspad_xp64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164736 2012-12-31] (ITE                      )
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S2 SPDRIVER_1.37.0.1413; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1413\jsdrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-26 16:41 - 2014-11-26 16:41 - 02118144 _____ (Farbar) C:\Users\Bianca\Downloads\FRST64(1).exe
2014-11-26 16:36 - 2014-11-26 16:36 - 00003141 _____ () C:\Users\Bianca\Desktop\JRT.txt
2014-11-26 16:32 - 2014-11-26 16:32 - 01707532 _____ (Thisisu) C:\Users\Bianca\Downloads\JRT.exe
2014-11-26 16:32 - 2014-11-26 16:32 - 00000000 ____D () C:\Windows\ERUNT
2014-11-26 16:27 - 2014-11-26 16:27 - 00000318 _____ () C:\Windows\PFRO.log
2014-11-26 16:27 - 2014-11-26 16:27 - 00000056 _____ () C:\Windows\setupact.log
2014-11-26 16:27 - 2014-11-26 16:27 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-26 16:21 - 2014-11-26 16:25 - 00000000 ____D () C:\AdwCleaner
2014-11-26 16:20 - 2014-11-26 16:20 - 02148864 _____ () C:\Users\Bianca\Downloads\AdwCleaner_4.102.exe
2014-11-25 13:37 - 2014-11-26 16:41 - 00019315 _____ () C:\Users\Bianca\Downloads\FRST.txt
2014-11-25 13:37 - 2014-11-25 13:38 - 00034367 _____ () C:\Users\Bianca\Downloads\Addition.txt
2014-11-25 13:36 - 2014-11-26 16:41 - 00000000 ____D () C:\FRST
2014-11-25 13:36 - 2014-11-25 13:36 - 02118144 _____ (Farbar) C:\Users\Bianca\Downloads\FRST64.exe
2014-11-24 00:58 - 2014-11-24 00:58 - 00003158 _____ () C:\Windows\System32\Tasks\{0939E6A5-44F4-4695-B08E-5CF7198C1ACB}
2014-11-24 00:35 - 2014-11-25 21:46 - 00000000 ____D () C:\Windows\Minidump
2014-11-24 00:22 - 2014-11-26 16:28 - 00001342 _____ () C:\Windows\Tasks\SALOZB.job
2014-11-24 00:22 - 2014-11-24 00:22 - 00004372 _____ () C:\Windows\System32\Tasks\SALOZB
2014-11-24 00:21 - 2014-11-26 16:28 - 00001342 _____ () C:\Windows\Tasks\OJVHXW.job
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\577b89aa-8b53-4c0a-bbf1-550258fc77d9
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\45a2cf91-6499-4bbd-a461-df42dfc4c8c1
2014-11-24 00:21 - 2014-11-24 00:21 - 00004372 _____ () C:\Windows\System32\Tasks\OJVHXW
2014-11-19 14:01 - 2014-11-19 14:06 - 32891392 _____ () C:\Users\Bianca\Downloads\Lecture 5.ppt
2014-11-18 23:07 - 2014-11-11 05:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-18 23:07 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 12:16 - 2014-11-26 16:26 - 00569028 _____ () C:\Windows\WindowsUpdate.log
2014-11-18 11:42 - 2014-11-18 11:42 - 00000000 __SHD () C:\Users\Bianca\AppData\Local\EmieBrowserModeList
2014-11-12 03:46 - 2014-11-07 21:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 03:46 - 2014-11-07 21:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 03:46 - 2014-11-06 06:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 06:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 03:46 - 2014-11-06 06:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 03:46 - 2014-11-06 05:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 05:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 03:46 - 2014-11-06 05:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 05:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 03:46 - 2014-11-06 05:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 03:46 - 2014-11-06 05:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 05:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 04:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 04:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 04:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 03:46 - 2014-11-06 04:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 03:46 - 2014-11-06 04:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 03:46 - 2014-11-06 04:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 03:46 - 2014-11-06 04:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 03:46 - 2014-11-06 04:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 03:46 - 2014-11-06 03:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 03:46 - 2014-11-06 03:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 03:46 - 2014-11-06 03:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 03:46 - 2014-11-06 03:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 03:46 - 2014-10-14 04:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 03:46 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 03:46 - 2014-10-14 04:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 03:46 - 2014-10-14 04:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 03:46 - 2014-10-14 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 03:46 - 2014-10-14 03:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 03:46 - 2014-10-14 03:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 03:46 - 2014-10-14 03:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 03:46 - 2014-10-14 03:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 03:45 - 2014-10-03 04:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 03:45 - 2014-08-21 08:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 03:45 - 2014-08-21 08:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 03:45 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 03:45 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 03:44 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 03:44 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 03:44 - 2014-10-18 04:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 03:44 - 2014-10-18 03:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 03:44 - 2014-10-10 02:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 03:44 - 2014-09-19 11:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-10 17:24 - 2014-11-10 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-09 02:30 - 2014-11-09 02:30 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-09 02:30 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-09 02:29 - 2014-11-09 02:29 - 00000000 ____D () C:\Program Files\iPod
2014-11-06 13:51 - 2014-11-06 13:51 - 23032887 _____ () C:\Users\Bianca\Downloads\instrumentar de mana curs.key.zip
2014-11-03 23:12 - 2014-11-03 23:12 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Oracle
2014-11-03 23:11 - 2014-11-03 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-03 23:11 - 2014-11-03 23:10 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-03 23:10 - 2014-11-03 23:10 - 00000000 ____D () C:\Program Files (x86)\Java
2014-11-03 08:17 - 2014-11-03 08:17 - 00002124 _____ () C:\Users\Bianca\Desktop\Samsung Smart Switch - CHIP Downloader.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-26 16:35 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-26 16:35 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-26 16:28 - 2012-12-22 15:40 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-26 16:27 - 2013-09-17 21:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-26 16:27 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-26 16:12 - 2013-09-17 21:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 16:12 - 2012-12-22 18:20 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 16:12 - 2011-08-10 21:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 15:58 - 2012-12-22 15:40 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-26 15:54 - 2014-08-25 10:04 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-26 15:54 - 2011-05-16 16:04 - 00656294 _____ () C:\Windows\system32\perfh007.dat
2014-11-26 15:54 - 2011-05-16 16:04 - 00130894 _____ () C:\Windows\system32\perfc007.dat
2014-11-26 15:54 - 2009-07-14 07:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-26 15:50 - 2014-02-10 19:59 - 00000540 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002.job
2014-11-25 21:13 - 2014-02-02 23:35 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{592F5D89-18D6-46CB-AE76-F63655573261}
2014-11-25 13:04 - 2011-07-18 22:58 - 00000000 ____D () C:\Windows\da
2014-11-25 12:29 - 2011-07-18 22:55 - 00000000 ____D () C:\Windows\es
2014-11-25 11:08 - 2012-12-22 21:59 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Skype
2014-11-24 19:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-24 15:26 - 2011-07-18 23:06 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-24 07:34 - 2014-08-25 10:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2014-08-25 10:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2013-06-08 19:23 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-24 01:01 - 2014-08-16 23:11 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 15:44 - 00001429 _____ () C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-24 01:01 - 2012-12-22 15:40 - 00002141 _____ () C:\Users\Public\Desktop\MEDIONplay.lnk
2014-11-23 18:18 - 2014-10-13 22:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-23 18:18 - 2012-12-22 21:59 - 00000000 ____D () C:\ProgramData\Skype
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files\Google
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-18 11:42 - 2012-12-22 15:47 - 00000000 ____D () C:\Users\Bianca\AppData\Local\Google
2014-11-18 11:42 - 2012-12-22 15:40 - 00000000 ____D () C:\ProgramData\Google
2014-11-18 11:41 - 2014-07-31 00:04 - 00000000 ____D () C:\Users\Bianca\Documents\Horse Life
2014-11-17 06:21 - 2014-02-10 19:59 - 00003574 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002
2014-11-14 19:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-11-14 11:53 - 2012-12-22 15:40 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 11:53 - 2012-12-22 15:40 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-12 22:26 - 2009-07-14 06:45 - 00311768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 18:24 - 2013-07-15 00:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 08:12 - 2011-07-18 22:31 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-11 09:52 - 2012-12-22 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-09 02:29 - 2014-09-17 17:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-11-09 02:29 - 2012-12-22 17:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-09 02:17 - 2014-09-11 10:24 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-09 02:17 - 2014-08-14 14:29 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-09 02:17 - 2012-12-22 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-09 02:17 - 2012-12-22 17:26 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-06 14:04 - 2012-12-22 19:00 - 00000000 ____D () C:\Users\Bianca\Documents\Dental Medicine
2014-11-05 22:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-04 14:30 - 2010-11-21 05:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-03 23:11 - 2013-09-15 00:12 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-03 17:06 - 2014-02-03 13:31 - 00000000 ____D () C:\Users\Bianca\Documents\Business !
2014-11-03 00:27 - 2014-08-29 15:50 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Samsung

Some content of TEMP:
====================
C:\Users\Bianca\AppData\Local\Temp\Quarantine.exe
C:\Users\Bianca\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-25 14:15

==================== End Of Log ============================

--- --- ---

Danke!

schrauber · 27.11.2014, 08:49

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Bibibrownie · 27.11.2014, 17:06

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=81812324bb435242896388554994e3dc
# engine=21290
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-27 11:31:34
# local_time=2014-11-27 01:31:34 (+0200, Osteuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 7143 282511184 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 29090 168717744 0 0
# scanned=277584
# found=1
# cleaned=1
# scan_time=5310
sh=AA077387555F06C6154935FC22F6AD55E2AFD22E ft=1 fh=6269a9a0784c11b6 vn="Win32/DownWare.L evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Bianca\Downloads\wondershare-drfone-1025-full-license-key.exe"
ESETSmartInstaller@High as downloader log:
all ok

Results of screen317's Security Check version 0.99.90
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 71
Adobe Flash Player 15.0.0.239
Adobe Reader 10.1.12 Adobe Reader out of Date!
Mozilla Firefox (33.1)
Google Chrome (39.0.2171.65)
Google Chrome (39.0.2171.71)
Google Chrome (chrome.exe..)
Google Chrome (debug.log..)
Google Chrome (Dictionaries...)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avguard.exe
ESET ESET Online Scanner OnlineScannerApp.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by Bianca (administrator) on BIANCA-PC on 27-11-2014 14:04:17
Running from C:\Users\Bianca\Downloads
Loaded Profiles: UpdatusUser & Bianca (Available profiles: UpdatusUser & Bianca)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmprph.exe
(Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] => C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-10] (UPEK Inc.)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-04-18] (cyberlink)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\RunOnce: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-10-01] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [BlazeServoTool] => C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe [286720 2010-03-06] (BlazeVideo Company)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[S0].txt [6730 2014-11-26] ()
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\MountPoints2: {68af602c-4c87-11e2-b01b-806e6f6e6963} - E:\Autorun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [239720 2011-06-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [200808 2011-06-12] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Audible Download Manager.lnk
ShortcutTarget: Audible Download Manager.lnk -> C:\Program Files (x86)\Audible\Bin\AudibleDownloadHelper.exe (Audible, Inc.)
Startup: C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [UEAFOverlay] -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 78.96.7.88 95.77.94.88

FireFox:
========
FF ProfilePath: C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @citrixonline.com/appdetectorplugin -> C:\Users\Bianca\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Bianca\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\abs@avira.com [2014-11-21]
FF Extension: FoxyProxy Standard - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\foxyproxy@eric.h.jung [2014-09-08]
FF Extension: FireShot - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-11-11]
FF Extension: ProxTube - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ich@maltegoetz.de.xpi [2014-09-12]
FF Extension: Tea Timer - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ttimer@addons.mozilla.org.xpi [2013-09-24]
FF Extension: NoScript - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-09-24]
FF Extension: Adblock Plus - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-24]
FF Extension: QuickJava - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-09-29]

Chrome: 
=======
CHR Profile: C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-16]
CHR Extension: (Google Drive) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-27]
CHR Extension: (YouTube) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-16]
CHR Extension: (Google-Suche) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-16]
CHR Extension: (Avira Browser Safety) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-16]
CHR Extension: (Google Wallet) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-16]
CHR Extension: (Google Mail) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-04-18] (CyberLink)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S1 acedrv07; C:\Windows\system32\drivers\acedrv07.sys [125440 2014-07-25] () [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 fspad_wlh64; C:\Windows\system32\drivers\fspad_wlh64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 fspad_xp64; C:\Windows\system32\drivers\fspad_xp64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164736 2012-12-31] (ITE                      )
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S2 SPDRIVER_1.37.0.1413; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1413\jsdrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 14:04 - 2014-11-27 14:04 - 00000000 ____D () C:\Users\Bianca\Downloads\FRST-OlderVersion
2014-11-27 12:06 - 2014-11-27 12:06 - 00854414 _____ () C:\Users\Bianca\Desktop\SecurityCheck.exe
2014-11-27 11:54 - 2014-11-27 11:54 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-11-27 11:51 - 2014-11-27 11:54 - 02347384 _____ (ESET) C:\Users\Bianca\Downloads\esetsmartinstaller_deu.exe
2014-11-26 16:36 - 2014-11-26 16:36 - 00003141 _____ () C:\Users\Bianca\Desktop\JRT.txt
2014-11-26 16:32 - 2014-11-26 16:32 - 01707532 _____ (Thisisu) C:\Users\Bianca\Downloads\JRT.exe
2014-11-26 16:32 - 2014-11-26 16:32 - 00000000 ____D () C:\Windows\ERUNT
2014-11-26 16:27 - 2014-11-26 22:39 - 00000224 _____ () C:\Windows\setupact.log
2014-11-26 16:27 - 2014-11-26 16:27 - 00000318 _____ () C:\Windows\PFRO.log
2014-11-26 16:27 - 2014-11-26 16:27 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-26 16:21 - 2014-11-26 16:25 - 00000000 ____D () C:\AdwCleaner
2014-11-26 16:20 - 2014-11-26 16:20 - 02148864 _____ () C:\Users\Bianca\Downloads\AdwCleaner_4.102.exe
2014-11-25 13:37 - 2014-11-27 14:04 - 00019453 _____ () C:\Users\Bianca\Downloads\FRST.txt
2014-11-25 13:37 - 2014-11-25 13:38 - 00034367 _____ () C:\Users\Bianca\Downloads\Addition.txt
2014-11-25 13:36 - 2014-11-27 14:04 - 02117632 _____ (Farbar) C:\Users\Bianca\Downloads\FRST64.exe
2014-11-25 13:36 - 2014-11-27 14:04 - 00000000 ____D () C:\FRST
2014-11-24 00:58 - 2014-11-24 00:58 - 00003158 _____ () C:\Windows\System32\Tasks\{0939E6A5-44F4-4695-B08E-5CF7198C1ACB}
2014-11-24 00:35 - 2014-11-25 21:46 - 00000000 ____D () C:\Windows\Minidump
2014-11-24 00:22 - 2014-11-27 12:04 - 00001342 _____ () C:\Windows\Tasks\SALOZB.job
2014-11-24 00:22 - 2014-11-24 00:22 - 00004372 _____ () C:\Windows\System32\Tasks\SALOZB
2014-11-24 00:21 - 2014-11-27 11:32 - 00001342 _____ () C:\Windows\Tasks\OJVHXW.job
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\577b89aa-8b53-4c0a-bbf1-550258fc77d9
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\45a2cf91-6499-4bbd-a461-df42dfc4c8c1
2014-11-24 00:21 - 2014-11-24 00:21 - 00004372 _____ () C:\Windows\System32\Tasks\OJVHXW
2014-11-19 14:01 - 2014-11-19 14:06 - 32891392 _____ () C:\Users\Bianca\Downloads\Lecture 5.ppt
2014-11-18 23:07 - 2014-11-11 05:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-18 23:07 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 12:16 - 2014-11-27 12:34 - 00603072 _____ () C:\Windows\WindowsUpdate.log
2014-11-18 11:42 - 2014-11-18 11:42 - 00000000 __SHD () C:\Users\Bianca\AppData\Local\EmieBrowserModeList
2014-11-12 03:46 - 2014-11-07 21:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 03:46 - 2014-11-07 21:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 03:46 - 2014-11-06 06:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 06:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 03:46 - 2014-11-06 06:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 03:46 - 2014-11-06 05:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 05:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 03:46 - 2014-11-06 05:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 05:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 03:46 - 2014-11-06 05:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 03:46 - 2014-11-06 05:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 05:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 04:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 04:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 04:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 03:46 - 2014-11-06 04:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 03:46 - 2014-11-06 04:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 03:46 - 2014-11-06 04:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 03:46 - 2014-11-06 04:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 03:46 - 2014-11-06 04:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 03:46 - 2014-11-06 03:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 03:46 - 2014-11-06 03:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 03:46 - 2014-11-06 03:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 03:46 - 2014-11-06 03:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 03:46 - 2014-10-14 04:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 03:46 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 03:46 - 2014-10-14 04:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 03:46 - 2014-10-14 04:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 03:46 - 2014-10-14 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 03:46 - 2014-10-14 03:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 03:46 - 2014-10-14 03:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 03:46 - 2014-10-14 03:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 03:46 - 2014-10-14 03:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 03:45 - 2014-10-03 04:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 03:45 - 2014-08-21 08:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 03:45 - 2014-08-21 08:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 03:45 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 03:45 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 03:44 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 03:44 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 03:44 - 2014-10-18 04:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 03:44 - 2014-10-18 03:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 03:44 - 2014-10-10 02:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 03:44 - 2014-09-19 11:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-10 17:24 - 2014-11-10 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-09 02:30 - 2014-11-09 02:30 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-09 02:30 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-09 02:29 - 2014-11-09 02:29 - 00000000 ____D () C:\Program Files\iPod
2014-11-06 13:51 - 2014-11-06 13:51 - 23032887 _____ () C:\Users\Bianca\Downloads\instrumentar de mana curs.key.zip
2014-11-03 23:12 - 2014-11-03 23:12 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Oracle
2014-11-03 23:11 - 2014-11-03 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-03 23:11 - 2014-11-03 23:10 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-03 23:10 - 2014-11-03 23:10 - 00000000 ____D () C:\Program Files (x86)\Java
2014-11-03 08:17 - 2014-11-03 08:17 - 00002124 _____ () C:\Users\Bianca\Desktop\Samsung Smart Switch - CHIP Downloader.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 13:58 - 2012-12-22 15:40 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-27 13:50 - 2014-02-10 19:59 - 00000540 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002.job
2014-11-27 13:12 - 2013-09-17 21:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-27 11:58 - 2012-12-22 15:40 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-26 23:08 - 2014-08-16 23:11 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-26 22:48 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-26 22:48 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-26 22:39 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-26 22:09 - 2011-05-16 16:04 - 00656294 _____ () C:\Windows\system32\perfh007.dat
2014-11-26 22:09 - 2011-05-16 16:04 - 00130894 _____ () C:\Windows\system32\perfc007.dat
2014-11-26 22:09 - 2009-07-14 07:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-26 22:06 - 2014-02-02 23:35 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{592F5D89-18D6-46CB-AE76-F63655573261}
2014-11-26 16:12 - 2013-09-17 21:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 16:12 - 2012-12-22 18:20 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 16:12 - 2011-08-10 21:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 15:54 - 2014-08-25 10:04 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-25 13:04 - 2011-07-18 22:58 - 00000000 ____D () C:\Windows\da
2014-11-25 12:29 - 2011-07-18 22:55 - 00000000 ____D () C:\Windows\es
2014-11-25 11:08 - 2012-12-22 21:59 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Skype
2014-11-24 19:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-24 15:26 - 2011-07-18 23:06 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-24 07:34 - 2014-08-25 10:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2014-08-25 10:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2013-06-08 19:23 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 15:44 - 00001429 _____ () C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-24 01:01 - 2012-12-22 15:40 - 00002141 _____ () C:\Users\Public\Desktop\MEDIONplay.lnk
2014-11-23 18:18 - 2014-10-13 22:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-23 18:18 - 2012-12-22 21:59 - 00000000 ____D () C:\ProgramData\Skype
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files\Google
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-18 11:42 - 2012-12-22 15:47 - 00000000 ____D () C:\Users\Bianca\AppData\Local\Google
2014-11-18 11:42 - 2012-12-22 15:40 - 00000000 ____D () C:\ProgramData\Google
2014-11-18 11:41 - 2014-07-31 00:04 - 00000000 ____D () C:\Users\Bianca\Documents\Horse Life
2014-11-17 06:21 - 2014-02-10 19:59 - 00003574 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002
2014-11-14 19:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-11-14 11:53 - 2012-12-22 15:40 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 11:53 - 2012-12-22 15:40 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-12 22:26 - 2009-07-14 06:45 - 00311768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 18:24 - 2013-07-15 00:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 08:12 - 2011-07-18 22:31 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-11 09:52 - 2012-12-22 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-09 02:29 - 2014-09-17 17:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-11-09 02:29 - 2012-12-22 17:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-09 02:17 - 2014-09-11 10:24 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-09 02:17 - 2014-08-14 14:29 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-09 02:17 - 2012-12-22 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-09 02:17 - 2012-12-22 17:26 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-06 14:04 - 2012-12-22 19:00 - 00000000 ____D () C:\Users\Bianca\Documents\Dental Medicine
2014-11-05 22:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-04 14:30 - 2010-11-21 05:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-03 23:11 - 2013-09-15 00:12 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-03 17:06 - 2014-02-03 13:31 - 00000000 ____D () C:\Users\Bianca\Documents\Business !
2014-11-03 00:27 - 2014-08-29 15:50 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Samsung

Some content of TEMP:
====================
C:\Users\Bianca\AppData\Local\Temp\Quarantine.exe
C:\Users\Bianca\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-25 14:15

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Leider nach Neustart des Pc immer noch keine Startleiste und Symbole vorhanden, sowie die Run DLL Fehlermeldung:
Problem beim Starten von C:\PROGRA~1\COMMON~1\System\SysMenu.dll
Das angegebene Modul wurde nicht gefunden.

Habe gerade gemerkt, dass ich die Einstellungen vergessen habe! Also nochmal von vorne:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=81812324bb435242896388554994e3dc
# engine=21290
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-27 11:31:34
# local_time=2014-11-27 01:31:34 (+0200, Osteuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 7143 282511184 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 29090 168717744 0 0
# scanned=277584
# found=1
# cleaned=1
# scan_time=5310
sh=AA077387555F06C6154935FC22F6AD55E2AFD22E ft=1 fh=6269a9a0784c11b6 vn="Win32/DownWare.L evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Bianca\Downloads\wondershare-drfone-1025-full-license-key.exe"
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.Can not read file from internet.ESETSmartInstaller@High as downloader log:
Can not read file from internet.# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=81812324bb435242896388554994e3dc
# engine=21293
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-27 02:58:04
# local_time=2014-11-27 04:58:04 (+0200, Osteuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 19533 282523574 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 41480 168730134 0 0
# scanned=277864
# found=2
# cleaned=0
# scan_time=8435
sh=DDD7E789E67132CF6C5D8169B2F46E3498FCA60F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Bianca\AppData\Roaming\OJVHXW"
sh=9413821E4285C46DAF48156B472065FC2D763FE8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Bianca\AppData\Roaming\SALOZB"

Results of screen317's Security Check version 0.99.90
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 71
Adobe Flash Player 15.0.0.239
Adobe Reader 10.1.12 Adobe Reader out of Date!
Mozilla Firefox (33.1)
Google Chrome (39.0.2171.65)
Google Chrome (39.0.2171.71)
Google Chrome (chrome.exe..)
Google Chrome (debug.log..)
Google Chrome (Dictionaries...)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by Bianca (administrator) on BIANCA-PC on 27-11-2014 18:05:16
Running from C:\Users\Bianca\Downloads
Loaded Profiles: UpdatusUser & Bianca (Available profiles: UpdatusUser & Bianca)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Farbar) C:\Users\Bianca\Downloads\FRST64(1).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11817576 2011-04-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2209896 2011-04-18] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] => C:\Program Files\Protector Suite\launcher.exe [84816 2010-12-10] (UPEK Inc.)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-01-22] (Synaptics Incorporated)
HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-04-18] (cyberlink)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\RunOnce: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-10-01] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [BlazeServoTool] => C:\Program Files (x86)\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe [286720 2010-03-06] (BlazeVideo Company)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[S0].txt [6730 2014-11-26] ()
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\...\MountPoints2: {68af602c-4c87-11e2-b01b-806e6f6e6963} - E:\Autorun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [239720 2011-06-12] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [200808 2011-06-12] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Audible Download Manager.lnk
ShortcutTarget: Audible Download Manager.lnk -> C:\Program Files (x86)\Audible\Bin\AudibleDownloadHelper.exe (Audible, Inc.)
Startup: C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [UEAFOverlay] -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3245239941-1007233972-3716969042-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3245239941-1007233972-3716969042-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 78.96.7.88 95.77.94.88

FireFox:
========
FF ProfilePath: C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @citrixonline.com/appdetectorplugin -> C:\Users\Bianca\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKU\S-1-5-21-3245239941-1007233972-3716969042-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Bianca\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\abs@avira.com [2014-11-21]
FF Extension: FoxyProxy Standard - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\foxyproxy@eric.h.jung [2014-09-08]
FF Extension: FireShot - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-11-11]
FF Extension: ProxTube - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ich@maltegoetz.de.xpi [2014-09-12]
FF Extension: Tea Timer - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\ttimer@addons.mozilla.org.xpi [2013-09-24]
FF Extension: NoScript - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-09-24]
FF Extension: Adblock Plus - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-24]
FF Extension: QuickJava - C:\Users\Bianca\AppData\Roaming\Mozilla\Firefox\Profiles\q2qyj2e5.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2013-09-29]

Chrome: 
=======
CHR Profile: C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-16]
CHR Extension: (Google Drive) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-27]
CHR Extension: (YouTube) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-16]
CHR Extension: (Google-Suche) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-16]
CHR Extension: (Avira Browser Safety) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-16]
CHR Extension: (Google Wallet) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-16]
CHR Extension: (Google Mail) - C:\Users\Bianca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-06] (Avira Operations GmbH & Co. KG)
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-04-18] (CyberLink)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-10-07] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S1 acedrv07; C:\Windows\system32\drivers\acedrv07.sys [125440 2014-07-25] () [File not signed]
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 fspad_wlh64; C:\Windows\system32\drivers\fspad_wlh64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 fspad_xp64; C:\Windows\system32\drivers\fspad_xp64.sys [68608 2010-11-08] (Sentelic Corporation) [File not signed]
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164736 2012-12-31] (ITE                      )
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S2 SPDRIVER_1.37.0.1413; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1413\jsdrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 18:04 - 2014-11-27 18:05 - 02117632 _____ (Farbar) C:\Users\Bianca\Downloads\FRST64(1).exe
2014-11-27 14:04 - 2014-11-27 14:04 - 00000000 ____D () C:\Users\Bianca\Downloads\FRST-OlderVersion
2014-11-27 12:06 - 2014-11-27 12:06 - 00854414 _____ () C:\Users\Bianca\Desktop\SecurityCheck.exe
2014-11-27 11:51 - 2014-11-27 11:54 - 02347384 _____ (ESET) C:\Users\Bianca\Downloads\esetsmartinstaller_deu.exe
2014-11-26 16:36 - 2014-11-26 16:36 - 00003141 _____ () C:\Users\Bianca\Desktop\JRT.txt
2014-11-26 16:32 - 2014-11-26 16:32 - 01707532 _____ (Thisisu) C:\Users\Bianca\Downloads\JRT.exe
2014-11-26 16:32 - 2014-11-26 16:32 - 00000000 ____D () C:\Windows\ERUNT
2014-11-26 16:27 - 2014-11-27 17:58 - 00000336 _____ () C:\Windows\setupact.log
2014-11-26 16:27 - 2014-11-27 17:57 - 00001160 _____ () C:\Windows\PFRO.log
2014-11-26 16:27 - 2014-11-26 16:27 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-26 16:21 - 2014-11-26 16:25 - 00000000 ____D () C:\AdwCleaner
2014-11-26 16:20 - 2014-11-26 16:20 - 02148864 _____ () C:\Users\Bianca\Downloads\AdwCleaner_4.102.exe
2014-11-25 13:37 - 2014-11-27 18:05 - 00019092 _____ () C:\Users\Bianca\Downloads\FRST.txt
2014-11-25 13:37 - 2014-11-25 13:38 - 00034367 _____ () C:\Users\Bianca\Downloads\Addition.txt
2014-11-25 13:36 - 2014-11-27 18:05 - 00000000 ____D () C:\FRST
2014-11-25 13:36 - 2014-11-27 14:04 - 02117632 _____ (Farbar) C:\Users\Bianca\Downloads\FRST64.exe
2014-11-24 00:58 - 2014-11-24 00:58 - 00003158 _____ () C:\Windows\System32\Tasks\{0939E6A5-44F4-4695-B08E-5CF7198C1ACB}
2014-11-24 00:35 - 2014-11-25 21:46 - 00000000 ____D () C:\Windows\Minidump
2014-11-24 00:22 - 2014-11-27 17:58 - 00001342 _____ () C:\Windows\Tasks\SALOZB.job
2014-11-24 00:22 - 2014-11-24 00:22 - 00004372 _____ () C:\Windows\System32\Tasks\SALOZB
2014-11-24 00:21 - 2014-11-27 17:58 - 00001342 _____ () C:\Windows\Tasks\OJVHXW.job
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\577b89aa-8b53-4c0a-bbf1-550258fc77d9
2014-11-24 00:21 - 2014-11-24 15:26 - 00000000 ____D () C:\Program Files (x86)\45a2cf91-6499-4bbd-a461-df42dfc4c8c1
2014-11-24 00:21 - 2014-11-24 00:21 - 00004372 _____ () C:\Windows\System32\Tasks\OJVHXW
2014-11-19 14:01 - 2014-11-19 14:06 - 32891392 _____ () C:\Users\Bianca\Downloads\Lecture 5.ppt
2014-11-18 23:07 - 2014-11-11 05:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-18 23:07 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-18 23:07 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 12:16 - 2014-11-27 15:50 - 00610173 _____ () C:\Windows\WindowsUpdate.log
2014-11-18 11:42 - 2014-11-18 11:42 - 00000000 __SHD () C:\Users\Bianca\AppData\Local\EmieBrowserModeList
2014-11-12 03:46 - 2014-11-07 21:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 03:46 - 2014-11-07 21:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 03:46 - 2014-11-06 06:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 06:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 03:46 - 2014-11-06 06:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 03:46 - 2014-11-06 05:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 05:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 03:46 - 2014-11-06 05:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 03:46 - 2014-11-06 05:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 03:46 - 2014-11-06 05:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 03:46 - 2014-11-06 05:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 03:46 - 2014-11-06 05:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 03:46 - 2014-11-06 05:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 03:46 - 2014-11-06 05:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 03:46 - 2014-11-06 05:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 05:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 03:46 - 2014-11-06 05:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 03:46 - 2014-11-06 05:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 03:46 - 2014-11-06 05:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 03:46 - 2014-11-06 05:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 03:46 - 2014-11-06 04:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 03:46 - 2014-11-06 04:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 03:46 - 2014-11-06 04:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 03:46 - 2014-11-06 04:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 03:46 - 2014-11-06 04:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 03:46 - 2014-11-06 04:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 03:46 - 2014-11-06 04:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 03:46 - 2014-11-06 04:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 03:46 - 2014-11-06 04:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 03:46 - 2014-11-06 04:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 03:46 - 2014-11-06 04:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 03:46 - 2014-11-06 04:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 03:46 - 2014-11-06 04:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 03:46 - 2014-11-06 03:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 03:46 - 2014-11-06 03:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 03:46 - 2014-11-06 03:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 03:46 - 2014-11-06 03:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 03:46 - 2014-10-14 04:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 03:46 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 03:46 - 2014-10-14 04:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 03:46 - 2014-10-14 04:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 03:46 - 2014-10-14 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 03:46 - 2014-10-14 03:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 03:46 - 2014-10-14 03:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 03:46 - 2014-10-14 03:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 03:46 - 2014-10-14 03:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 03:45 - 2014-10-03 04:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 03:45 - 2014-10-03 04:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 03:45 - 2014-10-03 03:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 03:45 - 2014-08-21 08:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 03:45 - 2014-08-21 08:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 03:45 - 2014-08-21 08:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 03:45 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 03:45 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 03:44 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 03:44 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 03:44 - 2014-10-18 04:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 03:44 - 2014-10-18 03:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 03:44 - 2014-10-10 02:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 03:44 - 2014-09-19 11:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 03:44 - 2014-09-19 11:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-10 17:24 - 2014-11-10 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-09 02:30 - 2014-11-09 02:30 - 00001787 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-09 02:30 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files\iTunes
2014-11-09 02:29 - 2014-11-09 02:30 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-09 02:29 - 2014-11-09 02:29 - 00000000 ____D () C:\Program Files\iPod
2014-11-06 13:51 - 2014-11-06 13:51 - 23032887 _____ () C:\Users\Bianca\Downloads\instrumentar de mana curs.key.zip
2014-11-03 23:12 - 2014-11-03 23:12 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Oracle
2014-11-03 23:11 - 2014-11-03 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-03 23:11 - 2014-11-03 23:10 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-11-03 23:11 - 2014-11-03 23:10 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-11-03 23:10 - 2014-11-03 23:10 - 00000000 ____D () C:\Program Files (x86)\Java
2014-11-03 08:17 - 2014-11-03 08:17 - 00002124 _____ () C:\Users\Bianca\Desktop\Samsung Smart Switch - CHIP Downloader.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 17:59 - 2012-12-22 15:40 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-27 17:58 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-27 17:50 - 2014-02-10 19:59 - 00000540 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002.job
2014-11-27 17:12 - 2013-09-17 21:19 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-27 16:59 - 2012-12-22 15:40 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-27 14:17 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-27 14:17 - 2009-07-14 06:45 - 00017152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-26 23:08 - 2014-08-16 23:11 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-26 22:09 - 2011-05-16 16:04 - 00656294 _____ () C:\Windows\system32\perfh007.dat
2014-11-26 22:09 - 2011-05-16 16:04 - 00130894 _____ () C:\Windows\system32\perfc007.dat
2014-11-26 22:09 - 2009-07-14 07:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-26 22:06 - 2014-02-02 23:35 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{592F5D89-18D6-46CB-AE76-F63655573261}
2014-11-26 16:12 - 2013-09-17 21:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 16:12 - 2012-12-22 18:20 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 16:12 - 2011-08-10 21:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 15:54 - 2014-08-25 10:04 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-25 13:04 - 2011-07-18 22:58 - 00000000 ____D () C:\Windows\da
2014-11-25 12:29 - 2011-07-18 22:55 - 00000000 ____D () C:\Windows\es
2014-11-25 11:08 - 2012-12-22 21:59 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Skype
2014-11-24 19:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-24 15:26 - 2011-07-18 23:06 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-24 07:34 - 2014-08-25 10:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2014-08-25 10:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-24 01:50 - 2013-06-08 19:23 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 17:13 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-24 01:01 - 2012-12-22 15:44 - 00001429 _____ () C:\Users\Bianca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-24 01:01 - 2012-12-22 15:40 - 00002141 _____ () C:\Users\Public\Desktop\MEDIONplay.lnk
2014-11-23 18:18 - 2014-10-13 22:53 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-23 18:18 - 2012-12-22 21:59 - 00000000 ____D () C:\ProgramData\Skype
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files\Google
2014-11-18 12:10 - 2012-12-22 15:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-18 11:42 - 2012-12-22 15:47 - 00000000 ____D () C:\Users\Bianca\AppData\Local\Google
2014-11-18 11:42 - 2012-12-22 15:40 - 00000000 ____D () C:\ProgramData\Google
2014-11-18 11:41 - 2014-07-31 00:04 - 00000000 ____D () C:\Users\Bianca\Documents\Horse Life
2014-11-17 06:21 - 2014-02-10 19:59 - 00003574 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3245239941-1007233972-3716969042-1002
2014-11-14 19:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-11-14 11:53 - 2012-12-22 15:40 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 11:53 - 2012-12-22 15:40 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-12 22:26 - 2009-07-14 06:45 - 00311768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 18:24 - 2013-07-15 00:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 08:12 - 2011-07-18 22:31 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-11 09:52 - 2012-12-22 17:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-09 02:29 - 2014-09-17 17:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-11-09 02:29 - 2012-12-22 17:37 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-09 02:17 - 2014-09-11 10:24 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-11-09 02:17 - 2014-08-14 14:29 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-09 02:17 - 2012-12-22 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-09 02:17 - 2012-12-22 17:26 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-06 14:04 - 2012-12-22 19:00 - 00000000 ____D () C:\Users\Bianca\Documents\Dental Medicine
2014-11-05 22:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-04 14:30 - 2010-11-21 05:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-03 23:11 - 2013-09-15 00:12 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-03 17:06 - 2014-02-03 13:31 - 00000000 ____D () C:\Users\Bianca\Documents\Business !
2014-11-03 00:27 - 2014-08-29 15:50 - 00000000 ____D () C:\Users\Bianca\AppData\Roaming\Samsung

Some content of TEMP:
====================
C:\Users\Bianca\AppData\Local\Temp\Quarantine.exe
C:\Users\Bianca\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-25 14:15

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 28.11.2014, 13:13

Zitat:

C:\Users\Bianca\Downloads\wondershare-drfone-1025-full-license-key.exe

Was isn das für ein Mist?

Bibibrownie · 30.11.2014, 23:50

Hallo, das weiß ich leider nicht, da der Pc nicht nur von mir genutzt wird. Hat das was mit dem Virus zu tun, bzw gibt es eine Lösung zu meinem Problem oder muss ich den ganzen Pc neu aufsetzen lassen?

Danke!

schrauber · 01.12.2014, 20:50

Eigentlich würde ich dich ja gerne formatieren schicken bei so Crack-Kram.....

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Users\Bianca\AppData\Roaming\OJVHXW
C:\Users\Bianca\AppData\Roaming\SALOZB
ShellIconOverlayIdentifiers: [UEAFOverlay] -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
C:\Program Files\Protector Suite
Tcpip\Parameters: [DhcpNameServer] 78.96.7.88 95.77.94.88
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Alle Passwörter und Zugänge ändern. Frisches FRST log bitte.

Bibibrownie · 04.12.2014, 19:46

Hallo,
Windows Taste geht leider nicht, kann auch nichts auf dem Desktop machen, kann ich das auch über den Explorer öffnen?

LG

schrauber · 05.12.2014, 16:56

windows-Taste geht nicht? Du sollst WIndows Taste und Taste R gleichzeitig drücken, das muss gehen.

Ansonsten im Explorere Rechtsklick nen neues Textokument öffnen.

Bibibrownie · 06.12.2014, 11:19

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01
Ran by Bianca at 2014-12-06 12:12:28 Run:1
Running from C:\Users\Bianca\Desktop
Loaded Profiles: UpdatusUser & Bianca (Available profiles: UpdatusUser & Bianca)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Bianca\AppData\Roaming\OJVHXW
C:\Users\Bianca\AppData\Roaming\SALOZB
ShellIconOverlayIdentifiers: [UEAFOverlay] -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
ShellIconOverlayIdentifiers: [UEAFOverlayOpen] -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (UPEK Inc.)
C:\Program Files\Protector Suite
Tcpip\Parameters: [DhcpNameServer] 78.96.7.88 95.77.94.88
Emptytemp:
         
*****************

C:\Users\Bianca\AppData\Roaming\OJVHXW => Moved successfully.
C:\Users\Bianca\AppData\Roaming\SALOZB => Moved successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\UEAFOverlay" => Key deleted successfully.
"HKCR\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}" => Key deleted successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\UEAFOverlayOpen" => Key deleted successfully.
"HKCR\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}" => Key deleted successfully.

"C:\Program Files\Protector Suite" directory move:

C:\Program Files\Protector Suite\aalaunch.dll => Moved successfully.
C:\Program Files\Protector Suite\aewallet.dll => Moved successfully.
C:\Program Files\Protector Suite\applaun.dll => Moved successfully.
C:\Program Files\Protector Suite\apwdbank.dll => Moved successfully.
C:\Program Files\Protector Suite\asafe.dll => Moved successfully.
C:\Program Files\Protector Suite\aspwdgen.dll => Moved successfully.
C:\Program Files\Protector Suite\autoreg.dat => Moved successfully.
C:\Program Files\Protector Suite\AxInterop.WMPLib.dll => Moved successfully.
C:\Program Files\Protector Suite\bio.dll => Moved successfully.
C:\Program Files\Protector Suite\bpwb.dll => Moved successfully.
C:\Program Files\Protector Suite\ctlcntrv.exe => Moved successfully.
C:\Program Files\Protector Suite\ctlcntrv.exe.config => Moved successfully.
C:\Program Files\Protector Suite\desktop.ini => Moved successfully.
C:\Program Files\Protector Suite\ewapplet.dll => Moved successfully.
C:\Program Files\Protector Suite\farchns.dll => Moved successfully.
C:\Program Files\Protector Suite\fsdelev.dll => Moved successfully.
C:\Program Files\Protector Suite\fselev.exe => Moved successfully.
C:\Program Files\Protector Suite\homefus2.dll => Moved successfully.
C:\Program Files\Protector Suite\homepass.dll => Moved successfully.
C:\Program Files\Protector Suite\hwpanel.xml => Moved successfully.
C:\Program Files\Protector Suite\infql2.dll => Moved successfully.
C:\Program Files\Protector Suite\Interop.IWshRuntimeLibrary.dll => Moved successfully.
C:\Program Files\Protector Suite\Interop.WMPLib.dll => Moved successfully.
C:\Program Files\Protector Suite\IntroWnd.exe => Moved successfully.
C:\Program Files\Protector Suite\launcher.exe => Moved successfully.
C:\Program Files\Protector Suite\mplaylib.dll => Moved successfully.
C:\Program Files\Protector Suite\OpenSSL-License.txt => Moved successfully.
C:\Program Files\Protector Suite\pbclr.dll => Moved successfully.
C:\Program Files\Protector Suite\PbDnSup.dll => Moved successfully.
C:\Program Files\Protector Suite\pbregv.exe => Moved successfully.
C:\Program Files\Protector Suite\pbregv.exe.config => Moved successfully.
C:\Program Files\Protector Suite\pgloader.exe => Moved successfully.
C:\Program Files\Protector Suite\pgloader.exe.config => Moved successfully.
C:\Program Files\Protector Suite\policies.xml => Moved successfully.
C:\Program Files\Protector Suite\provider.dll => Moved successfully.
C:\Program Files\Protector Suite\psqlpwd.dll => Moved successfully.
C:\Program Files\Protector Suite\psqltray.dll => Moved successfully.
C:\Program Files\Protector Suite\psqltray.exe => Moved successfully.
C:\Program Files\Protector Suite\psver.dll => Moved successfully.
C:\Program Files\Protector Suite\pwdbank.dll => Moved successfully.
C:\Program Files\Protector Suite\qlbase.dll => Moved successfully.
C:\Program Files\Protector Suite\qlclr.dll => Moved successfully.
C:\Program Files\Protector Suite\qlclrsrv.dll => Moved successfully.
C:\Program Files\Protector Suite\spgappl.dll => Moved successfully.
C:\Program Files\Protector Suite\startmui.exe => Moved successfully.
C:\Program Files\Protector Suite\templates.xml => Moved successfully.
C:\Program Files\Protector Suite\upeksvr.exe => Moved successfully.
C:\Program Files\Protector Suite\upektut.exe => Moved successfully.
C:\Program Files\Protector Suite\upektut.exe.config => Moved successfully.
C:\Program Files\Protector Suite\upekTutImages.dll => Moved successfully.
C:\Program Files\Protector Suite\vtapipql.dll => Moved successfully.
C:\Program Files\Protector Suite\vti.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hant\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\zh-Hans\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\tr\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\back.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\backm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfcancdn.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfcancup.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfcaptb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfcaptc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfcapts.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfcnhd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bffail.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bffast.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bflift.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bflook.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfprogb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfput.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfshort.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfskew.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfsucc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfswipe.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfwait.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bfwhat.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bio.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\biobot.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bioleft.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bioleftb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\biomenu.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\biorighb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bioright.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\biotop.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\biotop1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\biotop2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\biox.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\bulb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cadevil.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\caencrpt.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\caewolet.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\caflsafe.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\calaunch.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\caperssf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cappbio.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cappcc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\capphib.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\capplock.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\capplogf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cappstm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cappweb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\capwdbam.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\capwdban.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\capwdbas.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\casectog.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\casectoi.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\casectok.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\casectom.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\chabout.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\chelp.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\chelpm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\chtour.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\chtutor.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cidelet.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cident.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cienrolf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ciexpo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ciimpex.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ciimpo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ciipass.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cimultif.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cistat.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ciwinpas.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cpower.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csatpm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csbiomod.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csettina.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csetting.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csimpexa.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cslogon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csscrol.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cssecmod.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cssencal.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csslskin.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cssound.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csstrins.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cstrgen.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cstrgenl.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\cstrgenm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\csupd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ctaplaun.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\curaim.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\curaim2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\curout.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\curstd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D0.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D3.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D4.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D5.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D6.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D7.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D8.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\D9.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\Dialog.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ewaccon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ewcard.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ewidcard.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ewpers.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ewpins.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\ewwebs.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F0.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F3.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F4.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F5.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F6.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F7.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F8.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\F9.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\Folder.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\folder.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\hands.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\IntrBack.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\IntrSens.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\IntrWnd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\name.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\pesavelo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\pesaveun.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\preview.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\pwdte.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\pwdtp.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\pwdtx.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\rsadev.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\sedisk.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\sensor.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\skin.dll => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\spgicon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\splash.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\splash.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutarr1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutarr2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutfin1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutfin2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutno.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutsen1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutsen2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutsen3.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutsen4.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\tutyes.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\wait.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\warn.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\Red_Skin\Web.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\back.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\backm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfcancdn.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfcancup.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfcaptb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfcaptc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfcapts.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfcnhd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bffail.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bffast.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bflift.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bflook.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfprogb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfput.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfshort.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfskew.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfsucc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfswipe.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfwait.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bfwhat.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bio.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\biobot.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bioleft.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bioleftb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\biomenu.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\biorighb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bioright.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\biotop.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\biotop1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\biotop2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\biox.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\bulb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cadevil.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\caencrpt.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\caewolet.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\caflsafe.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\calaunch.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\caperssf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cappbio.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cappcc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\capphib.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\capplock.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\capplogf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cappstm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cappweb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\capwdbam.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\capwdban.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\capwdbas.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\casectog.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\casectoi.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\casectok.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\casectom.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\chabout.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\chelp.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\chelpm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\chtour.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\chtutor.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cidelet.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cident.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cienrolf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ciexpo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ciimpex.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ciimpo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ciipass.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cimultif.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cistat.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ciwinpas.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cpower.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csatpm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csbiomod.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csettina.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csetting.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csimpexa.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cslogon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csscrol.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cssecmod.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cssencal.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csslskin.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cssound.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csstrins.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cstrgen.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cstrgenl.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\cstrgenm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\csupd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ctaplaun.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\curaim.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\curaim2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\curout.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\curstd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\Dialog.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ewaccon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ewcard.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ewidcard.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ewpers.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ewpins.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\ewwebs.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\Folder.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\folder.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\hands.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\IntrBack.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\IntrSens.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\IntrWnd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\pesavelo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\pesaveun.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\preview.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\print.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\pwdte.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\pwdtp.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\pwdtx.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\rsadev.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\sedisk.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\sensor.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\sensorx.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\smallh.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\spgicon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\splash.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\splash.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutarr1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutarr2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutfin1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutfin2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutno.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutsen1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutsen2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutsen3.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutsen4.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\tutyes.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\wait.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\warn.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\generic\Web.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\back.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\backm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfcancdn.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfcancup.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfcaptb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfcaptc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfcapts.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfcnhd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bffail.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bffast.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bflift.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bflook.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfprogb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfput.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfshort.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfskew.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfsucc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfswipe.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfwait.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bfwhat.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bio.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\biobot.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bioleft.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bioleftb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\biomenu.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\biorighb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bioright.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\biotop.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\biotop1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\biotop2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\biox.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\bulb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cadevil.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\caencrpt.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\caewolet.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\caflsafe.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\calaunch.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\caperssf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cappbio.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cappcc.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\capphib.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\capplock.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\capplogf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cappstm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cappweb.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\capwdbam.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\capwdban.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\capwdbas.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\casectog.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\casectoi.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\casectok.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\casectom.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\chabout.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\chelp.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\chelpm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\chtour.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\chtutor.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cidelet.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cident.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cienrolf.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ciexpo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ciimpex.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ciimpo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ciipass.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cimultif.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cistat.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ciwinpas.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cpower.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csatpm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csbiomod.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csettina.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csetting.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csimpexa.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cslogon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csscrol.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cssecmod.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cssencal.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csslskin.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cssound.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csstrins.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cstrgen.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cstrgenl.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\cstrgenm.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\csupd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ctaplaun.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\curaim.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\curaim2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\curout.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\curstd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\Dialog.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ewaccon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ewcard.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ewidcard.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ewpers.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ewpins.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\ewwebs.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\Folder.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\folder.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\hands.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\IntrBack.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\IntrSens.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\IntrWnd.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\name.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\pesavelo.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\pesaveun.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\preview.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\print.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\pwdte.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\pwdtp.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\pwdtx.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\rsadev.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\sedisk.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\sensor.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\skin.dll => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\spgicon.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\splash.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\splash.xml => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutarr1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutarr2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutfin1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutfin2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutno.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutsen1.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutsen2.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutsen3.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutsen4.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\tutyes.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\wait.png => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\warn.ico => Moved successfully.
C:\Program Files\Protector Suite\Themes\Black_Skin\Web.ico => Moved successfully.
C:\Program Files\Protector Suite\sv\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\sv\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ru\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\rsc\appico.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin.xml => Moved successfully.
C:\Program Files\Protector Suite\rsc\desktop.ini => Moved successfully.
C:\Program Files\Protector Suite\rsc\far-ico2.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\far-lck2.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\far-locked.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\far-menu-alpha.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\far-menu.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\far-ulc2.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\FingSt02.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\FingSt04.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic.xml => Moved successfully.
C:\Program Files\Protector Suite\rsc\Hands.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\image2.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\info.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\logonhdr.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\lswipe1.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\match.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\noMatch.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\pbback.jpg => Moved successfully.
C:\Program Files\Protector Suite\rsc\pbstyle.css => Moved successfully.
C:\Program Files\Protector Suite\rsc\pwdbank.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin.xml => Moved successfully.
C:\Program Files\Protector Suite\rsc\swipe.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\title.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\tut.xml => Moved successfully.
C:\Program Files\Protector Suite\rsc\ViLogFp2.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\ViLogFpr.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\ViLogMsg.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\ViLogPwd.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\vtp.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\vts.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\warn.ico => Moved successfully.
C:\Program Files\Protector Suite\rsc\wizardhd.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\wizardlb.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\BtnDown.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\BtnHot.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\BtnUp.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\ClsDown.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\ClsHot.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\ClsUp.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\MainBkg.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\SepBtn.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\SubBkg.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\red_skin\SubMark.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\BtnDown.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\BtnHot.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\BtnUp.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\ClsDown.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\ClsHot.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\ClsUp.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\MainBkg.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\SepBtn.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\SubBkg.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\generic\SubMark.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\BtnDown.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\BtnHot.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\BtnUp.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\ClsDown.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\ClsHot.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\ClsUp.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\MainBkg.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\SepBtn.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\SubBkg.png => Moved successfully.
C:\Program Files\Protector Suite\rsc\black_skin\SubMark.png => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt-PT\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\pt\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\no\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\nl\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\lng\splash.xml => Moved successfully.
C:\Program Files\Protector Suite\lng\0c0a\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0c0a\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0c0a\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0816\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0816\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0816\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0804\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0804\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0804\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\041f\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\041f\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\041f\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\041d\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\041d\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\041d\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0419\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0419\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0419\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0416\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0416\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0416\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0414\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0414\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0414\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0413\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0413\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0413\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0412\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0412\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0412\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0411\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0411\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0411\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0410\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0410\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0410\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\040c\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\040c\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\040c\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\040b\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\040b\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\040b\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0409\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0409\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0409\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0408\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0408\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0408\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0407\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0407\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0407\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0406\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0406\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0406\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\lng\0404\ExtInst.html => Moved successfully.
C:\Program Files\Protector Suite\lng\0404\license.rtf => Moved successfully.
C:\Program Files\Protector Suite\lng\0404\pshomev.chm => Moved successfully.
C:\Program Files\Protector Suite\ko\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ko\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\ja\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\it\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fr\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\enroll.exe => Moved successfully.
C:\Program Files\Protector Suite\FMA\enroll.exe.config => Moved successfully.
C:\Program Files\Protector Suite\FMA\enrollRsc.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\zh-Hant\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\zh-Hans\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\tr\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\sv\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\ru\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\pt-PT\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\pt\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\pl\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\no\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\nl\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\ko\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\ja\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\it\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\hu\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\fr\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\fi\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\es\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\en-US\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\el\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\de\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\da\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\FMA\cs\enroll.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\fi\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\es\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\en-US\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\el\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.exe => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.exe.config => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.cs => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.da => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.de => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.el => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.en-US => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.es => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.fi => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.fr => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.hu => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.it => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.ja => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.ko => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.nl => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.no => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.pl => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.pt => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.pt-PT => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.ru => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.sv => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.tr => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.zh-Hans => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enroll.resources.dll.zh-Hant => Moved successfully.
C:\Program Files\Protector Suite\Drivers\enrollRsc.dll => Moved successfully.
C:\Program Files\Protector Suite\Drivers\tccoinst.dll => Moved successfully.
C:\Program Files\Protector Suite\Drivers\tcwbf.dll => Moved successfully.
C:\Program Files\Protector Suite\Drivers\tcwbfadv.cat => Moved successfully.
C:\Program Files\Protector Suite\Drivers\tcwbfadv.inf => Moved successfully.
C:\Program Files\Protector Suite\Drivers\upkbu.dll => Moved successfully.
C:\Program Files\Protector Suite\Drivers\WdfCoInstaller01009.dll => Moved successfully.
C:\Program Files\Protector Suite\Drivers\WinUSBCoInstaller2.dll => Moved successfully.
C:\Program Files\Protector Suite\Drivers\WUDFUpdate_01009.dll => Moved successfully.
C:\Program Files\Protector Suite\de\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\de\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\aalaunch.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\aewallet.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\apwdbank.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\asafe.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\aspwdgen.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\ctlcntrv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\IntroWnd.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\pbregv.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\pgloader.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\da\UpekTut.resources.dll => Moved successfully.
C:\Program Files\Protector Suite\browser\pbff1.0.xpi => Moved successfully.
C:\Program Files\Protector Suite\browser\pbff1.5.xpi => Moved successfully.
C:\Program Files\Protector Suite\browser\pbff3.0.xpi => Moved successfully.
C:\Program Files\Protector Suite\browser\pbff3.5.xpi => Moved successfully.
C:\Program Files\Protector Suite\browser\pbff3.6.xpi => Moved successfully.
C:\Program Files\Protector Suite\browser\pwdbank.crx => Moved successfully.
Could not move "C:\Program Files\Protector Suite" directory. => Scheduled to move on reboot.

HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value deleted successfully.
EmptyTemp: => Removed 242.6 MB temporary data.

Nein, ging beides nicht, wie gesagt, Windows + R ging auch nicht. Habe jetzt durch ein altes Dokument ein neues geöffnet.

schrauber · 07.12.2014, 08:48

Seit wann geht das nicht? Frisches FRST Log bitte.

07.12.2014, 08:48	#14
schrauber /// the machine /// TB-Ausbilder	Windows Virus, Run DLL Error mit fehlenden Desktopsymbolen und Taskleiste Seit wann geht das nicht? Frisches FRST Log bitte. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows Virus, Run DLL Error mit fehlenden Desktopsymbolen und Taskleiste

Log-Analyse und Auswertung: Windows Virus, Run DLL Error mit fehlenden Desktopsymbolen und Taskleiste