Mein Internet ist aufeinmal sehr langsam geworden! Trojaner ?

oguzhan002 · 28.12.2014, 22:18

log.txt

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=c30f9807d80e994885198a50771616d9
# engine=21731
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-12-28 05:26:48
# local_time=2014-12-28 06:26:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 21424 8232148 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 7105695 171417458 0 0
# scanned=222620
# found=14
# cleaned=8
# scan_time=12576
sh=280619B09227A7BA83FE98166F6EC0EB1A7EE082 ft=1 fh=389893db5758227f vn="Win32/Somoto.G evtl. unerwünschte Anwendung" ac=I fn="C:\Users\OKUR\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O3CPLR3V\setup[1].exe"
sh=A400894D756987D290A965E11AFF8AEDB7B2078A ft=1 fh=df0423bb2df193c3 vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\lsynchost.exe"
sh=086B0267FA4B2E95F067FB7F031D75AE4A050C82 ft=1 fh=be140ef598aae020 vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\MpkHCA.dll"
sh=6DC4A9D671EC38B337BED19DE4215F2C67B831ED ft=1 fh=f62681805a3729ff vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\MpkHCQ12.dll"
sh=9FA5283DECEA183B01C3ECB19A072D62FB928ED2 ft=1 fh=52923aa7982a45d5 vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\MPKInst.exe"
sh=2847110D93F20265D5F721A584CB8A13DE032F86 ft=1 fh=467eed22b7b616db vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\unins000.exe"
sh=3FA075ACD6BB32C2FEAFE242F787F70EA0F2FF24 ft=1 fh=8a109499a14e2da6 vn="Variante von Win32/SoftPulse.S evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Abdullah.OKUR-PC\Downloads\Nicht bestätigt 878278.crdownload"
sh=C9458B94EC2B0FED795465612049AE1CC59EA274 ft=1 fh=59bca1873b4e9a83 vn="Variante von Win32/Toolbar.Conduit.K evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\DNZ\Desktop\DeniZiim____\wpsetup_4.52[1].exe"
sh=280619B09227A7BA83FE98166F6EC0EB1A7EE082 ft=1 fh=389893db5758227f vn="Win32/Somoto.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\OKUR\AppData\Local\Temp\nssC3A0.tmp"
sh=A400894D756987D290A965E11AFF8AEDB7B2078A ft=1 fh=df0423bb2df193c3 vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\lsynchost.exe"
sh=086B0267FA4B2E95F067FB7F031D75AE4A050C82 ft=1 fh=be140ef598aae020 vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\MpkHCA.dll"
sh=6DC4A9D671EC38B337BED19DE4215F2C67B831ED ft=1 fh=f62681805a3729ff vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\MpkHCQ12.dll"
sh=9FA5283DECEA183B01C3ECB19A072D62FB928ED2 ft=1 fh=52923aa7982a45d5 vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\MPKInst.exe"
sh=2847110D93F20265D5F721A584CB8A13DE032F86 ft=1 fh=467eed22b7b616db vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\unins000.exe"

FRST.txt

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-12-2014
Ran by OKUR (administrator) on OKUR-PC on 28-12-2014 19:41:30
Running from C:\Users\OKUR\Downloads
Loaded Profiles: OKUR &  (Available profiles: OKUR & DNZ & Abdullah & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
() C:\Windows\PLFSetI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_240.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_240.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\OKUR\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corp.) C:\Windows\System32\Defrag.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2014-01-06] ()
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-21] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1808168 2009-06-18] (Synaptics Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-11-21] (Malwarebytes Corporation)
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Facebook Update] => C:\Users\DNZ\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-03-27] (Facebook Inc.)
HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Facebook Update] => C:\Users\DNZ\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-03-27] (Facebook Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1651875045-3007675786-4229390803-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [S-1-5-21-1651875045-3007675786-4229390803-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-1651875045-3007675786-4229390803-1001] => http=127.0.0.1:49657;https=127.0.0.1:49657
ProxyEnable: [S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0] => http=127.0.0.1:49657;https=127.0.0.1:49657
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?rd=1&ucc=DE&dcc=DE&opt=0
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p07_serp_ie_de_display?ie=UTF8&tagbase=bds-p07&tag=bds-p07-serp-de-ie-21&tbrId=v1_abb-channel-7_70dbbef89e1c4a5ca36e8a545481bdaa_30_46_20140131_DE_ie_ds_IS0&query={searchTerms}
SearchScopes: HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p07_serp_ie_de_display?ie=UTF8&tagbase=bds-p07&tag=bds-p07-serp-de-ie-21&tbrId=v1_abb-channel-7_70dbbef89e1c4a5ca36e8a545481bdaa_30_46_20140131_DE_ie_ds_IS0&query={searchTerms}
BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} ->  No File
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default
FF NetworkProxy: "type", 5
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_240.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_240.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\OKUR\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\OKUR\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\DNZ\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\DNZ\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Extension: Avira Browser Safety - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\abs@avira.com [2014-12-12]
FF Extension: Hilfe Assistent - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\{} [2014-03-26]
FF Extension: Ghostery - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\firefox@ghostery.com.xpi [2014-09-24]
FF Extension: Adblock Plus - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-08]
FF Extension: DownThemAll! - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-10-07]

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "https://www.google.de/", "hxxp://www.facebook.com/Erzincaan1907", "hxxp://connect.koramgame.com/?act=login.facebook&u=102026&u2=facebook&ref=hxxp://game.demon.koramgame.com/?sid=s1"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-30]
CHR Extension: (AdBlock) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-16]
CHR Extension: (Dropbox) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-03-16]
CHR Extension: (Ghostery) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-09-24]
CHR Extension: (Google Wallet) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-06]
CHR Extension: (Click&Clean App) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2014-03-16]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-06-12] (CyberGhost S.R.L)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-20] (Electronic Arts)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-09-24] (Avira Operations GmbH & Co. KG)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-06-05] (Disc Soft Ltd)
R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [22016 2014-06-17] (G Data Software AG)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [129752 2014-12-28] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]
S3 visctap0901; C:\Windows\System32\DRIVERS\visctap0901.sys [39048 2014-06-06] (The OpenVPN Project)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\PC Monitor\PCMonitorSrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 19:01 - 2014-12-28 19:01 - 01156136 _____ (Ruiware) C:\Users\OKUR\Downloads\wpsetup.exe
2014-12-28 13:35 - 2014-12-28 14:49 - 00000000 ____D () C:\Program Files (x86)\Shark007
2014-12-28 13:34 - 2014-12-28 13:34 - 00003146 _____ () C:\Windows\System32\Tasks\Run_Bobby_Browser
2014-12-28 13:33 - 2014-12-28 15:03 - 00000000 ____D () C:\Program Files (x86)\WInterEnhance
2014-12-28 13:32 - 2014-12-28 14:48 - 00000000 ____D () C:\ProgramData\Standard
2014-12-28 00:46 - 2014-12-28 00:46 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Roaming\Avira
2014-12-28 00:42 - 2014-12-28 00:42 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Local\NVIDIA Corporation
2014-12-28 00:40 - 2014-12-28 00:40 - 00001456 _____ () C:\Users\Gast.OKUR-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-28 00:40 - 2014-12-28 00:40 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Roaming\Adobe
2014-12-28 00:40 - 2014-12-28 00:40 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Local\NVIDIA
2014-12-27 12:49 - 2014-12-28 17:58 - 00048824 _____ () C:\Windows\WindowsUpdate.log
2014-12-27 02:52 - 2014-12-27 02:52 - 00000000 ____D () C:\Users\OKUR\Downloads\FRST-OlderVersion
2014-12-27 02:21 - 2014-12-27 02:23 - 00852505 _____ () C:\Users\OKUR\Desktop\SecurityCheck.exe
2014-12-27 01:55 - 2014-12-27 01:55 - 02347384 _____ (ESET) C:\Users\OKUR\Downloads\esetsmartinstaller_deu.exe
2014-12-27 01:55 - 2014-12-27 01:55 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-26 00:47 - 2014-12-12 00:34 - 2161959019 _____ () C:\Users\OKUR\Desktop\The Equalizer 1080p BluRay.mkv
2014-12-25 21:04 - 2014-12-25 21:04 - 00001189 _____ () C:\Users\OKUR\Desktop\ööaöa.txt
2014-12-25 20:48 - 2014-12-25 20:48 - 00000624 _____ () C:\Users\OKUR\Desktop\JRT.txt
2014-12-25 20:22 - 2014-12-25 20:22 - 00001282 _____ () C:\Users\OKUR\Desktop\mbam.txt
2014-12-25 18:59 - 2014-12-13 16:25 - 4068425617 _____ () C:\Users\OKUR\Desktop\Lets be Cops - Die Party Bullen 1080p BluRay.mkv
2014-12-24 20:22 - 2014-12-24 20:29 - 16532986 _____ () C:\Users\OKUR\Downloads\DEMOLIERT.mp4
2014-12-24 19:37 - 2014-12-24 19:37 - 00027411 _____ () C:\ComboFix.txt
2014-12-24 18:49 - 2014-12-24 19:37 - 00000000 ____D () C:\ComboFix
2014-12-24 18:46 - 2014-12-24 18:44 - 05603465 ____R (Swearware) C:\Users\OKUR\Desktop\ComboFix.exe
2014-12-24 18:45 - 2014-12-24 19:37 - 00000000 ____D () C:\Qoobox
2014-12-24 18:45 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-24 18:45 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-24 18:45 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-24 18:44 - 2014-12-24 19:35 - 00000000 ____D () C:\Windows\erdnt
2014-12-24 18:43 - 2014-12-24 18:44 - 05603465 ____R (Swearware) C:\Users\OKUR\Downloads\ComboFix.exe
2014-12-24 18:37 - 2014-12-24 18:37 - 00001303 _____ () C:\Users\OKUR\Desktop\Revo Uninstaller.lnk
2014-12-24 18:37 - 2014-12-24 18:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-24 15:15 - 2014-12-24 15:15 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\OKUR\Downloads\revosetup95.exe
2014-12-24 13:19 - 2014-12-24 13:19 - 00190281 _____ () C:\Users\OKUR\Desktop\FIFAAAA.mp4
2014-12-23 13:37 - 2014-12-23 13:41 - 00029418 _____ () C:\Users\OKUR\Downloads\Addition.txt
2014-12-23 13:35 - 2014-12-28 19:41 - 00022221 _____ () C:\Users\OKUR\Downloads\FRST.txt
2014-12-23 13:35 - 2014-12-28 19:41 - 00000000 ____D () C:\FRST
2014-12-23 13:34 - 2014-12-27 02:52 - 02122752 _____ (Farbar) C:\Users\OKUR\Downloads\FRST64.exe
2014-12-23 01:54 - 2014-12-25 20:32 - 00000000 ____D () C:\AdwCleaner
2014-12-23 01:54 - 2014-12-23 01:54 - 00000000 ____D () C:\Windows\ERUNT
2014-12-23 01:51 - 2014-12-23 01:52 - 01707646 _____ (Thisisu) C:\Users\OKUR\Downloads\JRT.exe
2014-12-23 01:51 - 2014-12-23 01:51 - 02173952 _____ () C:\Users\OKUR\Desktop\AdwCleaner_4.106.exe
2014-12-22 01:46 - 2014-12-22 01:46 - 00138512 _____ () C:\Users\OKUR\Downloads\5b74bd9beada02b9884d.zipx
2014-12-22 01:33 - 2014-12-22 01:33 - 00138512 _____ () C:\Users\OKUR\Desktop\Herr der Ringe Die Schlacht um Mittelwerde 2 Trainer.zip
2014-12-22 01:07 - 2014-12-22 01:26 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien
2014-12-22 00:04 - 2014-12-22 00:04 - 00002271 _____ () C:\Users\Public\Desktop\Die Schlacht um Mittelerde(tm).lnk
2014-12-22 00:04 - 2014-12-22 00:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2014-12-21 23:51 - 2014-12-21 23:51 - 00000000 ____D () C:\Program Files (x86)\EA GAMES
2014-12-21 17:05 - 2014-12-21 22:37 - 00000000 ____D () C:\Users\OKUR\Downloads\Herr der Ringe Schlacht Um Mittelerde Anthology incl Patches+Cracks
2014-12-21 16:42 - 2014-12-22 16:46 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Meine Die Schlacht um Mittelerde™ II-Dateien
2014-12-21 16:39 - 2014-12-22 00:04 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-12-21 16:39 - 2014-12-21 16:39 - 00002330 _____ () C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2014-12-21 16:37 - 2014-12-21 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2014-12-21 16:26 - 2014-12-21 16:26 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-12-21 12:40 - 2014-12-21 12:40 - 00001956 _____ () C:\Users\OKUR\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk
2014-12-20 17:05 - 2014-12-21 12:40 - 00000000 ____D () C:\Program Files (x86)\The Elder Scrolls V Skyrim - Legendary Edition (Game of the Year)
2014-12-20 16:14 - 2014-12-20 16:37 - 50188227 _____ () C:\Users\OKUR\Downloads\DEER HUNTER 2014 v2.7.0 [Unlimited Money Unlocked].apk
2014-12-20 16:14 - 2014-12-20 16:36 - 50211725 _____ () C:\Users\OKUR\Downloads\BuluMonster181-APKLOVER.apk
2014-12-20 12:05 - 2014-12-20 12:05 - 00002080 _____ () C:\Users\OKUR\Desktop\JDownloader 2.lnk
2014-12-20 12:05 - 2014-12-20 12:05 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2014-12-20 12:01 - 2014-12-26 03:23 - 00000000 ____D () C:\Users\OKUR\AppData\Local\JDownloader v2.0
2014-12-19 17:51 - 2014-12-19 17:52 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-12-19 17:33 - 2014-12-20 17:56 - 00000000 ____D () C:\Users\OKUR\Documents\My Games
2014-12-19 17:33 - 2014-12-19 17:33 - 00000000 ____D () C:\Users\OKUR\AppData\Local\Skyrim
2014-12-19 16:01 - 2014-12-19 16:01 - 00089635 _____ () C:\Users\OKUR\Downloads\tesv_skyrim_plus_11_trnr_ghl.rar
2014-12-19 16:00 - 2014-12-19 16:00 - 00000000 ____D () C:\Users\OKUR\Documents\My Cheat Tables
2014-12-19 15:04 - 2014-12-19 15:04 - 00000849 _____ () C:\Users\OKUR\Desktop\µTorrent.lnk
2014-12-19 15:03 - 2014-12-20 17:41 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\uTorrent
2014-12-18 16:12 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 16:12 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 17:20 - 2014-12-15 17:20 - 02041250 _____ () C:\Users\OKUR\Desktop\Andale ich fick dich AMK.mp4
2014-12-14 17:50 - 2013-09-24 11:14 - 00179200 _____ (fabi.me) C:\Users\OKUR\Desktop\SpeedAutoClicker.exe
2014-12-14 17:43 - 2014-12-14 18:55 - 00000000 ____D () C:\Users\OKUR\Desktop\World of Exodia
2014-12-13 11:56 - 2014-12-13 11:56 - 02469162 _____ () C:\Users\OKUR\Downloads\Ismail YK - Gülemän .mp4
2014-12-12 19:10 - 2014-12-21 13:52 - 00000000 ____D () C:\Users\OKUR\Documents\AirDroid
2014-12-12 19:10 - 2014-12-20 15:32 - 00000000 ____D () C:\Program Files (x86)\AirDroid
2014-12-12 19:10 - 2014-12-12 19:16 - 00001924 _____ () C:\Users\Public\Desktop\AirDroid.lnk
2014-12-12 19:10 - 2014-12-12 19:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirDroid
2014-12-12 15:46 - 2014-12-12 15:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\03AF6DEF.sys
2014-12-11 16:30 - 2014-12-28 17:30 - 00000258 _____ () C:\Windows\Tasks\CCleanerClean.job
2014-12-11 16:30 - 2014-12-11 16:30 - 00002830 _____ () C:\Windows\System32\Tasks\CCleanerClean
2014-12-11 15:53 - 2014-12-11 15:53 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 22:41 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 22:41 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 22:17 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 22:17 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 22:14 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 22:14 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 22:14 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 22:13 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 22:13 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 22:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 22:13 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 22:13 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 22:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 22:13 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 22:13 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 22:13 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 22:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 22:13 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 22:13 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 22:13 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 22:13 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 22:13 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 22:13 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 22:13 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 22:13 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 22:13 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 22:13 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 22:13 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 22:13 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 22:13 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 22:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 22:13 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 22:13 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 22:13 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 22:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 22:13 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 22:13 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 22:13 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 22:13 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 22:13 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 22:13 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 22:13 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 22:13 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 22:13 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 22:13 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 22:13 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 22:13 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 22:13 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 22:13 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 22:13 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 22:13 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 22:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 22:13 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 22:13 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 22:13 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 22:13 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 22:13 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 22:13 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 22:13 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 22:13 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 22:13 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 22:11 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 22:11 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 22:11 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 22:11 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 22:11 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 22:11 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 22:11 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 22:11 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 22:11 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 22:11 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 22:11 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 22:11 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 22:11 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 22:11 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-09 16:53 - 2014-12-09 16:53 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-12-09 01:59 - 2014-12-09 01:59 - 03915081 _____ () C:\Users\DNZ\Downloads\rcsetup151.zip
2014-12-09 01:54 - 2014-12-09 01:54 - 00000000 ____D () C:\Users\DNZ\Desktop\lang
2014-12-09 01:54 - 2013-08-12 15:22 - 00005536 _____ () C:\Users\DNZ\Desktop\License.txt
2014-12-09 01:54 - 2012-06-05 09:35 - 00000010 _____ () C:\Users\DNZ\Desktop\portable.dat
2014-12-09 01:52 - 2014-12-09 01:59 - 07822126 _____ () C:\Users\DNZ\Downloads\rcsetup151 (1).zip
2014-12-09 01:52 - 2014-12-09 01:52 - 03915081 _____ () C:\Users\DNZ\Desktop\rcsetup151.zip
2014-12-08 14:24 - 2014-12-08 14:25 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\concept design
2014-12-08 14:24 - 2014-12-08 14:24 - 00001264 _____ () C:\Users\OKUR\Desktop\onlineTV 10.lnk
2014-12-08 14:24 - 2014-12-08 14:24 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design
2014-12-08 14:24 - 2014-12-08 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\concept design
2014-12-08 14:24 - 2014-12-08 14:24 - 00000000 ____D () C:\Program Files (x86)\concept design
2014-12-06 16:21 - 2014-12-06 16:24 - 00000000 ____D () C:\Users\DNZ\Desktop\timepartnerrrrr
2014-12-04 18:38 - 2014-12-04 18:38 - 15238227 _____ () C:\Users\OKUR\Downloads\das Leben ging immer weiter.mp4
2014-12-02 16:48 - 2014-12-25 17:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-29 19:50 - 2014-11-29 19:50 - 00000000 ____D () C:\Users\OKUR\AppData\Local\GlassWire
2014-11-29 19:49 - 2014-11-29 19:49 - 00000000 ____D () C:\ProgramData\GlassWire

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 19:40 - 2014-03-27 04:35 - 00000920 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1004UA.job
2014-12-28 19:30 - 2014-06-18 11:52 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8ae36834fe1a.job
2014-12-28 19:21 - 2014-01-06 01:36 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-28 18:55 - 2014-05-29 13:20 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-28 18:30 - 2014-06-18 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf8ae362f675ff.job
2014-12-28 18:26 - 2014-07-27 00:05 - 00000000 __SHD () C:\Windows\SysWOW64\MPK
2014-12-28 18:26 - 2014-01-09 00:28 - 00000000 ____D () C:\Users\DNZ\Desktop\DeniZiim____
2014-12-28 17:40 - 2014-07-16 13:32 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1001UA.job
2014-12-28 17:32 - 2014-01-06 23:15 - 00000000 ____D () C:\Windows\Minidump
2014-12-28 14:46 - 2014-06-14 20:25 - 00000000 ____D () C:\Users\OKUR\AppData\Local\QuickPar
2014-12-28 14:37 - 2014-07-16 13:32 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1001Core.job
2014-12-28 14:22 - 2014-03-26 20:30 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Screaming Bee
2014-12-28 14:21 - 2014-04-12 17:52 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-28 13:49 - 2009-07-14 05:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-28 13:49 - 2009-07-14 05:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-28 13:39 - 2014-06-07 11:35 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-12-28 13:39 - 2014-01-06 01:35 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-28 13:39 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-28 13:38 - 2014-02-04 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-28 13:36 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-12-28 00:40 - 2014-08-23 20:31 - 00000000 ____D () C:\Users\Gast.OKUR-PC
2014-12-27 21:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-26 23:58 - 2014-01-09 00:44 - 00000551 _____ () C:\Windows\ulead32.ini
2014-12-26 23:55 - 2014-01-06 05:19 - 00124856 _____ () C:\Users\DNZ\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-26 10:13 - 2014-03-27 04:35 - 00000898 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1004Core.job
2014-12-26 03:22 - 2014-01-06 01:20 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\vlc
2014-12-26 02:03 - 2014-01-06 01:55 - 00124856 _____ () C:\Users\OKUR\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-25 18:02 - 2014-01-08 20:01 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\TS3Client
2014-12-24 19:37 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-12-24 19:29 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-24 19:27 - 2009-07-14 03:34 - 74973184 _____ () C:\Windows\system32\config\software.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 23068672 _____ () C:\Windows\system32\config\system.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-12-23 02:01 - 2009-07-14 05:45 - 00460616 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-22 21:08 - 2014-01-06 16:52 - 00000000 ____D () C:\Windows\PCHEALTH
2014-12-22 18:19 - 2014-01-06 16:28 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\DAEMON Tools Lite
2014-12-22 14:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-12-22 03:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-21 13:17 - 2014-01-06 16:01 - 00000000 ____D () C:\Users\OKUR\Desktop\Oggy
2014-12-21 12:41 - 2010-11-21 07:50 - 00702846 _____ () C:\Windows\system32\perfh007.dat
2014-12-21 12:41 - 2010-11-21 07:50 - 00150398 _____ () C:\Windows\system32\perfc007.dat
2014-12-21 12:41 - 2009-07-14 06:13 - 01627536 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-20 13:05 - 2014-06-04 14:02 - 00000000 ____D () C:\ProgramData\Origin
2014-12-20 10:37 - 2014-06-04 14:02 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-12-19 17:51 - 2014-02-04 14:27 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-12-17 17:40 - 2014-10-22 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-17 17:40 - 2014-10-22 14:57 - 00000000 ____D () C:\ProgramData\Avira
2014-12-17 17:40 - 2014-10-22 14:57 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-12-17 17:35 - 2014-02-05 13:16 - 00007615 _____ () C:\Users\OKUR\AppData\Local\resmon.resmoncfg
2014-12-15 21:09 - 2014-10-16 15:50 - 00000000 ____D () C:\Users\OKUR\.x2go
2014-12-15 17:55 - 2014-01-06 01:23 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Skype
2014-12-14 17:51 - 2014-10-25 15:07 - 00000000 ____D () C:\Users\OKUR\AppData\Local\fabi.me
2014-12-13 17:02 - 2014-01-06 16:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-12 17:25 - 2014-01-06 01:37 - 00002210 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-11 16:13 - 2014-01-06 01:55 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-11 15:53 - 2014-05-07 16:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-11 15:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-11 15:52 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-10 22:58 - 2014-01-06 16:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-10 22:55 - 2014-01-06 23:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 22:48 - 2014-01-06 23:29 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 21:31 - 2014-03-21 19:03 - 00000000 ____D () C:\Program Files (x86)\PC Monitor
2014-12-09 21:55 - 2014-05-29 13:20 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-09 21:55 - 2014-05-29 13:20 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-09 21:55 - 2014-05-29 13:20 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-06 16:40 - 2014-01-06 01:40 - 00000901 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-06 16:29 - 2014-02-04 01:29 - 00000000 ____D () C:\Users\DNZ\Desktop\BEWerbung
2014-12-05 15:20 - 2014-05-18 13:05 - 00001141 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-05 15:20 - 2014-05-18 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-05 15:20 - 2014-05-18 13:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-12-04 15:12 - 2014-03-14 17:32 - 00000000 ____D () C:\ProgramData\ProductData
2014-12-04 15:10 - 2014-01-06 01:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

Some content of TEMP:
====================
C:\Users\Abdullah.OKUR-PC\AppData\Local\Temp\avgnt.exe
C:\Users\OKUR\AppData\Local\Temp\avgnt.exe
C:\Users\OKUR\AppData\Local\Temp\A~NSISu_.exe
C:\Users\OKUR\AppData\Local\Temp\bitool.dll
C:\Users\OKUR\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-27 21:23

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Bei SecurityCheck "Performing System Healt Check" bin ich stecken geblieben^^
da passiert nix.

Ich hab da 2 neue Probleme <.<
1.
Wenn ich mit Chrome/IE surfe kommt plätzlich immer Proxyserver Meldung "Verbindung zum Proxyserver kann nicht hergestellt werden."
Hab versucht den Hacken auf "Einstellung Auto.Erkennen" zu machen aber das wird automatisch wieder auf Proxy gesetzt.

Immer wenn ich schnell bei "Einstellung auto.Erkennen" ein hacken draufmache und auf OK drücke kann ich für paar Sekunden direkt auf die Seite zugreifen dann nichtmehr dann wirds wieder auf Proxy umgestellt.Auf Firefox funktioniert das problemlos kann da zugreifen nur bei Chrome und IE nicht.

Ich vermute mal es liegt an diesen Wajam scheiß, den ich mit Revo Uninstaller deinstalliert hab.

2.Mein Internet hat alle paar Minuten Aussetzer. Dann geht gar nichts also ich kann Maus bewegen aber es reagiert sehr langsam bis es wieder auf normale Geschwindigkeit ist z.B wenn ich nen Video angucke bleibt alles hängen (keine Rückmeldung) bis auf paar Min dann gehts wieder oder beim Surfen wenn ich auf ne andere Seite gehe hab ich erst weiße Seite dann dauerts wieder bis ich auf die Seite gehe dann wird es wd normal also mit der Geschwindigkeit. Mit dem Handy habe ich diese Probleme nicht, nur mit meinem Laptop. Das beunruhigt mich <.<

Zitat:

Zitat von oguzhan002

log.txt

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=c30f9807d80e994885198a50771616d9
# engine=21731
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-12-28 05:26:48
# local_time=2014-12-28 06:26:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 21424 8232148 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 7105695 171417458 0 0
# scanned=222620
# found=14
# cleaned=8
# scan_time=12576
sh=280619B09227A7BA83FE98166F6EC0EB1A7EE082 ft=1 fh=389893db5758227f vn="Win32/Somoto.G evtl. unerwünschte Anwendung" ac=I fn="C:\Users\OKUR\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O3CPLR3V\setup[1].exe"
sh=A400894D756987D290A965E11AFF8AEDB7B2078A ft=1 fh=df0423bb2df193c3 vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\lsynchost.exe"
sh=086B0267FA4B2E95F067FB7F031D75AE4A050C82 ft=1 fh=be140ef598aae020 vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\MpkHCA.dll"
sh=6DC4A9D671EC38B337BED19DE4215F2C67B831ED ft=1 fh=f62681805a3729ff vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\MpkHCQ12.dll"
sh=9FA5283DECEA183B01C3ECB19A072D62FB928ED2 ft=1 fh=52923aa7982a45d5 vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\MPKInst.exe"
sh=2847110D93F20265D5F721A584CB8A13DE032F86 ft=1 fh=467eed22b7b616db vn="Variante von Win32/KeyLogger.Refog.D Anwendung" ac=I fn="C:\Windows\SysWOW64\MPK\unins000.exe"
sh=3FA075ACD6BB32C2FEAFE242F787F70EA0F2FF24 ft=1 fh=8a109499a14e2da6 vn="Variante von Win32/SoftPulse.S evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\Abdullah.OKUR-PC\Downloads\Nicht bestätigt 878278.crdownload"
sh=C9458B94EC2B0FED795465612049AE1CC59EA274 ft=1 fh=59bca1873b4e9a83 vn="Variante von Win32/Toolbar.Conduit.K evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\DNZ\Desktop\DeniZiim____\wpsetup_4.52[1].exe"
sh=280619B09227A7BA83FE98166F6EC0EB1A7EE082 ft=1 fh=389893db5758227f vn="Win32/Somoto.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Users\OKUR\AppData\Local\Temp\nssC3A0.tmp"
sh=A400894D756987D290A965E11AFF8AEDB7B2078A ft=1 fh=df0423bb2df193c3 vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\lsynchost.exe"
sh=086B0267FA4B2E95F067FB7F031D75AE4A050C82 ft=1 fh=be140ef598aae020 vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\MpkHCA.dll"
sh=6DC4A9D671EC38B337BED19DE4215F2C67B831ED ft=1 fh=f62681805a3729ff vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\MpkHCQ12.dll"
sh=9FA5283DECEA183B01C3ECB19A072D62FB928ED2 ft=1 fh=52923aa7982a45d5 vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\MPKInst.exe"
sh=2847110D93F20265D5F721A584CB8A13DE032F86 ft=1 fh=467eed22b7b616db vn="Variante von Win32/KeyLogger.Refog.D Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Windows\System32\MPK\unins000.exe"

FRST.txt

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-12-2014
Ran by OKUR (administrator) on OKUR-PC on 28-12-2014 19:41:30
Running from C:\Users\OKUR\Downloads
Loaded Profiles: OKUR &  (Available profiles: OKUR & DNZ & Abdullah & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\WInterEnhance\WInterEnhance Internet Enhancer\InternetEnhancerService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
() C:\Windows\PLFSetI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_240.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_240.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\OKUR\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corp.) C:\Windows\System32\Defrag.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2014-01-06] ()
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-21] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1808168 2009-06-18] (Synaptics Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2014-11-21] (Malwarebytes Corporation)
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Facebook Update] => C:\Users\DNZ\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-03-27] (Facebook Inc.)
HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Facebook Update] => C:\Users\DNZ\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-03-27] (Facebook Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1651875045-3007675786-4229390803-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [S-1-5-21-1651875045-3007675786-4229390803-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-1651875045-3007675786-4229390803-1001] => http=127.0.0.1:49657;https=127.0.0.1:49657
ProxyEnable: [S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0] => http=127.0.0.1:49657;https=127.0.0.1:49657
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?rd=1&ucc=DE&dcc=DE&opt=0
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p07_serp_ie_de_display?ie=UTF8&tagbase=bds-p07&tag=bds-p07-serp-de-ie-21&tbrId=v1_abb-channel-7_70dbbef89e1c4a5ca36e8a545481bdaa_30_46_20140131_DE_ie_ds_IS0&query={searchTerms}
SearchScopes: HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p07_serp_ie_de_display?ie=UTF8&tagbase=bds-p07&tag=bds-p07-serp-de-ie-21&tbrId=v1_abb-channel-7_70dbbef89e1c4a5ca36e8a545481bdaa_30_46_20140131_DE_ie_ds_IS0&query={searchTerms}
BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} ->  No File
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default
FF NetworkProxy: "type", 5
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_240.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_240.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\OKUR\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\OKUR\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\DNZ\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1651875045-3007675786-4229390803-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\DNZ\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Extension: Avira Browser Safety - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\abs@avira.com [2014-12-12]
FF Extension: Hilfe Assistent - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\{} [2014-03-26]
FF Extension: Ghostery - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\firefox@ghostery.com.xpi [2014-09-24]
FF Extension: Adblock Plus - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-08]
FF Extension: DownThemAll! - C:\Users\OKUR\AppData\Roaming\Mozilla\Firefox\Profiles\65zspnea.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-10-07]

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "https://www.google.de/", "hxxp://www.facebook.com/Erzincaan1907", "hxxp://connect.koramgame.com/?act=login.facebook&u=102026&u2=facebook&ref=hxxp://game.demon.koramgame.com/?sid=s1"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-30]
CHR Extension: (AdBlock) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-16]
CHR Extension: (Dropbox) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-03-16]
CHR Extension: (Ghostery) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-09-24]
CHR Extension: (Google Wallet) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-06]
CHR Extension: (Click&Clean App) - C:\Users\OKUR\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2014-03-16]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-06-12] (CyberGhost S.R.L)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
U2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-20] (Electronic Arts)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-09-24] (Avira Operations GmbH & Co. KG)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-06-05] (Disc Soft Ltd)
R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [22016 2014-06-17] (G Data Software AG)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [129752 2014-12-28] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]
S3 visctap0901; C:\Windows\System32\DRIVERS\visctap0901.sys [39048 2014-06-06] (The OpenVPN Project)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\PC Monitor\PCMonitorSrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 19:01 - 2014-12-28 19:01 - 01156136 _____ (Ruiware) C:\Users\OKUR\Downloads\wpsetup.exe
2014-12-28 13:35 - 2014-12-28 14:49 - 00000000 ____D () C:\Program Files (x86)\Shark007
2014-12-28 13:34 - 2014-12-28 13:34 - 00003146 _____ () C:\Windows\System32\Tasks\Run_Bobby_Browser
2014-12-28 13:33 - 2014-12-28 15:03 - 00000000 ____D () C:\Program Files (x86)\WInterEnhance
2014-12-28 13:32 - 2014-12-28 14:48 - 00000000 ____D () C:\ProgramData\Standard
2014-12-28 00:46 - 2014-12-28 00:46 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Roaming\Avira
2014-12-28 00:42 - 2014-12-28 00:42 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Local\NVIDIA Corporation
2014-12-28 00:40 - 2014-12-28 00:40 - 00001456 _____ () C:\Users\Gast.OKUR-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-28 00:40 - 2014-12-28 00:40 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Roaming\Adobe
2014-12-28 00:40 - 2014-12-28 00:40 - 00000000 ____D () C:\Users\Gast.OKUR-PC\AppData\Local\NVIDIA
2014-12-27 12:49 - 2014-12-28 17:58 - 00048824 _____ () C:\Windows\WindowsUpdate.log
2014-12-27 02:52 - 2014-12-27 02:52 - 00000000 ____D () C:\Users\OKUR\Downloads\FRST-OlderVersion
2014-12-27 02:21 - 2014-12-27 02:23 - 00852505 _____ () C:\Users\OKUR\Desktop\SecurityCheck.exe
2014-12-27 01:55 - 2014-12-27 01:55 - 02347384 _____ (ESET) C:\Users\OKUR\Downloads\esetsmartinstaller_deu.exe
2014-12-27 01:55 - 2014-12-27 01:55 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-26 00:47 - 2014-12-12 00:34 - 2161959019 _____ () C:\Users\OKUR\Desktop\The Equalizer 1080p BluRay.mkv
2014-12-25 21:04 - 2014-12-25 21:04 - 00001189 _____ () C:\Users\OKUR\Desktop\ööaöa.txt
2014-12-25 20:48 - 2014-12-25 20:48 - 00000624 _____ () C:\Users\OKUR\Desktop\JRT.txt
2014-12-25 20:22 - 2014-12-25 20:22 - 00001282 _____ () C:\Users\OKUR\Desktop\mbam.txt
2014-12-25 18:59 - 2014-12-13 16:25 - 4068425617 _____ () C:\Users\OKUR\Desktop\Lets be Cops - Die Party Bullen 1080p BluRay.mkv
2014-12-24 20:22 - 2014-12-24 20:29 - 16532986 _____ () C:\Users\OKUR\Downloads\DEMOLIERT.mp4
2014-12-24 19:37 - 2014-12-24 19:37 - 00027411 _____ () C:\ComboFix.txt
2014-12-24 18:49 - 2014-12-24 19:37 - 00000000 ____D () C:\ComboFix
2014-12-24 18:46 - 2014-12-24 18:44 - 05603465 ____R (Swearware) C:\Users\OKUR\Desktop\ComboFix.exe
2014-12-24 18:45 - 2014-12-24 19:37 - 00000000 ____D () C:\Qoobox
2014-12-24 18:45 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-24 18:45 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-24 18:45 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-24 18:45 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-24 18:44 - 2014-12-24 19:35 - 00000000 ____D () C:\Windows\erdnt
2014-12-24 18:43 - 2014-12-24 18:44 - 05603465 ____R (Swearware) C:\Users\OKUR\Downloads\ComboFix.exe
2014-12-24 18:37 - 2014-12-24 18:37 - 00001303 _____ () C:\Users\OKUR\Desktop\Revo Uninstaller.lnk
2014-12-24 18:37 - 2014-12-24 18:37 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-24 15:15 - 2014-12-24 15:15 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\OKUR\Downloads\revosetup95.exe
2014-12-24 13:19 - 2014-12-24 13:19 - 00190281 _____ () C:\Users\OKUR\Desktop\FIFAAAA.mp4
2014-12-23 13:37 - 2014-12-23 13:41 - 00029418 _____ () C:\Users\OKUR\Downloads\Addition.txt
2014-12-23 13:35 - 2014-12-28 19:41 - 00022221 _____ () C:\Users\OKUR\Downloads\FRST.txt
2014-12-23 13:35 - 2014-12-28 19:41 - 00000000 ____D () C:\FRST
2014-12-23 13:34 - 2014-12-27 02:52 - 02122752 _____ (Farbar) C:\Users\OKUR\Downloads\FRST64.exe
2014-12-23 01:54 - 2014-12-25 20:32 - 00000000 ____D () C:\AdwCleaner
2014-12-23 01:54 - 2014-12-23 01:54 - 00000000 ____D () C:\Windows\ERUNT
2014-12-23 01:51 - 2014-12-23 01:52 - 01707646 _____ (Thisisu) C:\Users\OKUR\Downloads\JRT.exe
2014-12-23 01:51 - 2014-12-23 01:51 - 02173952 _____ () C:\Users\OKUR\Desktop\AdwCleaner_4.106.exe
2014-12-22 01:46 - 2014-12-22 01:46 - 00138512 _____ () C:\Users\OKUR\Downloads\5b74bd9beada02b9884d.zipx
2014-12-22 01:33 - 2014-12-22 01:33 - 00138512 _____ () C:\Users\OKUR\Desktop\Herr der Ringe Die Schlacht um Mittelwerde 2 Trainer.zip
2014-12-22 01:07 - 2014-12-22 01:26 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien
2014-12-22 00:04 - 2014-12-22 00:04 - 00002271 _____ () C:\Users\Public\Desktop\Die Schlacht um Mittelerde(tm).lnk
2014-12-22 00:04 - 2014-12-22 00:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2014-12-21 23:51 - 2014-12-21 23:51 - 00000000 ____D () C:\Program Files (x86)\EA GAMES
2014-12-21 17:05 - 2014-12-21 22:37 - 00000000 ____D () C:\Users\OKUR\Downloads\Herr der Ringe Schlacht Um Mittelerde Anthology incl Patches+Cracks
2014-12-21 16:42 - 2014-12-22 16:46 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Meine Die Schlacht um Mittelerde™ II-Dateien
2014-12-21 16:39 - 2014-12-22 00:04 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-12-21 16:39 - 2014-12-21 16:39 - 00002330 _____ () C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
2014-12-21 16:37 - 2014-12-21 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2014-12-21 16:26 - 2014-12-21 16:26 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-12-21 12:40 - 2014-12-21 12:40 - 00001956 _____ () C:\Users\OKUR\Desktop\SkyrimLauncher.exe - Verknüpfung.lnk
2014-12-20 17:05 - 2014-12-21 12:40 - 00000000 ____D () C:\Program Files (x86)\The Elder Scrolls V Skyrim - Legendary Edition (Game of the Year)
2014-12-20 16:14 - 2014-12-20 16:37 - 50188227 _____ () C:\Users\OKUR\Downloads\DEER HUNTER 2014 v2.7.0 [Unlimited Money Unlocked].apk
2014-12-20 16:14 - 2014-12-20 16:36 - 50211725 _____ () C:\Users\OKUR\Downloads\BuluMonster181-APKLOVER.apk
2014-12-20 12:05 - 2014-12-20 12:05 - 00002080 _____ () C:\Users\OKUR\Desktop\JDownloader 2.lnk
2014-12-20 12:05 - 2014-12-20 12:05 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2014-12-20 12:01 - 2014-12-26 03:23 - 00000000 ____D () C:\Users\OKUR\AppData\Local\JDownloader v2.0
2014-12-19 17:51 - 2014-12-19 17:52 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-12-19 17:33 - 2014-12-20 17:56 - 00000000 ____D () C:\Users\OKUR\Documents\My Games
2014-12-19 17:33 - 2014-12-19 17:33 - 00000000 ____D () C:\Users\OKUR\AppData\Local\Skyrim
2014-12-19 16:01 - 2014-12-19 16:01 - 00089635 _____ () C:\Users\OKUR\Downloads\tesv_skyrim_plus_11_trnr_ghl.rar
2014-12-19 16:00 - 2014-12-19 16:00 - 00000000 ____D () C:\Users\OKUR\Documents\My Cheat Tables
2014-12-19 15:04 - 2014-12-19 15:04 - 00000849 _____ () C:\Users\OKUR\Desktop\µTorrent.lnk
2014-12-19 15:03 - 2014-12-20 17:41 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\uTorrent
2014-12-18 16:12 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 16:12 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 17:20 - 2014-12-15 17:20 - 02041250 _____ () C:\Users\OKUR\Desktop\Andale ich fick dich AMK.mp4
2014-12-14 17:50 - 2013-09-24 11:14 - 00179200 _____ (fabi.me) C:\Users\OKUR\Desktop\SpeedAutoClicker.exe
2014-12-14 17:43 - 2014-12-14 18:55 - 00000000 ____D () C:\Users\OKUR\Desktop\World of Exodia
2014-12-13 11:56 - 2014-12-13 11:56 - 02469162 _____ () C:\Users\OKUR\Downloads\Ismail YK - Gülemän .mp4
2014-12-12 19:10 - 2014-12-21 13:52 - 00000000 ____D () C:\Users\OKUR\Documents\AirDroid
2014-12-12 19:10 - 2014-12-20 15:32 - 00000000 ____D () C:\Program Files (x86)\AirDroid
2014-12-12 19:10 - 2014-12-12 19:16 - 00001924 _____ () C:\Users\Public\Desktop\AirDroid.lnk
2014-12-12 19:10 - 2014-12-12 19:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirDroid
2014-12-12 15:46 - 2014-12-12 15:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\03AF6DEF.sys
2014-12-11 16:30 - 2014-12-28 17:30 - 00000258 _____ () C:\Windows\Tasks\CCleanerClean.job
2014-12-11 16:30 - 2014-12-11 16:30 - 00002830 _____ () C:\Windows\System32\Tasks\CCleanerClean
2014-12-11 15:53 - 2014-12-11 15:53 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 22:41 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 22:41 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 22:17 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 22:17 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 22:17 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 22:14 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 22:14 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 22:14 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 22:13 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 22:13 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 22:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 22:13 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 22:13 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 22:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 22:13 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 22:13 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 22:13 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 22:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 22:13 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 22:13 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 22:13 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 22:13 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 22:13 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 22:13 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 22:13 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 22:13 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 22:13 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 22:13 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 22:13 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 22:13 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 22:13 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 22:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 22:13 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 22:13 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 22:13 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 22:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 22:13 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 22:13 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 22:13 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 22:13 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 22:13 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 22:13 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 22:13 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 22:13 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 22:13 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 22:13 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 22:13 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 22:13 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 22:13 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 22:13 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 22:13 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 22:13 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 22:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 22:13 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 22:13 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 22:13 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 22:13 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 22:13 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 22:13 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 22:13 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 22:13 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 22:13 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 22:11 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 22:11 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 22:11 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 22:11 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 22:11 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 22:11 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 22:11 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 22:11 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 22:11 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 22:11 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 22:11 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 22:11 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 22:11 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 22:11 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-09 16:53 - 2014-12-09 16:53 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-12-09 01:59 - 2014-12-09 01:59 - 03915081 _____ () C:\Users\DNZ\Downloads\rcsetup151.zip
2014-12-09 01:54 - 2014-12-09 01:54 - 00000000 ____D () C:\Users\DNZ\Desktop\lang
2014-12-09 01:54 - 2013-08-12 15:22 - 00005536 _____ () C:\Users\DNZ\Desktop\License.txt
2014-12-09 01:54 - 2012-06-05 09:35 - 00000010 _____ () C:\Users\DNZ\Desktop\portable.dat
2014-12-09 01:52 - 2014-12-09 01:59 - 07822126 _____ () C:\Users\DNZ\Downloads\rcsetup151 (1).zip
2014-12-09 01:52 - 2014-12-09 01:52 - 03915081 _____ () C:\Users\DNZ\Desktop\rcsetup151.zip
2014-12-08 14:24 - 2014-12-08 14:25 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\concept design
2014-12-08 14:24 - 2014-12-08 14:24 - 00001264 _____ () C:\Users\OKUR\Desktop\onlineTV 10.lnk
2014-12-08 14:24 - 2014-12-08 14:24 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design
2014-12-08 14:24 - 2014-12-08 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\concept design
2014-12-08 14:24 - 2014-12-08 14:24 - 00000000 ____D () C:\Program Files (x86)\concept design
2014-12-06 16:21 - 2014-12-06 16:24 - 00000000 ____D () C:\Users\DNZ\Desktop\timepartnerrrrr
2014-12-04 18:38 - 2014-12-04 18:38 - 15238227 _____ () C:\Users\OKUR\Downloads\das Leben ging immer weiter.mp4
2014-12-02 16:48 - 2014-12-25 17:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-29 19:50 - 2014-11-29 19:50 - 00000000 ____D () C:\Users\OKUR\AppData\Local\GlassWire
2014-11-29 19:49 - 2014-11-29 19:49 - 00000000 ____D () C:\ProgramData\GlassWire

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-28 19:40 - 2014-03-27 04:35 - 00000920 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1004UA.job
2014-12-28 19:30 - 2014-06-18 11:52 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8ae36834fe1a.job
2014-12-28 19:21 - 2014-01-06 01:36 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-28 18:55 - 2014-05-29 13:20 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-28 18:30 - 2014-06-18 11:52 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf8ae362f675ff.job
2014-12-28 18:26 - 2014-07-27 00:05 - 00000000 __SHD () C:\Windows\SysWOW64\MPK
2014-12-28 18:26 - 2014-01-09 00:28 - 00000000 ____D () C:\Users\DNZ\Desktop\DeniZiim____
2014-12-28 17:40 - 2014-07-16 13:32 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1001UA.job
2014-12-28 17:32 - 2014-01-06 23:15 - 00000000 ____D () C:\Windows\Minidump
2014-12-28 14:46 - 2014-06-14 20:25 - 00000000 ____D () C:\Users\OKUR\AppData\Local\QuickPar
2014-12-28 14:37 - 2014-07-16 13:32 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1001Core.job
2014-12-28 14:22 - 2014-03-26 20:30 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Screaming Bee
2014-12-28 14:21 - 2014-04-12 17:52 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-28 13:49 - 2009-07-14 05:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-28 13:49 - 2009-07-14 05:45 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-28 13:39 - 2014-06-07 11:35 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-12-28 13:39 - 2014-01-06 01:35 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-28 13:39 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-28 13:38 - 2014-02-04 14:49 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-28 13:36 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-12-28 00:40 - 2014-08-23 20:31 - 00000000 ____D () C:\Users\Gast.OKUR-PC
2014-12-27 21:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-26 23:58 - 2014-01-09 00:44 - 00000551 _____ () C:\Windows\ulead32.ini
2014-12-26 23:55 - 2014-01-06 05:19 - 00124856 _____ () C:\Users\DNZ\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-26 10:13 - 2014-03-27 04:35 - 00000898 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1651875045-3007675786-4229390803-1004Core.job
2014-12-26 03:22 - 2014-01-06 01:20 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\vlc
2014-12-26 02:03 - 2014-01-06 01:55 - 00124856 _____ () C:\Users\OKUR\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-25 18:02 - 2014-01-08 20:01 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\TS3Client
2014-12-24 19:37 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-12-24 19:29 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-24 19:27 - 2009-07-14 03:34 - 74973184 _____ () C:\Windows\system32\config\software.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 23068672 _____ () C:\Windows\system32\config\system.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-12-24 19:27 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-12-23 02:01 - 2009-07-14 05:45 - 00460616 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-22 21:08 - 2014-01-06 16:52 - 00000000 ____D () C:\Windows\PCHEALTH
2014-12-22 18:19 - 2014-01-06 16:28 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\DAEMON Tools Lite
2014-12-22 14:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-12-22 03:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-21 13:17 - 2014-01-06 16:01 - 00000000 ____D () C:\Users\OKUR\Desktop\Oggy
2014-12-21 12:41 - 2010-11-21 07:50 - 00702846 _____ () C:\Windows\system32\perfh007.dat
2014-12-21 12:41 - 2010-11-21 07:50 - 00150398 _____ () C:\Windows\system32\perfc007.dat
2014-12-21 12:41 - 2009-07-14 06:13 - 01627536 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-20 13:05 - 2014-06-04 14:02 - 00000000 ____D () C:\ProgramData\Origin
2014-12-20 10:37 - 2014-06-04 14:02 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-12-19 17:51 - 2014-02-04 14:27 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-12-17 17:40 - 2014-10-22 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-17 17:40 - 2014-10-22 14:57 - 00000000 ____D () C:\ProgramData\Avira
2014-12-17 17:40 - 2014-10-22 14:57 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-12-17 17:35 - 2014-02-05 13:16 - 00007615 _____ () C:\Users\OKUR\AppData\Local\resmon.resmoncfg
2014-12-15 21:09 - 2014-10-16 15:50 - 00000000 ____D () C:\Users\OKUR\.x2go
2014-12-15 17:55 - 2014-01-06 01:23 - 00000000 ____D () C:\Users\OKUR\AppData\Roaming\Skype
2014-12-14 17:51 - 2014-10-25 15:07 - 00000000 ____D () C:\Users\OKUR\AppData\Local\fabi.me
2014-12-13 17:02 - 2014-01-06 16:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-12 17:25 - 2014-01-06 01:37 - 00002210 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-11 16:13 - 2014-01-06 01:55 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-11 15:53 - 2014-05-07 16:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-11 15:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-11 15:52 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-10 22:58 - 2014-01-06 16:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-10 22:55 - 2014-01-06 23:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 22:48 - 2014-01-06 23:29 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 21:31 - 2014-03-21 19:03 - 00000000 ____D () C:\Program Files (x86)\PC Monitor
2014-12-09 21:55 - 2014-05-29 13:20 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-09 21:55 - 2014-05-29 13:20 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-09 21:55 - 2014-05-29 13:20 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-06 16:40 - 2014-01-06 01:40 - 00000901 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-06 16:29 - 2014-02-04 01:29 - 00000000 ____D () C:\Users\DNZ\Desktop\BEWerbung
2014-12-05 15:20 - 2014-05-18 13:05 - 00001141 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-05 15:20 - 2014-05-18 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-05 15:20 - 2014-05-18 13:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-12-04 15:12 - 2014-03-14 17:32 - 00000000 ____D () C:\ProgramData\ProductData
2014-12-04 15:10 - 2014-01-06 01:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

Some content of TEMP:
====================
C:\Users\Abdullah.OKUR-PC\AppData\Local\Temp\avgnt.exe
C:\Users\OKUR\AppData\Local\Temp\avgnt.exe
C:\Users\OKUR\AppData\Local\Temp\A~NSISu_.exe
C:\Users\OKUR\AppData\Local\Temp\bitool.dll
C:\Users\OKUR\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-27 21:23

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Bei SecurityCheck "Performing System Healt Check" bin ich stecken geblieben^^
da passiert nix.

Ich hab da 2 neue Probleme <.<
1.
Wenn ich mit Chrome/IE surfe kommt plätzlich immer Proxyserver Meldung "Verbindung zum Proxyserver kann nicht hergestellt werden."
Hab versucht den Hacken auf "Einstellung Auto.Erkennen" zu machen aber das wird automatisch wieder auf Proxy gesetzt.

Immer wenn ich schnell bei "Einstellung auto.Erkennen" ein hacken draufmache und auf OK drücke kann ich für paar Sekunden direkt auf die Seite zugreifen dann nichtmehr dann wirds wieder auf Proxy umgestellt.Auf Firefox funktioniert das problemlos kann da zugreifen nur bei Chrome und IE nicht.

Ich vermute mal es liegt an diesen Wajam scheiß, den ich mit Revo Uninstaller deinstalliert hab.

2.Mein Internet hat alle paar Minuten Aussetzer. Dann geht gar nichts also ich kann Maus bewegen aber es reagiert sehr langsam bis es wieder auf normale Geschwindigkeit ist z.B wenn ich nen Video angucke bleibt alles hängen (keine Rückmeldung) bis auf paar Min dann gehts wieder oder beim Surfen wenn ich auf ne andere Seite gehe hab ich erst weiße Seite dann dauerts wieder bis ich auf die Seite gehe dann wird es wd normal also mit der Geschwindigkeit. Mit dem Handy habe ich diese Probleme nicht, nur mit meinem Laptop. Das beunruhigt mich <.<

Bei Malwarebytes kommt unten immer diese Meldung: "Nichtmalware erkannt PUP.Optional.Wajam.A habe auf Quarantäne geschoben aber die Meldung kommt immerwieder ^^

P.S nach paar Stunden hab ichs endlich

Checkup.txt

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.93  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 71  
 Adobe Flash Player 16.0.0.240  
 Mozilla Firefox (34.0) 
 Google Chrome (39.0.2171.71) 
 Google Chrome (39.0.2171.95) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

Mein Internet ist aufeinmal sehr langsam geworden! Trojaner ?

Log-Analyse und Auswertung: Mein Internet ist aufeinmal sehr langsam geworden! Trojaner ?

Mein Internet ist aufeinmal sehr langsam geworden! Trojaner ?

Ähnliche Themen: Mein Internet ist aufeinmal sehr langsam geworden! Trojaner ?