Windows 8.1 Bekämpfung Bikiniland Suchm. nachher Monitor schwarz

Haenschen · 06.02.2015, 11:22

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2015
Ran by Haenschen (administrator) on ROGTYTAN on 06-02-2015 11:13:27
Running from C:\Users\Haenschen\AppData\Local\Temp\7ytmm0x0.tmp
Loaded Profiles: Haenschen (Available profiles: Haenschen)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(AxoNet Software GmbH) C:\Program Files\AxoNet Software GmbH\LightsOut\LightsOutService.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe
(Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
() C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\AI Suite II\Ai Charger II\AsChargerIITray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{11F6707B-88F9-4D2D-A138-27B657BAE4D2}\AiChargerDT.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\AI Suite II\Lighting\Lighting.exe
() C:\Program Files\ASUS\System Level Up Driver\SysLevelUp.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\System Level Up Driver\AsSysLevelUpSrc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\5\Plugin.exe
() C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\2\Plugin.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Oracle Corporation) C:\Windows\System32\javaw.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Safari.exe
(Apple Inc.) C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-09-26] (Realtek Semiconductor Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2013-12-21] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\ASUSWSLoader.exe [63296 2013-08-16] ()
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-09] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-06-24] (cyberlink)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2368736 2014-06-03] (Microsoft Corp.)
HKLM-x32\...\Run: [Google Desktop Search] => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2014-10-25] (Google)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM-x32\...\RunOnce: [Binkiland] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\HAENSC~1\AppData\Roaming\Binkiland\UpdateProc\bkup.dat"
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Run: [Spotify Web Helper] => C:\Users\Haenschen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-15] (Spotify Ltd)
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30524000 2014-10-23] (Skype Technologies S.A.)
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Run: [Copernic Desktop Search 4] => D:\Programme FestplD\Copernic.DesktopSearch.exe [1437456 2014-11-04] (Copernic, a division of N. Harris Computer Systems)
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\RunOnce: [Binkiland] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\HAENSC~1\AppData\Roaming\Binkiland\UpdateProc\bkup.dat"
AppInit_DLLs-x32: C:\PROGRA~2\Google\GOOGLE~2\GO36F4~1.DLL => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2014-10-25] (Google)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.0.3.226\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.0.3.226\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.0.3.226\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.ch.msn.com/
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://binkiland.com/?f=1&a=bnk_secureddownload_15_06&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0B0D0DzztB0B0E0A0D0EyEtN0D0Tzu0StCtCtAtCtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1QtN1L1G1B1V1N2Y1L1Qzu2StDtByDyD0CyD0BtDtG0E0EtA0EtGzy0B0DyEtGyEtDzztAtGtB0C0AyD0BzztAyCzz0F0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0EyDtCyDyBzy0FtGzy0FtCtAtGyEtB0ByBtGzyyCtD0FtGyCtB0ByBtA0DzzyB0A0DyE0B2Q&cr=1973535917&ir=
SearchScopes: HKLM -> DefaultScope {67F75E1D-8F13-41F9-82BE-78AB4EAB8A32} URL = hxxp://Lasaoren.com/results.php?f=4&q={searchTerms}&a=lrn_secureddownload_14_38_ff&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0B0D0DzztB0B0E0A0D0EyEtN0D0Tzu0SzyzytBtN1L2XzutAtFtBtFyEtFtBtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyE0B0DtByEzztC0DtGtAtByByDtGtByDyE0FtG0DyCyByBtGyByDtDyCzy0Dzz0B0F0DyBzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0EyEtCtBtDyBzytAtG0AzzyByDtGyE0EyCzytG0B0FtAzztGtC0EyDtAyEyCyBtB0F0AyB0C2Q&cr=1266261230&ir=
SearchScopes: HKLM -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = 
SearchScopes: HKLM -> {1F74105D-11F3-4A6C-9B38-02A7A9A67B38} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_secureddownload_15_06&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0B0D0DzztB0B0E0A0D0EyEtN0D0Tzu0StCtCtAtCtN1L2XzutAtFyBtFyBtFyDtN1L1CzutCyEtBzytDyD1V1QtN1L1G1B1V1N2Y1L1Qzu2StDtByDyD0CyD0BtDtG0E0EtA0EtGzy0B0DyEtGyEtDzztAtGtB0C0AyD0BzztAyCzz0F0Dzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0EyDtCyDyBzy0FtGzy0FtCtAtGyEtB0ByBtGzyyCtD0FtGyCtB0ByBtA0DzzyB0A0DyE0B2Q&cr=1973535917&ir=
SearchScopes: HKLM -> {67F75E1D-8F13-41F9-82BE-78AB4EAB8A32} URL = hxxp://Lasaoren.com/results.php?f=4&q={searchTerms}&a=lrn_secureddownload_14_38_ff&cd=2XzuyEtN2Y1L1Qzu0B0C0E0EyB0B0D0DzztB0B0E0A0D0EyEtN0D0Tzu0SzyzytBtN1L2XzutAtFtBtFyEtFtBtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyE0B0DtByEzztC0DtGtAtByByDtGtByDyE0FtG0DyCyByBtGyByDtDyCzy0Dzz0B0F0DyBzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0EyEtCtBtDyBzytAtG0AzzyByDtGyE0EyCzytG0B0FtAzztGtC0EyDtAyEyCyBtB0F0AyB0C2Q&cr=1266261230&ir=
SearchScopes: HKLM -> {A25AC313-DD19-4238-ACA2-401D6BEE4321} URL = hxxp://url24.info/?id=5225w0021d2309&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL = 
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {1F74105D-11F3-4A6C-9B38-02A7A9A67B38} URL = 
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = 
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {67F75E1D-8F13-41F9-82BE-78AB4EAB8A32} URL = 
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=6iOYVoLA7B7YD_tMGqyXXAU5kbI?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {A25AC313-DD19-4238-ACA2-401D6BEE4321} URL = 
SearchScopes: HKU\S-1-5-21-3036470256-2613378711-3773960124-1002 -> {E7455321-3BB0-42E6-B417-028DA85C66A9} URL = https://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=523482&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238
FF SearchEngineOrder.1: Websuche
FF SelectedSearchEngine: Binkiland
FF Homepage: about:home
FF Keyword.URL: https://ch.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=523482&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> D:\Programme FestplD\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3036470256-2613378711-3773960124-1002: @citrixonline.com/appdetectorplugin -> C:\Users\Haenschen\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF user.js: detected! => C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\user.js
FF Plugin ProgramFiles/Appdata: C:\Users\Haenschen\AppData\Roaming\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)
FF SearchPlugin: C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\searchplugins\google-maps.xml
FF SearchPlugin: C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\searchplugins\qwantcom.xml
FF SearchPlugin: C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\searchplugins\wikipedia-english.xml
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\artur.dubovoy@gmail.com [2015-02-05]
FF Extension: iCloud Bookmarks - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\firefoxdav@icloud.com [2014-11-21]
FF Extension: NetVideoHunter - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\netvideohunter@netvideohunter.com [2014-12-16]
FF Extension: LastPass - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\support@lastpass.com [2014-07-10]
FF Extension: YouTube Unblocker - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\youtubeunblocker@unblocker.yt [2015-01-25]
FF Extension: DownloadHelper - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-12-16]
FF Extension: Cliqz Beta - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\cliqz@cliqz.com.xpi [2014-12-03]
FF Extension: 1-Click Dailymotion Video Downloader - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\DailymotionVideoDownloader@PeterOlayev.com.xpi [2014-12-16]
FF Extension: Video Downloader professional - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\ffext_basicvideoext@startpage24.xpi [2014-08-31]
FF Extension: &quot;Manage search engines&quot; button - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\jid1-XGhxOf1M8UPpsQ@jetpack.xpi [2014-11-11]
FF Extension: Youtube Downloader - Media Downloader - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\paulsaintuzb@gmail.com.xpi [2014-08-31]
FF Extension: Top Video Downloader - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\tvd@link64.xpi [2014-12-16]
FF Extension: Youtube and more - Easy Video Downloader - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\vdpure@link64.xpi [2014-08-31]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-08-11]
FF Extension: ALLYouTubeDownloader - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\YouTubetoALL@ALLPlayer.org.xpi [2014-08-31]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2014-07-18]
FF Extension: Integrated Inbox for Gmail &amp; Google Apps - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{28197867-b1ef-4140-8e3b-55c45b9c8460}.xpi [2014-08-12]
FF Extension: Strong Signal - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{629ac51d-702d-4c48-8a56-6d6a5061a41f}.xpi [2015-02-05]
FF Extension: NoScript - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-07-13]
FF Extension: Jordy Video Downloader - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{7CF39A35-6A8D-49B7-A730-9D742DC19693}.xpi [2014-12-16]
FF Extension: Easy Youtube Video Downloader Express - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2014-12-16]
FF Extension: Download YouTube Videos as MP4 - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2014-08-31]
FF Extension: Adblock Plus - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-11]
FF Extension: DownThemAll! - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-08-31]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-10-29]
FF HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Firefox\Extensions: [{b9aa91db-385d-4c69-8a2f-96790aa9405b}] - d:\programme festpld\firefoxconnector
FF Extension: Copernic Desktop Search - Search Firefox content - d:\programme festpld\firefoxconnector [2014-10-25]
FF HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Haenschen\AppData\Roaming\Mozilla\Firefox\Profiles\wc32oylt.default-1404968281238\extensions\cliqz@cliqz.com

Chrome: 
=======
CHR Profile: C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-17]
CHR Extension: (Google Drive) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-17]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-23]
CHR Extension: (YouTube) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-17]
CHR Extension: (Video Downloader Classic) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdjbhfajlafdfaobjoklbamgkgcmohlm [2014-09-30]
CHR Extension: (Adblock Plus) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-17]
CHR Extension: (Copernic Desktop Search Connector) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnnbdaahphjgdgfhliignpepgnbnfomp [2014-10-27]
CHR Extension: (Google Search) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-17]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2014-10-29]
CHR Extension: ( Youtube Video Downloader) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpdhnpgppfmlpaollphakolfdpbhdjol [2014-08-31]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-08-31]
CHR Extension: (Skype Click to Call) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-09-28]
CHR Extension: (Google Wallet) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-17]
CHR Extension: (Docs PDF/PowerPoint Viewer (by Google)) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn [2014-08-17]
CHR Extension: (Gmail) - C:\Users\Haenschen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-17]
CHR HKLM\...\Chrome\Extension: [ehjldlodmkdlooagebfnaghgmkfccipn] - No Path
CHR HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Chrome\Extension: [cnnbdaahphjgdgfhliignpepgnbnfomp] - d:\programme festpld\ChromeConnector\ChromeConnector.crx [2014-11-04]
CHR HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Chrome\Extension: [ehjldlodmkdlooagebfnaghgmkfccipn] - No Path
CHR HKLM-x32\...\Chrome\Extension: [ehjldlodmkdlooagebfnaghgmkfccipn] - No Path
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

Opera: 
=======
OPR Extension: (FastestTube - YouTube Video Downloader) - C:\Users\Haenschen\AppData\Roaming\Opera Software\Opera Stable\Extensions\phahnhbgfdhgobenebnjbgmacgpbfaag [2014-08-31]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2013-09-17] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe [71680 2013-08-16] (ASUS Cloud Corporation) [File not signed]
R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [35328 2013-05-07] (Realtek Semiconductor Corporation) [File not signed]
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173792 2014-06-03] (Microsoft Corp.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [59392 2013-09-26] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [244696 2013-06-25] (CyberLink)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-24] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2014-10-25] (Google)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LoService; C:\Program Files\AxoNet Software GmbH\LightsOut\LightsOutService.exe [19584 2013-12-19] (AxoNet Software GmbH)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [549624 2015-02-05] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [351992 2015-02-05] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiChargerDT; C:\Windows\SysWow64\drivers\AiChargerDT.sys [14880 2012-10-18] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [469264 2013-06-26] (Intel Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-06] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [548056 2013-09-05] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2944216 2013-08-21] (Realtek Semiconductor Corporation                           )
R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102664 2014-05-19] ()
R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25992 2014-05-19] ()
R1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [700296 2014-05-19] ()
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-06 11:13 - 2015-02-06 11:13 - 00000000 ____D () C:\FRST
2015-02-06 09:31 - 2015-02-06 09:31 - 00000000 _____ () C:\Windows\WindowsUpdate.log
2015-02-05 21:12 - 2015-02-05 21:20 - 00000000 ____D () C:\Users\Haenschen\AppData\Local\Binkiland
2015-02-05 20:59 - 2015-02-06 11:00 - 00000324 _____ () C:\Windows\Tasks\Binkiland.job
2015-02-05 20:59 - 2015-02-06 07:42 - 00000000 ____D () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
2015-02-05 20:59 - 2015-02-05 20:59 - 00002662 _____ () C:\Windows\System32\Tasks\Binkiland
2015-02-05 20:59 - 2015-02-05 20:59 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\Binkiland
2015-02-05 20:59 - 2015-02-05 20:59 - 00000000 ____D () C:\Program Files (x86)\Strong Signal
2015-02-05 20:58 - 2015-02-05 20:58 - 00000000 ____D () C:\Program Files (x86)\WSE_Binkiland
2015-02-03 22:50 - 2015-02-04 06:46 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\DriverTurbo
2015-02-03 11:11 - 2015-02-03 11:11 - 00000715 _____ () C:\Users\Haenschen\Desktop\KaraFun Player.lnk
2015-02-03 11:11 - 2015-02-03 11:11 - 00000000 ____D () C:\ProgramData\Recisio
2015-02-03 11:11 - 2015-02-03 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KaraFun Player
2015-02-03 11:09 - 2015-02-03 11:09 - 01191200 _____ () C:\Users\Haenschen\Downloads\KaraFun - CHIP-Installer.exe
2015-02-03 09:35 - 2015-02-03 09:36 - 00056654 _____ () C:\Users\Haenschen\Downloads\Kontoauszug_20150203_1.zip
2015-02-02 16:10 - 2015-02-02 16:10 - 00002143 _____ () C:\Users\Haenschen\Desktop\Barchart Trader.lnk
2015-02-01 10:10 - 2015-02-01 10:10 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\Image-Line
2015-01-29 15:04 - 2015-01-29 15:04 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\Nitro PDF
2015-01-28 22:33 - 2015-01-28 22:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-28 17:50 - 2015-01-28 17:49 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-28 17:48 - 2015-01-28 17:49 - 30431144 _____ (Oracle Corporation) C:\Users\Haenschen\Downloads\jre-8u31-windows-i586.exe
2015-01-28 17:46 - 2015-01-28 17:46 - 93427112 _____ (Oracle Corporation) C:\Users\Haenschen\Downloads\jre-8u31-windows-x64.exe
2015-01-27 09:15 - 2015-01-27 09:15 - 00000796 _____ () C:\Users\Haenschen\Desktop\ASIO4ALL v2 Instruction Manual.lnk
2015-01-27 09:15 - 2015-01-27 09:15 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-01-27 09:14 - 2015-01-27 09:14 - 00000604 _____ () C:\Users\Public\Desktop\FL Studio 11 (64bit).lnk
2015-01-27 09:14 - 2015-01-27 09:14 - 00000604 _____ () C:\Users\Haenschen\Desktop\FL Studio 11 (64bit).lnk
2015-01-27 09:14 - 2015-01-27 09:14 - 00000592 _____ () C:\Users\Public\Desktop\FL Studio 11.lnk
2015-01-27 09:14 - 2015-01-27 09:14 - 00000592 _____ () C:\Users\Haenschen\Desktop\FL Studio 11.lnk
2015-01-27 09:14 - 2015-01-27 09:14 - 00000000 ____D () C:\Program Files\Common Files\VST2
2015-01-27 09:14 - 2015-01-27 09:14 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software
2015-01-27 09:14 - 2015-01-27 09:14 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2015-01-27 09:13 - 2015-01-27 09:13 - 00000000 ____D () C:\Users\Haenschen\Documents\Image-Line
2015-01-27 09:13 - 2015-01-27 09:13 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-01-27 09:13 - 2015-01-27 09:13 - 00000000 ____D () C:\Program Files\Image-Line
2015-01-27 09:13 - 2015-01-27 09:13 - 00000000 ____D () C:\Program Files (x86)\DSPRobotics
2015-01-27 09:05 - 2015-01-27 09:13 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2015-01-18 17:56 - 2015-01-18 17:56 - 00000000 ____D () C:\Users\Haenschen\dwhelper
2015-01-16 07:01 - 2015-01-16 07:01 - 00120242 _____ () C:\Users\Haenschen\Downloads\e-documents 2015-1-16-6-54-25.zip
2015-01-16 07:01 - 2015-01-16 07:01 - 00119874 _____ () C:\Users\Haenschen\Downloads\e-documents 2015-1-16-6-54-38.zip
2015-01-16 07:00 - 2015-01-16 07:00 - 00120554 _____ () C:\Users\Haenschen\Downloads\e-documents 2015-1-16-6-53-52.zip
2015-01-16 07:00 - 2015-01-16 07:00 - 00115565 _____ () C:\Users\Haenschen\Downloads\e-documents 2015-1-16-6-54-9.zip
2015-01-16 06:59 - 2015-01-16 07:00 - 00115623 _____ () C:\Users\Haenschen\Downloads\e-documents 2015-1-16-6-53-20.zip
2015-01-14 09:33 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 09:33 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 09:33 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-01-14 09:33 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 09:33 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-01-14 09:33 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-01-14 09:33 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-14 09:33 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2015-01-14 09:33 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-01-14 09:33 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-14 09:33 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2015-01-14 09:33 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-01-14 09:33 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-01-14 09:33 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 09:33 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-01-14 09:33 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2015-01-14 09:33 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2015-01-14 09:33 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-14 09:33 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-14 09:33 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-14 09:33 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-01-14 09:33 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-01-14 09:33 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-01-14 09:33 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-14 09:33 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-14 09:33 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-14 09:33 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-01-14 09:33 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-01-14 09:33 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-01-14 09:33 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-14 09:33 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-08 10:20 - 2015-01-08 10:20 - 00000000 ____D () C:\ProgramData\Gyazo

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-06 11:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-02-06 10:58 - 2014-08-17 21:37 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-06 10:51 - 2014-08-28 15:26 - 00000604 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3036470256-2613378711-3773960124-1002.job
2015-02-06 10:24 - 2014-07-09 18:29 - 00000000 ____D () C:\Jts
2015-02-06 09:00 - 2014-07-09 18:02 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3036470256-2613378711-3773960124-1002
2015-02-06 08:57 - 2013-12-21 05:34 - 02742364 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-06 08:57 - 2013-09-13 21:45 - 00802234 _____ () C:\Windows\system32\perfh00C.dat
2015-02-06 08:57 - 2013-09-13 21:45 - 00159184 _____ () C:\Windows\system32\perfc00C.dat
2015-02-06 08:57 - 2013-09-13 21:22 - 00765378 _____ () C:\Windows\system32\perfh007.dat
2015-02-06 08:57 - 2013-09-13 21:22 - 00159696 _____ () C:\Windows\system32\perfc007.dat
2015-02-06 08:53 - 2014-07-10 06:05 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-06 08:52 - 2014-09-30 15:58 - 00000000 ____D () C:\Users\Haenschen\OneDrive
2015-02-06 08:52 - 2014-07-09 17:57 - 00898573 _____ () C:\Users\Haenschen\AppData\Local\BTServer.log
2015-02-06 08:50 - 2014-08-17 21:37 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-06 08:50 - 2014-01-25 13:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-06 08:50 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-06 06:54 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-02-06 06:44 - 2014-07-09 18:01 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C6841A14-5519-4626-9B23-774F6AF40BEB}
2015-02-06 06:40 - 2014-11-18 15:44 - 00000000 ____D () C:\ProgramData\LightsOut
2015-02-06 06:40 - 2014-07-09 17:57 - 00000000 ____D () C:\Users\Haenschen
2015-02-05 21:33 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-02-05 21:22 - 2014-08-17 21:37 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-05 20:58 - 2014-11-11 07:28 - 10934856 _____ (LastPass) C:\Users\Haenschen\Downloads\lastpass.exe
2015-02-05 18:00 - 2014-11-14 07:50 - 00000494 _____ () C:\Windows\Tasks\ParetoLogic Registration3.job
2015-02-05 17:54 - 2014-12-03 12:34 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\vlc
2015-02-04 06:53 - 2014-08-17 21:37 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-04 06:53 - 2014-08-17 21:37 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 22:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-03 20:31 - 2014-07-14 12:16 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2014-07-14 12:16 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 15:06 - 2014-12-05 19:47 - 00707072 ___SH () C:\Users\Haenschen\Downloads\Thumbs.db
2015-02-02 16:10 - 2014-08-13 18:17 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\JWrapper-Barchart
2015-02-02 16:10 - 2014-08-13 18:17 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\com.barchart.platform.release
2015-02-01 16:39 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-29 21:24 - 2014-10-19 11:00 - 00000000 ____D () C:\Users\Haenschen\AppData\Roaming\Spotify
2015-01-29 20:20 - 2014-10-19 11:00 - 00000000 ____D () C:\Users\Haenschen\AppData\Local\Spotify
2015-01-29 14:19 - 2014-09-01 05:48 - 00000000 ____D () C:\Users\Haenschen\AppData\Local\Adobe
2015-01-29 07:39 - 2014-12-24 11:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-28 17:50 - 2014-07-09 18:34 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-28 17:49 - 2014-12-22 18:11 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-28 17:48 - 2014-07-09 18:43 - 00000000 ____D () C:\Program Files\Java
2015-01-28 17:47 - 2014-12-22 18:12 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-01-25 17:48 - 2014-08-28 15:26 - 00003612 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3036470256-2613378711-3773960124-1002
2015-01-14 12:25 - 2014-07-11 17:54 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 12:20 - 2014-07-11 17:54 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-08 10:20 - 2014-09-29 06:20 - 00003762 _____ () C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
2015-01-08 10:20 - 2014-09-29 06:19 - 00001005 _____ () C:\Users\Public\Desktop\Gyazo.lnk
2015-01-08 10:20 - 2014-09-29 06:19 - 00001005 _____ () C:\Users\Public\Desktop\Gyazo GIF.lnk
2015-01-08 10:20 - 2014-09-29 06:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
2015-01-08 10:20 - 2014-09-29 06:19 - 00000000 ____D () C:\Program Files (x86)\Gyazo

==================== Files in the root of some directories =======

2014-07-09 17:57 - 2015-02-06 08:52 - 0898573 _____ () C:\Users\Haenschen\AppData\Local\BTServer.log
2014-11-26 12:28 - 2014-11-26 12:28 - 0000831 _____ () C:\Users\Haenschen\AppData\Local\recently-used.xbel
2013-12-21 05:37 - 2013-12-21 05:37 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-31 11:59

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

scan
by
from
Mode:



Security

an

Windows
Windows

Installed

the

2.8.6
KillDisk
Digital
Flash
Reader
Suite
Micro
Micro
Software
(HKLM-x32\...\ASIO4ALL)
Easy
Music
Music
ROG
(HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B})
(x32
(HKLM-x32\...\Asus
(HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A})
(HKLM\...\CCleaner)
EAP-FAST
LEAP
PEAP
WebEx
Online
(HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1)
Desktop
Desktop
PhotoDirector
PowerDirector
PowerDirector
(x32
&amp
(HKLM-x32\...\{0C84E634-EB68-4A54-B21E-A05EC87A4CC5})
SQL
Studio
FL
(x32
Audio
PrintScreen
de
de
de
2.8.14
Desktop
Earth
Update
Update
6.4.11.2273
2.3
CL
Download
(HKLM-x32\...\ImgBurn)
Management
Network
Rapid
8
8
Player
for
for
SetPoint
Anti-Malware
Office
SkyDrive
SQL
Visual
Visual
Visual
Visual
Visual
Visual
Visual
Visual
Visual
Visual
Visual
Maker
Firefox
Maintenance
4
Reader
3D
3D
GeForce
Grafiktreiber
HD-Audiotreiber
PhysX-Systemsoftware
15
15
15
4.1.1
(HKLM-x32\...\{2C31929A-D6AB-4D0B-ABF9-4812A045CE97})
Backup
PC
3
(HKLM-x32\...\Q-Dir)
foto
Bluetooth
High
Wireless
(HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D})
2
Streaming
Click
6.22
(HKLM\...\Speccy)
(HKU\S-1-5-21-3036470256-2613378711-3773960124-1002\...\Spotify)
Signal
Level
Workstation
(Version:
8
media
Audio-Editor
(HKLM-x32\...\WebStorage)
Live
5.11
(HKLM-x32\...\WSE_Binkiland)
φωτογραφιών
(x32
(x32

Custom

an

HKU\S-1-5-21-3036470256-2613378711-3773960124-1002_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32
HKU\S-1-5-21-3036470256-2613378711-3773960124-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32

Restore

12:37:04
12:15:45
07:31:38

Hosts

needed

14:25






Scheduled

an

{0E24D846-57B8-4742-AC70-60A30A39EC57}
{141DB341-3232-4F71-B294-F5C84EB332E0}
{1ABAB3FB-3468-407A-ADF3-582C7403AC54}
{285483DE-28CF-4CF1-B0DC-9A88B1682826}
{41E0ADAD-A616-4623-9444-D01B0DCB58D1}
{45260221-B342-4ACD-9861-0ED4057B3CED}
{48C009EC-8000-4631-B0ED-527C7FCB531E}
{5B3DB5D5-6D76-4F68-9C4E-EEB8B7FF4E95}
{5FB32390-8214-4F69-803D-A155FC29B660}
{6D947055-12CD-4CA2-B126-3A81E999D522}
{6EA9E01B-7B74-4FAC-9577-237F54B717DF}
{6F37BFF2-E200-46EC-B329-3E597A0608FC}
{77E3EFE9-5584-4AD7-9074-E34E5799FEB1}
{77EAA15F-BC3E-465D-BF21-ED7EFD698249}
{8CD39E1D-2BE6-41CB-A06F-822D585514D8}
{BF2239D4-DA79-4C0E-946D-B22F234C232C}
{C6D7A547-4652-4DFF-A7FB-87187B42E6E6}
{CE82311C-04AA-43B7-8EC2-15FB6EFBD4E2}
{D6C57CE6-D834-422F-BF08-938C05B2CF53}
{DDE8225B-0639-4498-B400-D0CE272E80CC}
{E36FA210-56F3-4BE4-A7F9-89C05AC3B399}
{FF168CA8-E840-4231-AFF7-FCEFF40B8CBD}
C:\Windows\Tasks\Binkiland.job
C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3036470256-2613378711-3773960124-1002.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\ParetoLogic
C:\Windows\Tasks\ParetoLogic
C:\Windows\Tasks\PC
C:\Windows\Tasks\PC

Loaded

13:55
06:33
11:20
05:58
18:49
17:49
13:53
05:49
14:49
14:49
23:24
13:53
05:49
13:53
13:53
05:49
05:49
13:53
22:33
06:10
19:18
19:18

Alternate

an

C:\Users\Haenschen\OneDrive:ms-properties
C:\Users\Haenschen\Downloads\Ablesung

Safe

an

Err:510
Err:510

EXE

an


Other

there

Panel\Desktop\\Wallpaper

MSCONFIG/TASK

there

Err:510
Err:510
Err:510
Err:510
Err:510
Err:510

Accounts:

(S-1-5-21-3036470256-2613378711-3773960124-500
(S-1-5-21-3036470256-2613378711-3773960124-501
(S-1-5-21-3036470256-2613378711-3773960124-1002
(S-1-5-21-3036470256-2613378711-3773960124-1004

Faulty



Guid:


:
To


Event

errors:

(02/06/2015
BITSC:\Windows\System32\bitsperf.dll8

(02/06/2015
Fehler
für
Konflikt
1:
2:

(02/06/2015
Subscription

(02/05/2015
Bei

(02/05/2015
Bei

(02/05/2015
Bei

(02/05/2015
Bei

(02/05/2015
Fehler
für
Konflikt
1:
2:

(02/05/2015
Fehler
für
Konflikt
1:
2:

(02/05/2015
Das


errors:

(02/06/2015
Das

(02/06/2015
Das

(02/06/2015
Das

(02/05/2015
Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca

(02/05/2015
Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca

(02/05/2015
Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca

(02/05/2015
Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca

(02/05/2015
{1B1F472E-3221-4826-97DB-2C2324D389AE}

(02/05/2015
{4545DEA0-2DFC-4906-A728-6D986BA399A9}

(02/05/2015
{4545DEA0-2DFC-4906-A728-6D986BA399A9}


Office

(02/06/2015
BITSC:\Windows\System32\bitsperf.dll8

(02/06/2015
C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Program

(02/06/2015
Subscription

(02/05/2015
microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141

(02/05/2015
microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141

(02/05/2015
microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141

(02/05/2015
microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141

(02/05/2015
C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Program

(02/05/2015
C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Program

(02/05/2015
Windows

Hi Schrauber,
Es hat einen riesigen Buchstabensalat in die Dateien ausgespuckt!
Ich hoffe dass ich alles richtig gemacht habe.
Tatsächlich hat es oben noch immer Zeilen wo das BIKINILAND vorkommt.
Gruss Haenschen

Windows 8.1 Bekämpfung Bikiniland Suchm. nachher Monitor schwarz

Plagegeister aller Art und deren Bekämpfung: Windows 8.1 Bekämpfung Bikiniland Suchm. nachher Monitor schwarz

Windows 8.1 Bekämpfung Bikiniland Suchm. nachher Monitor schwarz

Ähnliche Themen: Windows 8.1 Bekämpfung Bikiniland Suchm. nachher Monitor schwarz