| |
| |||||||
Log-Analyse und Auswertung: WIN7 - PC langsam, Internetabbrüche, viele BefundeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
21.03.2015, 17:08
| #1 |
 |  WIN7 - PC langsam, Internetabbrüche, viele Befunde Hallo, hatte die letzten Tage vermehrt Probleme mit dem PC. Der PC war sehr langsam / hat keine Leistung gebracht, die Internet-Verbindung wurde ohne ersichtlichen Grund getrennt (WPA-Schlüssel musste neu eingegeben werden) oder die Windows-Anmeldung hat erst nach der 3. Passwort-Eingabe funktioniert. Hatte zuerst Malewarebytes durchlaufen lassen und dann alles wie im Anleitungs-Thread. Hoffe mir kann jemand helfen. Logs waren für den Thread zu lang, also hab ich sie hochgeladen. |
|
21.03.2015, 17:11
| #2 |
| /// the machine /// TB-Ausbilder    | WIN7 - PC langsam, Internetabbrüche, viele Befunde Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
21.03.2015, 17:16
| #3 |
| | WIN7 - PC langsam, Internetabbrüche, viele Befunde Alles klar
__________________ Malewarebytes: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 21.03.2015 Suchlauf-Zeit: 13:39:07 Logdatei: MalewarebytesLog.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.03.21.04 Rootkit Datenbank: v2015.02.25.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jibi Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 381232 Verstrichene Zeit: 23 Min, 26 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 97 PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [8f997bcd4941c07672662dfe1ce757a9], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [8f997bcd4941c07672662dfe1ce757a9], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [d652ed5b2e5c92a4e4e4bba37e851be5], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [d652ed5b2e5c92a4e4e4bba37e851be5], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8B3372D0-09F0-41A5-8D9B-134E148672FB}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8B3372D0-09F0-41A5-8D9B-134E148672FB}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceGongIE.PriceGongCtrl.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceGongIE.PriceGongCtrl, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceGongIE.PriceGongCtrl, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceGongIE.PriceGongCtrl.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceFactorIE.PriceGongBHO.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\PriceFactorIE.PriceGongBHO, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceFactorIE.PriceGongBHO, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PriceFactorIE.PriceGongBHO.1, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1631550F-191D-4826-B069-D9439253D926}, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{39CB8175-E224-4446-8746-00566302DF8D}, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc.1, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\esrv.deltaESrvc, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.deltaESrvc, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.deltaESrvc.1, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd.1, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltadskBnd, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltadskBnd, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltadskBnd.1, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr.1, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaHlpr, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaHlpr, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaHlpr.1, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1231839B-064E-4788-B865-465A1B5266FD}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2DAC2231-CC35-482B-97C5-CED1D4185080}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{57C91446-8D81-4156-A70E-624551442DE9}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{97DD820D-2E20-40AD-B01E-6730B2FCE630}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B177446D-54A4-4869-BABC-8566110B4BE0}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F05B12E1-ADE8-4485-B45B-898748B53C37}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{4599D05A-D545-4069-BB42-5895B4EAE05B}, , [88a0e1672e5cf54100c7aab43dc6d62a], PUP.Optional.Babylon.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [d85005431872f046d38b2ff67c875ea2], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}, , [7fa9a8a0beccc2744c70b1adce35b34d], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PriceGong, , [04242028bfcbf244c8c85d2ed92860a0], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Delta Chrome Toolbar, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\PriceGongIE.DLL, , [dd4bdf697218c47234c65ca88282a858], PUP.Optional.MeinGutscheincode.A, HKLM\SOFTWARE\WOW6432NODE\Mein Gutscheincode, , [3deb3d0be6a488aeb88e2dd0b152669a], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PriceGongIE.DLL, , [2dfb0f399af045f128d203013bc92fd1], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\DELTA\DELTA\Instl, , [ae7ac484dbafea4cf56524f90ff6ae52], PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bkomkajifikmkfnjgphkjcfeepbnojok, , [ea3e69dfbfcb42f430cca0643dc755ab], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, , [33f54008543633034bb812bf61a2d927], PUP.Optional.DataMngr.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [69bf97b11c6e72c478b0f5236e97af51], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [c06815331a70e74f521c50dcbf46758b], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [6dbb99af9af0a88ec9806c5aed16e61a], PUP.Optional.Babylon.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, , [b0787fc9206a5adc4ce0b564d13453ad], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA, , [80a848008efc55e112b9ab6bf411728e], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG, , [bd6baf997e0c71c5eb2a38e713f28f71], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [4bdd62e61b6f55e160ec07118085b44c], PUP.Optional.BProtector.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [39ef0d3b2c5e9f9786e95fbc947148b8], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaappCore.1, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\delta.deltaappCore, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaappCore, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\delta.deltaappCore.1, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\d, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\d, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\delta, , [2cfc69dfdfabf2443898175b4ab9aa56], Registrierungswerte: 7 PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{82E1477C-B154-48D3-9891-33D83C26BCD3}, Delta Toolbar, , [7fa9e068f892bf77e4e4c29b61a2f50b] PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{82E1477C-B154-48D3-9891-33D83C26BCD3}, , [0f19fa4e46440d29e2e6203d857ea858], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA|tlbrSrchUrl, , [80a848008efc55e112b9ab6bf411728e], PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA|lastB, hxxp://search.babylon.com/?affID=110819&babsrc=HP_ss&mntrId=a0ed2c59000000000000002586dcea82, , [38f02a1edfab76c0d046aa75e4219868] PUP.Optional.Delta.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DELTA\DELTA\IESTRG|tlbrsrchurl, , [bd6baf997e0c71c5eb2a38e713f28f71], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0D1N1N1B1K1L1JtG0ZtH1O, , [4bdd62e61b6f55e160ec07118085b44c] PUP.BProtector, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, , [e24684c4c0cad6602208938509fca759], Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 27 PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis, , [e048e266f49683b31cfb16ea74904fb1], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Delta, , [a58368e0a9e1ae88ae1ec650ad58b54b], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\bh, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy, , [cb5d7ecaccbed95d8f6fd49e54af7987], PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98, , [cb5d7ecaccbed95d8f6fd49e54af7987], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Delta, , [b37555f3deac0d290e0dfd76da296799], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Delta\delta, , [b37555f3deac0d290e0dfd76da296799], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.21.5, , [b37555f3deac0d290e0dfd76da296799], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\ext, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\tmp, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong, , [df49064293f75ed824478fea30d358a8], PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic, , [c5637bcd107ad3633bf83e3cf1127888], PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic\Softonic, , [c5637bcd107ad3633bf83e3cf1127888], PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic\Softonic\1.8.19.3, , [c5637bcd107ad3633bf83e3cf1127888], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar, , [30f8bf89a0eac76f55d4f88cb251ee12], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar\BabylonToolbar, , [30f8bf89a0eac76f55d4f88cb251ee12], PUP.Optional.BabSolution.A, C:\Users\Jibi\AppData\Roaming\BabSolution\CR, , [a880d375f199f541e8d571186d96bb45], PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, , [e4444cfcfd8dda5cf150800e3dc6ac54], PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch, , [01272a1e8dfd1b1b9cd9b7de7c879e62], PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch, , [01272a1e8dfd1b1b9cd9b7de7c879e62], PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch\1.3.12.9, , [01272a1e8dfd1b1b9cd9b7de7c879e62], PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong, , [1d0b99afbfcb2d09cabffca30af9a25e], PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.6.11, , [1d0b99afbfcb2d09cabffca30af9a25e], Dateien: 183 PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll, , [0028ab9d6426fc3a2fd28b9c06fd8e72], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltasrv.exe, , [bd6bdb6d692154e2a07538f41be8639d], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll, , [7fa9e068f892bf77e4e4c29b61a2f50b], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll, , [32f61335602a6ec89f2863faa55eeb15], PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\uninst.exe, , [04242028bfcbf244c8c85d2ed92860a0], PUP.Optional.Conduit.A, C:\Users\Jibi\AppData\Local\Temp\64DE.tmp, , [230593b5c1c934024be14effd52c9070], PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe, , [0424cb7d177368ce94e7d3251ae708f8], PUP.Optional.Installrex, C:\Users\Jibi\AppData\Local\Temp\UIQDb+Ek.exe.part, , [27012127d3b791a5daef84b8df22e61a], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\Local\Temp\che6DFF.tmp, , [aa7e4afef29881b5f799cfbc42bfe41c], PUP.Optional.Installrex, C:\Users\Jibi\AppData\Local\Temp\ugZk2I7I.exe.part, , [36f221275c2ea98d38913903c53c639d], PUP.Optional.MediaTech.A, C:\Users\Jibi\AppData\Local\Temp\5C0C.tmp, , [77b11731f59590a695ce7e37b4518b75], PUP.Optional.Conduit.A, C:\Users\Jibi\AppData\Local\Temp\ct3297265\ism.exe, , [d553ae9a6b1f6fc7b0adc8ec4ab75ca4], PUP.Optional.BabSolution.A, C:\Users\Jibi\AppData\Local\Temp\bus7BAC\BUSolution.dll, , [d94ffd4be7a31e18acf82d0b907158a8], PUP.Optional.CRX.A, C:\Users\Jibi\AppData\Local\Temp\bus8001\CrxUpdater_d.exe, , [42e6bb8d8cfe4ee8d308f998fb0aac54], PUP.Optional.CRX.A, C:\Users\Jibi\AppData\Local\Temp\bus839B\CrxUpdater_d.exe, , [d3552f195337bf7713c8d5bc46bfaa56], PUP.Optional.KeepMySearch.A, C:\Users\Jibi\AppData\Local\Temp\busB50B\join.exe, , [e34549ff3b4f50e6f00f449e3bca1ee2], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\BExternal.dll, , [3fe91a2e8bffb5813a3ac65d32cef50b], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\CrxInstaller.dll, , [e54374d4d9b1063097be1035ae5303fd], PUP.Optional.Delta, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\MyDeltaTB.exe, , [dd4bde6a67231125d47264d1e21fa35d], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Local\Temp\22C3B2CA-BAB0-7891-909F-322CCFA03C67\Latest\Setup.exe, , [1513f4546723b28477531806ef11e11f], PUP.Optional.Buenosearch.A, C:\Users\Jibi\AppData\Local\Temp\bus3AA8\bbjoin.ex_, , [2008e563612967cf5bd8db818f71c739], PUP.Optional.CRX.A, C:\Users\Jibi\AppData\Local\Temp\bus7081\CrxUpdater_d.exe, , [cb5d4ff9a8e257df4b905e3365a04ab6], PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient Updater, , [0e1ae761503afb3b6c0fe2cff90a17e9], PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient, , [190f3d0b503a63d3fe7fcae7a75c17e9], PUP.Optional.BitGuard.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BitGuard.xml, , [38f022267c0e50e66c6f706f3fc459a7], PUP.Optional.BrowserDefender.A, C:\Windows\System32\Tasks\BrowserDefendert, , [1414f058ee9c3afcca7fb8284bb86e92], PUP.Optional.Babylon.A, C:\Windows\System32\Tasks\EPUpdater, , [a484f4545832a591cd7e756bf50ed62a], PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\softonic.xml, , [34f47eca6c1e23139d4303f17093c33d], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\babylon.xml, , [36f207413456a19537956c8b0ff4cd33], PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\bProtector_extensions.sqlite, , [70b82e1ac1c978befeda7c7bb54e6d93], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\delta.xml, , [062233156624d95d06f8b93e8083e21e], PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\speedtestanalysis.crx, , [e048e266f49683b31cfb16ea74904fb1], PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\DeskTopIcon.ico, , [e048e266f49683b31cfb16ea74904fb1], PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\install_helper.exe, , [e048e266f49683b31cfb16ea74904fb1], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Delta\sqlite3.dll, , [a58368e0a9e1ae88ae1ec650ad58b54b], PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data, , [0c1c1137800a0f276f0159c248bd6799], PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences, , [3cecd276c3c7290d1061869562a33ec2], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\Delta.ico, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\BabMaint.exe, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\BUSolution.dll, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\chu.js, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\GUninstaller.exe, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\SetupParams.ini, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\sqlite3.dll, , [45e3aa9ed0ba2d098c749a9ca36203fd], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaApp.dll, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaEng.dll, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\GUninstaller.exe, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.Delta.A, C:\Program Files (x86)\Delta\delta\1.8.21.5\uninstall.exe, , [2cfc69dfdfabf2443898175b4ab9aa56], PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe, , [cb5d7ecaccbed95d8f6fd49e54af7987], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\1.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\1728.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\17807.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\2229.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\2260.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\8130.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\a.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\b.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\c.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\d.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\e.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\f.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\g.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\h.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\i.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\j.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\k.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\l.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\m.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\mru.xml, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\n.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\o.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\p.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\q.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\r.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\s.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\t.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\u.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\v.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\w.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\wlu.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\x.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\y.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\Data\z.txt, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\Users\Jibi\AppData\LocalLow\PriceGong\ext\ext_e.dll, , [ef396cdc1d6d152166fdd0a6030048b8], PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Contact Us.lnk, , [df49064293f75ed824478fea30d358a8], PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Help.lnk, , [df49064293f75ed824478fea30d358a8], PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Homepage.lnk, , [df49064293f75ed824478fea30d358a8], PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\Uninstall PriceGong.lnk, , [df49064293f75ed824478fea30d358a8], PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Local\Temp\mt_ffx\Softonic\Softonic\1.8.19.3\softonic.xpi, , [c5637bcd107ad3633bf83e3cf1127888], PUP.Optional.BabSolution.A, C:\Users\Jibi\AppData\Roaming\BabSolution\CR\Delta.crx, , [a880d375f199f541e8d571186d96bb45], PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService\repository.xml, , [e4444cfcfd8dda5cf150800e3dc6ac54], PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.6.11\PriceGong.crx, , [1d0b99afbfcb2d09cabffca30af9a25e], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences, Gut: (), Schlecht: ( "homepage" : "hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931",), ,[f53311376327f046dd2c6ac69c6a05fb] PUP.Optional.CrossRider.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "13fa612b836a5abd9074469d5c7528f7");), ,[0a1ef256fa90e84e8006230cb6508f71] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.admin", false);), ,[f53332169feb10264055181727dfc63a] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you m), ,[55d34cfc5d2dad89eda8260945c1738d] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you), ,[ec3c9dab17734de94d48a68913f338c8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make chan), ,[39efee5a1a7078bebfd6be71fb0bb64a] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (/* Do not edit this file. * * If you make chan), ,[b96f63e5afdb2e0899fcd956fc0a4ab6] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you ), ,[ac7ce36591f9c373d6bf9f90cd395ea2] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you m), ,[c2662e1af3977eb899fca38ce81e3ac6] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences /* Do not edit this file. * * If you make changes to this fil), ,[11171137f29822142372e748ed1921df] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file. * * If you make changes to this file whil), ,[68c0e86057339f972f6631fe8482f20e] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make ch), ,[af79c97fc4c6f83ee5b01b14c44247b9] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you ), ,[9098fa4e8505ef47563fe946c2448779] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make changes to), ,[e14763e599f183b325701b1457af8f71] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (not edit this file. * * If you make changes to this fil), ,[a682bb8d94f69e98662fb27df90dd828] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s /* Do not edit this file. * * If you make c), ,[86a20a3e4545092d8d08af80d23443bd] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you make changes to this file while the appli), ,[f434e7617614a3937a1b43ec7a8c38c8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( * If you make changes to this file while the applicati), ,[e93fb593345645f18312fd3225e10bf5] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you make changes t), ,[40e86fd9602a10268e07bd729e686799] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make changes to this ), ,[ad7b2325157535018b0ae24d679fb848] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make ch), ,[f236db6d7c0e0f27c0d584ab1aec4db3] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (Preferences /* Do not edit this file. * * If), ,[1315e167eaa047ef2a6b66c9e81ea45c] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences /* Do not edit this file. * * If you make), ,[151300487e0c3006c1d4a58ab254dd23] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es /* Do not edit this file. * * If you make cha), ,[1414ea5e1b6f979f4e4799964cbac838] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you make), ,[4bdd1d2b375375c1761fb47beb1bd22e] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you m), ,[9593f3550a8067cf266f82ad36d059a7] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you ), ,[e048e563bfcb5bdb405576b98383ff01] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences /* Do not edit this file. * * If you make), ,[1315c583d2b8fa3cb7def23d8e788a76] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you make changes to t), ,[2bfdb98fbad00d297c19ee4133d38878] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file. * * If you make changes to th), ,[0127d8701a70a88eafe63df221e5aa56] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make cha), ,[a7819dab2a606cca3362c6698b7bca36] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you mak), ,[d652b09829618ea8890c30ffdd29fe02] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you make changes ), ,[e5431830cbbfa98d1b7a36f96d99bf41] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file. * * If you make changes to this file while the applicati), ,[e24668e0afdb67cf266fc16e10f6b34d] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (file. * * If you make changes to this file while the application is running,), ,[0028d870642635010c89ba75b55119e7] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (his file. * * If you make changes to this file while th), ,[03257bcd2367a195f1a4a28dee1841bf] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s /* Do not edit this file. * * If you make change), ,[ad7b22264941ee48cec70a2525e1e21e] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make c), ,[41e7ba8ea7e33df952431e11cd3930d0] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwritten ), ,[71b744041b6fad8974218fa08a7cb947] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ation is running, * the changes will be overwritten when the ap), ,[c4640e3ac8c21a1c30657fb0e81e2cd4] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file. * * If you make changes to this), ,[1e0ae0686d1d63d33263e14e0bfb59a7] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make changes), ,[77b1ae9a9febd4622273dc53de28b050] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you make), ,[d94f4305fa9060d64b4a4fe08a7cb947] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you make cha), ,[7eaa093f8efcbd7999fc37f85ea837c9] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es /* Do not edit this file. * * If you make changes to this ), ,[220683c53456f93da6effe312bdb51af] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (o not edit this file. * * If you make changes to this f), ,[1117da6e4446d561aaeb7ab5bb4bab55] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), ,[ec3c25231b6fdb5b3864919ed234b34d] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * ), ,[2ff96ade8efc48ee5844230cc73f6d93] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make changes to this file ), ,[a880470136540c2a2973fc3308fe2fd1] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (e. * * If you make changes to this file while t), ,[ed3b5debed9d50e699031718e91d53ad] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you), ,[0820ee5ad3b7f2449dff002f43c3eb15] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences /* Do not edit this file. * * If ), ,[2503f2564149d4623a62a28d0afc6f91] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If), ,[6cbcec5cb8d2ad895c40f8375aacc739] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If), ,[f434a5a33357f83edebe052a7d8921df] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es /* Do not edit this file. * * If y), ,[80a80345078367cfccd0d15ed135847c] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be ove), ,[6cbc80c8e6a4b680ff9dac839f676e92] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (tion is running, * the changes will be overwritten when the appl), ,[0c1c56f2dcae8fa7c3d9d659cb3bb44c] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (t edit this file. * * If you make changes to this file while the app), ,[ab7d82c694f69c9a524a44eb9472f709] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file. * * If you make changes to this fil), ,[ea3e1b2ddcae85b14656e54ade286d93] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwritten wh), ,[63c54305e4a60333c9d3c669f4127b85] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ion is running, * the changes will be overwr), ,[2404fe4adab0e74f732972bd21e523dd] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwrit), ,[da4e79cf9febca6c465644eb986e0df3] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (n is running, * the changes will be overwritten w), ,[bf696adeacdee551d8c482ad7c8a639d] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make ), ,[ce5a3612711961d55349959a07ffc23e] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s /* Do not edit this file. * * If you m), ,[998fde6af09a043294085dd212f437c9] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences /* Do not edit this file. * * If y), ,[ec3c9dab593170c6c3d938f75caad22e] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you make changes to this f), ,[bb6d9aaee7a3b3834656fe31f51134cc] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file. * * If you make changes to this file while ), ,[c860a99f8efc7fb7465646e9d036758b] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwritten when the app), ,[e24657f1741626105b41c26d6b9b02fe] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s running, * the changes will be overwritten whe), ,[1c0cb7915e2caf877a2250dfdb2b3fc1] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you make change), ,[47e1ae9ad7b3e3532a72062912f44db3] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file. * * If you make changes), ,[d7512b1d09812412b3e968c78d799967] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=13&cc=&mi=a0ed2c59000000000000002586dcea82");), ,[2ff94701b1d954e20c983af56d990000] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (sesensitive", 1); user_pref("accessibility.typeaheadfind.flashBar", 0); user_pref("app.update.lastUpdateTime.addon-background-update-timer", ), ,[0e1a6fd9b4d606306e36d45b15f14fb1] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ing, * the changes will be overwritten when the application exits. * * To make a manual change to preferences, you can visit the URL about:), ,[57d1b593e6a46bcbffa52c034fb7fd03] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (te.lastUpdateTime.addon-background-update-timer", 1426939096); user_pref("app.update.lastUpdateTime.background-update-timer", 1426939337); user_pr), ,[bb6d86c2c6c45adc2183240b3dc9ac54] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819");), ,[b27653f55733fe38a2912f0029ddb24e] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lbar_i.babTrack", "affID=110819"); user_pref("exten), ,[1018cf79ddad043249ea0728778f11ef] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ons.BabylonToolbar_i.babTrack", "affID=110819"); user), ,[b474f05808827bbb0c27a48b44c253ad] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (s.BabylonToolbar_i.babTrack", "affID=110819"); user_pref("extensions.BabylonToo), ,[f038dd6b2a6058de1c17e24db25428d8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (k", "affID=110819"); user_pref("extensions.BabylonToolbar_i.babExt", ""); user_pre), ,[ec3c5aee5e2cf4423af9e34c4db92cd4] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: ("affID=110819"); user_pref("extensions.BabylonToolbar_i.ba), ,[af792325cdbd979fbc7731fe4db9b050] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819"); user_pref("exte), ,[df49f553ddad5cdafe354de2e81e04fc] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (bylonToolbar_i.babTrack", "affID=110819"); user_pref("exte), ,[ad7b82c60f7b3600fd36ea455aac7d83] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819"); user_pref("extensions.Bab), ,[1e0a60e8f793a591969d6ec112f44cb4] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ar_i.babTrack", "affID=110819"); user_pref("extensions.Baby), ,[b37592b69ded142242f1b778887e936d] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lonToolbar_i.babTrack", "affID=110819"); user_pref("extensions.B), ,[3aee321628627eb8201344ebaa5cd729] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (olbar_i.babTrack", "affID=110819"); user_pref("extensio), ,[f63270d8a8e2ba7c3ef51718e026f30d] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (BabylonToolbar_i.babTrack", "affID=110819"); user_pref("), ,[9a8e4cfcc2c878be8da63df233d36f91] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (abylonToolbar_i.babTrack", "affID=110819"); user_pref(), ,[4ddb6eda5c2e0c2a88abac834abc31cf] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (.BabylonToolbar_i.babTrack", "affID=110819"); user_pref(), ,[9d8b3b0d6f1b979f9c974ce32ed8e61a] Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Jibi at 2015-03-21 16:11:17
Running from C:\Users\Jibi\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Akamai NetSession Interface (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.026 - ASUSTek Computer Inc.)
Avid Pro Tools SE 8.0.3 (HKLM-x32\...\{371F27A1-9502-4762-AE97-1C1938B21055}) (Version: 8.0.3 - Digidesign, ein Geschäftsbereich von Avid Technology, Inc.)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C1801}) (Version: 12.24.1.234 - APN, LLC)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Delta Chrome Toolbar (HKLM-x32\...\Delta Chrome Toolbar) (Version: - Visual Tools) <==== ATTENTION
Delta toolbar (HKLM-x32\...\delta) (Version: 1.8.21.5 - Delta) <==== ATTENTION
Druckerdeinstallation für EPSON XP-215 217 Series (HKLM\...\EPSON XP-215 217 Series) (Version: - SEIKO EPSON Corporation)
DVD Architect Studio 5.0 (HKLM-x32\...\{04DF4A51-DE2A-11E0-9AB5-F04DA23A5C58}) (Version: 5.0.156 - Sony)
Epson Easy Photo Print 2 (HKLM-x32\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8A17C27D-0325-400C-8AA9-DAA6B16CBD74}) (Version: 2.40.0009 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX130 Series Printer Uninstall (HKLM\...\EPSON SX130 Series) (Version: - SEIKO EPSON Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Facebook Video Calling 1.0.0.7339 (HKLM-x32\...\{EEA5F1E7-E934-4F4E-85C8-8FEC9CCE525C}) (Version: 1.0.7339 - Skype Limited)
Facebook Video Calling 1.0.0.8953 (HKLM-x32\...\{1D7CE340-70C3-4848-BCCF-215950328A4C}) (Version: 1.0.8953 - Skype Limited)
ffdshow [rev 2975] [2009-05-28] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
FILSHtray (HKLM-x32\...\{0844CC2A-512E-4BA1-872B-02887E7A2672}) (Version: 0.12 - FILSH Media GmbH)
FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
FormatFactory 3.3.2.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.2.0 - Format Factory)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.1.118 - Foxit Corporation)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Free AVI Video Converter version 5.0.24.426 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.24.426 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.9.32 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Limited.)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.3.0 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Hama Wireless LAN Adapter (HKLM-x32\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 10.1.0 - Hama)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.13 - PACE Anti-Piracy)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
Layer III Audio Encoder (HKLM-x32\...\Layer III Audio Encoder 1.0.70111) (Version: 1.0.70111 - Elecard)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
MAGIX Audio Cleaning Lab 2013 (HKLM-x32\...\MAGIX_{97E2116F-CC11-4EDA-B179-78CB6A89D836}) (Version: 19.0.0.10 - MAGIX AG)
MAGIX Audio Cleaning Lab 2013 (Version: 19.0.0.10 - MAGIX AG) Hidden
MAGIX Music Maker 17 Premium Download Version (HKLM-x32\...\MAGIX_MSI_mm17dlx) (Version: 17.0.0.16 - MAGIX AG)
MAGIX Music Maker 17 Premium Download Version (x32 Version: 17.0.0.16 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\{DFDD2913-557D-4EB5-8745-47749E521760}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{7F4DE580-F810-431C-8730-34F6CD89C4F6}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
M-Audio FastTrack Driver 6.0.6 (x64) (HKLM\...\{91A8C38A-0239-11E0-9658-189EDFD72085}) (Version: 6.0.6 - M-Audio)
Media Player Codec Pack 4.0.1 (HKLM-x32\...\Media Player - Codec Pack) (Version: - Media Player Codec Pack)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MorphVOX Pro (HKLM-x32\...\{DB2B4DA8-595D-42A1-A1AF-8AF654C18D54}) (Version: 4.4.5 - Screaming Bee)
Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NetWorx 5.2.7 (HKLM\...\NetWorx_is1) (Version: - Softperfect Research)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.2 - )
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
photoFXlab (HKLM-x32\...\photoFXlab) (Version: 1.2.6 - Topaz Labs)
PhotoResampling 12.1 (HKLM-x32\...\PhotoResampling_is1) (Version: - )
Power Sound Editor Free (HKLM-x32\...\Power Sound Editor Free) (Version: - PowerSE Studio Inc.)
PriceGong 2.6.11 (HKLM-x32\...\PriceGong) (Version: 2.6.11 - PriceGong) <==== ATTENTION
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
QuickTime Alternative 2.8.0 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 2.8.0 - )
Real Alternative 1.8.4 Lite (HKLM-x32\...\RealAlt_is1) (Version: 1.8.4 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.61.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - Realtek Semiconductor Corp.)
RockMelt (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\RockMelt) (Version: 0.16.91.483 - RockMelt, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
simplitec simplicheck (HKLM-x32\...\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}) (Version: 1.3.9.0 - simplitec GmbH)
SiSoftware Sandra Lite 2015x (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 21.15.2015.1 - SiSoftware)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sony Ericsson Themes Creator 4.16.2.6 (HKLM-x32\...\Sony Ericsson Themes Creator) (Version: 4.16.2.6 - Sony Ericsson Mobile Communications AB)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{0AA0DA00-A1D3-11E0-B9A9-005056C00008}) (Version: 10.0.176 - Sony)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.0.2 - Topaz Labs, LLC)
Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC)
Topaz DeNoise 5 (HKLM-x32\...\Topaz DeNoise 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.1.0 - Topaz Labs, LLC)
Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC)
Topaz ReMask 3 (HKLM-x32\...\Topaz ReMask 3) (Version: 3.2.1 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.0.0 - Topaz Labs, LLC)
Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.2.1 - TP-LINK)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version: - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Movie Studio HD Platinum 11.0 (HKLM-x32\...\{DA00F140-1C03-11E1-AE47-F04DA23A5C58}) (Version: 11.0.283 - Sony)
VLC media player 1.1.5 (HKLM-x32\...\VLC media player) (Version: 1.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
YGOPro DevPro Version 1.9.2r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\program\so_activex_x64.dll ()
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\ooofiltproxy_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File
==================== Restore Points =========================
08-03-2015 19:00:15 Windows-Sicherung
11-03-2015 15:34:17 Windows Update
15-03-2015 19:00:09 Windows-Sicherung
17-03-2015 12:18:52 Removed BlueStacks Notification Center
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2013-05-30 13:31 - 00000107 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {00BE24FB-D5E6-4414-BBD3-68D2E0B22EDE} - System32\Tasks\dlclient Updater => C:\Users\Jibi\AppData\Local\delta\delta\1.3.23.0\dlsetup.exe [2015-03-10] (Pay By Ads LTD)
Task: {0DFFC71C-2C7B-4B72-AEA2-FC3969581474} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
Task: {148B9FF8-AD9B-4939-A971-E4651FF9C5E8} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-03-25] (ASUSTek Computer Inc.)
Task: {171DD9EA-6104-4384-951E-93F236216ED5} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert <==== ATTENTION
Task: {1D7CE3C9-2B2A-47EB-A828-A90FDAAB8D28} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {30973219-71E8-43B4-A613-CDB938E98CA9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {3410C2E5-7288-4C9C-81CF-B47892E0D4D3} - System32\Tasks\{A84C457A-CCAC-4B7E-8B48-6EB6B2C86990} => pcalua.exe -a C:\Users\Jibi\Downloads\ArticGunZ_Installer_23052014.exe -d C:\Users\Jibi\Downloads
Task: {39FFD13A-E76D-4D6C-AAFC-D19A68636283} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe [2012-03-19] ()
Task: {3EAA0B57-E774-44D5-B95B-E1910FD2882C} - System32\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {51488CC2-CE57-49D5-86EC-80F29FD1177D} - System32\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {55A13CFE-6A8F-4125-B0BA-19F43534FDAE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {658B65B3-BA6D-4219-A1C8-C9875740C0BE} - System32\Tasks\EPUpdater => C:\Users\Jibi\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION
Task: {6B44A402-03E6-49A1-AAC7-2DD228FA33DE} - System32\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {6EA3E5D7-2A3E-47F7-8A0F-145ACC00718C} - System32\Tasks\dlclient => C:\Users\Jibi\AppData\Local\delta\delta\1.3.23.0\dlclient.exe
Task: {7336D0CE-6C96-47AD-96F5-4F62EEC33A72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: {75A3A52B-31A2-4BC4-A6B7-9EC07DFC5E40} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {7E4BC6EE-C068-4C77-B407-D887AC9D29BA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)
Task: {8E65CF69-13EF-42C8-8CBB-7EA35F5C9DC3} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {91DE9A25-CE2D-48F5-A26D-EAFAE27F9485} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-14] (Adobe Systems Incorporated)
Task: {965DE61A-2096-40CB-8DF5-A9E5C25CA850} - System32\Tasks\AdobeAAMUpdater-1.0-Jibi-PC-Jibi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {CB2CEECB-52A7-4319-ABC6-5408D6B5E831} - System32\Tasks\FCBfan => C:\Users\Jibi\AppData\Roaming\FCBfan\fcbfan.exe
Task: {CF7CBD1F-0A14-4E15-8B9F-1C3EF186A44B} - System32\Tasks\{88AEA439-7C97-48A7-AA75-B6210354059D} => pcalua.exe -a C:\Users\Jibi\Downloads\ZeusProInstall.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {DE5D4799-3376-4F3C-9CAC-5E1E015429F5} - System32\Tasks\{AD781ADF-B570-4985-B48C-4E5EECEAB2AF} => pcalua.exe -a C:\Users\Jibi\AppData\Local\Temp\Temp1_animake.zip\SETUP.EXE
Task: {DF6E8E9A-8CE7-40B7-8376-72755C7A6EFA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {E28BEE1B-F9B1-4331-8B70-79DB6480C3E0} - System32\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {EC7F474B-97F6-4C43-A443-4CEA64A39830} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{35651874-80E9-4EE7-A1F0-3E21ADA902D7} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{D45E6B82-C3DA-4F6E-9045-2208BD7865C1} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2015-02-20 00:03 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-02-20 18:07 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2011-01-14 05:58 - 2010-03-15 11:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-07-18 22:04 - 2011-07-18 22:04 - 00301568 _____ () C:\Program Files (x86)\Notepad++\NppShell_04.dll
2013-05-09 11:29 - 2011-09-17 11:12 - 00664576 _____ () C:\Program Files\NetWorx\sqlite.dll
2015-01-09 14:14 - 2012-05-14 17:40 - 00841216 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2010-04-07 02:45 - 2010-04-07 02:45 - 00050176 _____ () C:\Program Files\Adobe\Adobe Photoshop CS5 (64 Bit)\QuickTimeGlue.dll
2011-01-20 20:02 - 2011-01-20 20:02 - 00864768 _____ () C:\Program Files (x86)\Topaz Labs\Topaz ReMask 3\Plugins_x64\TopazRemaskAutomation.8li
2014-07-14 15:25 - 2014-07-14 15:25 - 00278528 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2014-06-16 17:25 - 2014-06-16 17:25 - 00053248 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 01007104 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00024576 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00216576 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00261120 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00019456 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00337408 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2014-01-29 22:15 - 2015-02-27 11:22 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2011-01-11 19:18 - 2009-12-10 12:16 - 00918816 _____ () C:\Program Files (x86)\Hama\Common\RaWLAPI.dll
2015-01-09 14:14 - 2012-05-18 08:53 - 01411584 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2015-01-09 14:14 - 2012-05-14 17:40 - 00192512 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2015-01-09 14:14 - 2012-05-14 17:40 - 00293376 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJRtl.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2010-05-04 15:36 - 2010-05-04 15:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2010-02-22 04:50 - 2010-02-22 04:50 - 00060416 _____ () C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\zlib1.dll
2015-03-14 15:36 - 2015-03-14 15:36 - 16858288 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\Microsoft:69ElgEF7iygl4sAe7O961m3q
AlternateDataStreams: C:\ProgramData\Microsoft:ZfmP3J0OhHEOv0FcWdGFrW
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\DjJBtBcdu89:GDoD5RxXtm7M7QHNUX8F7tmsNA
AlternateDataStreams: C:\Users\Jibi\AppData\Local\dNJMUE2SBzD:u2YxZ8UuqYMS0BVHDHedfJM0
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:4gSuiEdYVtWsBig0N2ymvN3aI
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:jR4u6Rc8LPoZPKgCv8ljft
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
7EC67C03D29E42C8B5CC (S-1-5-21-2430596823-3442958056-1693070999-1004 - Limited - Enabled)
Administrator (S-1-5-21-2430596823-3442958056-1693070999-500 - Administrator - Disabled)
Gast (S-1-5-21-2430596823-3442958056-1693070999-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2430596823-3442958056-1693070999-1002 - Limited - Enabled)
Jibi (S-1-5-21-2430596823-3442958056-1693070999-1000 - Administrator - Enabled) => C:\Users\Jibi
==================== Faulty Device Manager Devices =============
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/21/2015 04:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 03:00:53 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 02:01:01 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 01:27:43 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return
Error: (03/21/2015 01:26:24 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
Error: (03/21/2015 01:26:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
--- Ende der internen Ausnahmestapelüberwachung ---
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (03/21/2015 01:01:00 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 00:53:05 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 00:49:03 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
--- Ende der internen Ausnahmestapelüberwachung ---
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (03/20/2015 08:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
System errors:
=============
Error: (03/21/2015 01:26:14 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (03/21/2015 01:25:31 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (03/21/2015 00:49:03 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (03/21/2015 00:47:18 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (03/20/2015 08:13:38 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2015 10:41:43 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (03/19/2015 10:41:43 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (03/19/2015 10:41:43 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (03/19/2015 10:32:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (03/19/2015 10:30:18 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Microsoft Office Sessions:
=========================
Error: (03/21/2015 04:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 03:00:53 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 02:01:01 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 01:27:43 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request return
Error: (03/21/2015 01:26:24 PM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Fehler beim Verarbeiten von Sitzungsänderung. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei Avira.OE.ServiceHost.ServiceHost.OnSessionChange(SessionChangeDescription changeDescription)
bei System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId)
Error: (03/21/2015 01:26:14 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
--- Ende der internen Ausnahmestapelüberwachung ---
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (03/21/2015 01:01:00 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 00:53:05 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
Error: (03/21/2015 00:49:03 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.SystemException: Cannot create VM ---> System.ComponentModel.Win32Exception: Der Vorgang wurde erfolgreich beendet
--- Ende der internen Ausnahmestapelüberwachung ---
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (03/20/2015 08:00:55 PM) (Source: Google Update) (EventID: 20) (User: Jibi-PC)
Description: Network Request Error.
Error: 0x8004212e. Http status code: 302.
Url=https://us-w1.rockmelt.com/update/1.0/update
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x8004212e. Http status code 302.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send reques
CodeIntegrity Errors:
===================================
Date: 2014-03-01 15:12:01.734
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Jibi\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-01 15:12:00.700
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Users\Jibi\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-01 15:11:58.985
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-01 15:11:58.130
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-04-05 11:56:10.838
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-04-05 11:56:10.730
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-02-27 14:35:22.091
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-02-27 14:35:21.993
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-02-26 14:06:13.656
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-02-26 14:06:13.571
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz
Percentage of memory in use: 59%
Total physical RAM: 4095.24 MB
Available physical RAM: 1663.02 MB
Total Pagefile: 8188.67 MB
Available Pagefile: 4626.35 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:465.76 GB) (Free:78.05 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3775115E)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
21.03.2015, 17:18
| #4 |
| | WIN7 - PC langsam, Internetabbrüche, viele Befunde FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jibi (administrator) on JIBI-PC on 21-03-2015 16:10:02
Running from C:\Users\Jibi\Downloads
Loaded Profiles: Jibi (Available profiles: Jibi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
() C:\Windows\SysWOW64\ASGT.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Avid Technology, Inc..) C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(SoftPerfect Research) C:\Program Files\NetWorx\networx.exe
(Avid Technology, Inc.) C:\Windows\System32\M-AudioTaskBarIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(Google Inc.) C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\RockMeltCrashHandler.exe
(Hama GmbH & Co KG) C:\Program Files (x86)\Hama\Common\RaUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CS5 (64 Bit)\Photoshop.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6297088 2008-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [4760464 2012-12-18] (SoftPerfect Research)
HKLM\...\Run: [M-Audio Taskbar Icon] => C:\Windows\system32\M-AudioTaskBarIcon.exe [798728 2010-12-07] (Avid Technology, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\Video Capture Master\Filters\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [DigidesignMMERefresh] => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1934744 2015-01-27] (APN)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [RockMelt Update] => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-02-04] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3631448 2015-02-27] (Electronic Arts)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Google Update] => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-03-05] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000003] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll => c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll File Not Found
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
AppInit_DLLs-x32: => "" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FILSHtray.lnk
ShortcutTarget: FILSHtray.lnk -> C:\Program Files (x86)\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hama Wireless LAN Utility.lnk
ShortcutTarget: Hama Wireless LAN Utility.lnk -> C:\Program Files (x86)\Hama\Common\RaUI.exe (Hama GmbH & Co KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-2430596823-3442958056-1693070999-1000] => 103.10.231.110:8080
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931
SearchScopes: HKLM -> DefaultScope {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> DefaultScope {318CA664-3DA3-441E-8A53-898DF41959FC} URL = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=a0ed2c59000000000000002586dcea82&r=484
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.max-start.com/?q={searchTerms}&babsrc=SP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {318CA664-3DA3-441E-8A53-898DF41959FC} URL = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=a0ed2c59000000000000002586dcea82&r=484
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL =
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll [2015-01-27] (APN LLC.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: PriceGong - Price Comparison -> {1631550F-191D-4826-B069-D9439253D926} -> C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll [2013-03-04] (PriceGong)
BHO-x32: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll [2015-01-27] (APN LLC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-05-25] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: delta Helper Object -> {C1AF5FA5-852C-4C90-812E-A7F75E011D87} -> C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll [2013-05-20] (Delta-search.com)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-05-25] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll [2015-01-27] (APN LLC.)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll [2013-05-20] (Delta-search.com)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll [2015-01-27] (APN LLC.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll [2015-01-27] (APN LLC.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Winsock: Catalog9 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 19 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default
FF DefaultSearchEngine: Wikipedia (de)
FF SelectedSearchEngine: Wikipedia (de)
FF Homepage: hxxp://www.t-online.de/
FF NetworkProxy: "backup.ftp", "202.147.198.217"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.socks", "202.147.198.217"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "202.147.198.217"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "202.147.198.217"
FF NetworkProxy: "ftp_port", 8888
FF NetworkProxy: "http", "202.147.198.217"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "202.147.198.217"
FF NetworkProxy: "socks_port", 8888
FF NetworkProxy: "ssl", "202.147.198.217"
FF NetworkProxy: "ssl_port", 8888
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-02-20] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2011-11-08] (Skype Limited)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/O1DPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll [2012-02-04] (RockMelt Inc.)
FF user.js: detected! => C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js [2013-10-20]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-05-04] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2010-07-27] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiFFPlugin1.dll [2010-07-28] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\babylon.xml [2012-04-28]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BitGuard.xml [2012-04-28]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BrowserDefender.xml [2012-04-28]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\delta.xml [2013-07-02]
FF SearchPlugin: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\softonic.xml [2013-10-20]
FF Extension: Ant Video Downloader - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\anttoolbar@ant.com [2015-03-07]
FF Extension: Firebug - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\firebug@software.joehewitt.com.xpi [2013-11-21]
FF Extension: ProxTube - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\ich@maltegoetz.de.xpi [2014-09-10]
FF Extension: ReloadEvery - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2013-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2013-01-21]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.ver-filmes.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll ()
CHR Plugin: (ijji Auto Install Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.)
CHR Plugin: (ijji Web Launching Plugin for FF) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiFFPlugin1.dll (NHN USA Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-21]
CHR Extension: (Google Drive) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-21]
CHR Extension: (YouTube) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-21]
CHR Extension: (Adblock Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-24]
CHR Extension: (Google Search) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-21]
CHR Extension: (IE Tab) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-08-17]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-21]
CHR Extension: (Auto Refresh Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilipfekkmncanaajkapbpancpelijih [2014-03-31]
CHR Extension: (Gmail) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-21]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2015-02-05]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2015-02-05]
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx [2013-03-04]
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Jibi\AppData\Roaming\BabSolution\CR\Delta.crx [2013-07-02]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992504 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-27] (APN LLC.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-01-14] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4208208 2010-10-21] (INCA Internet Co., Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-27] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [185632 2009-12-10] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [212256 2009-12-10] (Ralink Technology, Corp.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe [73200 2014-12-17] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-30] (DT Soft Ltd)
S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [187912 2010-12-07] (Avid Technology, Inc.)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4774 2012-03-06] (INCA Internet Co., Ltd.) [File not signed]
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corporation )
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dump_wmimmc; \??\C:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-21 16:10 - 2015-03-21 16:10 - 00039549 _____ () C:\Users\Jibi\Downloads\FRST.txt
2015-03-21 16:09 - 2015-03-21 16:10 - 00000000 ____D () C:\FRST
2015-03-21 16:08 - 2015-03-21 16:08 - 00000540 _____ () C:\Users\Jibi\Downloads\defogger_disable.log
2015-03-21 16:08 - 2015-03-21 16:08 - 00000168 _____ () C:\Users\Jibi\defogger_reenable
2015-03-21 14:00 - 2015-03-21 14:00 - 02095616 _____ (Farbar) C:\Users\Jibi\Downloads\FRST64.exe
2015-03-21 14:00 - 2015-03-21 14:00 - 00380416 _____ () C:\Users\Jibi\Downloads\f9lghzg5.exe
2015-03-21 13:57 - 2015-03-21 13:57 - 00050477 _____ () C:\Users\Jibi\Downloads\Defogger.exe
2015-03-19 19:16 - 2015-03-20 15:48 - 00072232 _____ () C:\Users\Jibi\Desktop\aloholtet.vf
2015-03-19 19:16 - 2015-03-20 15:29 - 00069952 _____ () C:\Users\Jibi\Desktop\aloholtet.vf.bak
2015-03-19 10:31 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-03-18 19:38 - 2015-03-20 20:13 - 00000000 ____D () C:\Users\Jibi\Desktop\Alkohol Test
2015-03-17 13:07 - 2015-03-17 14:59 - 00000000 ____D () C:\Users\Jibi\Downloads\German Top 100 Single Charts 16.03.2015
2015-03-17 12:54 - 2015-03-17 13:07 - 911811482 _____ () C:\Users\Jibi\Downloads\German Top100 Single Charts 16.03.2015.rar
2015-03-16 13:25 - 2015-03-17 11:50 - 00000000 ____D () C:\Users\Jibi\Desktop\Wand
2015-03-14 18:54 - 2015-03-14 19:06 - 105310610 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4
2015-03-14 18:23 - 2015-03-14 18:23 - 00000000 ____D () C:\Users\Jibi\Downloads\Neuer Ordner (2)
2015-03-14 18:05 - 2015-03-14 18:10 - 00279280 _____ () C:\Users\Jibi\Downloads\Conflikt_Beatz_-_Spiriduell_VR3_Beat_www.rappers.in.mp3.sfk
2015-03-13 12:03 - 2015-03-14 19:25 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf
2015-03-13 12:03 - 2015-03-14 18:53 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf.bak
2015-03-13 11:02 - 2015-03-13 11:05 - 00213832 _____ () C:\Users\Jibi\Desktop\jibitestetfb.MP3.sfk
2015-03-11 13:53 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 13:53 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 13:53 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 13:52 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 13:52 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 13:52 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 13:52 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 13:52 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 13:52 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 13:52 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 13:52 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 13:51 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 13:51 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 13:51 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 13:51 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 13:51 - 2015-02-23 11:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 13:51 - 2015-02-23 11:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 13:51 - 2015-02-23 10:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 13:51 - 2015-02-23 09:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 13:51 - 2015-02-23 09:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-21 06:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 13:51 - 2015-02-21 06:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 13:51 - 2015-02-21 06:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 13:51 - 2015-02-21 05:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 13:51 - 2015-02-21 05:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 13:51 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 13:51 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 13:51 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 13:51 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 13:50 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 13:46 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 13:46 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:16 - 2015-03-12 12:49 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf
2015-03-10 19:16 - 2015-03-12 12:48 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf.bak
2015-03-10 18:33 - 2015-03-10 18:34 - 18597681 _____ () C:\Users\Jibi\Desktop\kopfballmaster.mp4
2015-03-10 18:28 - 2015-03-12 12:21 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (4)
2015-03-10 16:20 - 2015-03-10 16:20 - 00003462 _____ () C:\Windows\System32\Tasks\dlclient
2015-03-10 16:20 - 2015-03-10 16:20 - 00003460 _____ () C:\Windows\System32\Tasks\dlclient Updater
2015-03-10 16:20 - 2015-03-10 16:20 - 00000000 ____D () C:\Users\Jibi\AppData\Local\delta
2015-03-06 11:15 - 2015-03-06 11:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-05 14:43 - 2015-03-05 14:54 - 123529920 _____ () C:\Users\Jibi\Desktop\ytmmrz.mp4
2015-03-05 14:29 - 2015-03-05 14:29 - 00030976 _____ () C:\Users\Jibi\Desktop\outronew.mp4.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00125584 _____ () C:\Users\Jibi\Desktop\MVI_0331.MOV.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00042608 _____ () C:\Users\Jibi\Desktop\MVI_0330.MOV.sfk
2015-03-05 14:23 - 2015-03-05 14:19 - 475796800 ____N () C:\Users\Jibi\Desktop\MVI_0331.MOV
2015-03-05 14:23 - 2015-03-05 14:15 - 155390932 ____N () C:\Users\Jibi\Desktop\MVI_0330.MOV
2015-03-05 13:22 - 2015-03-05 14:56 - 00050552 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf
2015-03-05 13:22 - 2015-03-05 14:40 - 00049784 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf.bak
2015-03-05 12:57 - 2015-03-05 12:58 - 00243856 _____ () C:\Users\Jibi\Desktop\ytmnews.MP3.sfk
2015-03-05 12:57 - 2015-03-05 12:57 - 00004704 _____ () C:\Users\Jibi\Desktop\Intro.mp4.sfk
2015-03-05 00:37 - 2015-03-17 23:59 - 00000000 ____D () C:\Users\Jibi\Desktop\BeGe
2015-03-04 17:35 - 2015-03-04 17:44 - 36873627 _____ () C:\Users\Jibi\Desktop\diagpromo.mp4
2015-03-04 16:07 - 2015-03-04 16:10 - 00044240 _____ () C:\Users\Jibi\Desktop\Diagnose.MP3.sfk
2015-03-04 15:52 - 2015-03-04 15:53 - 00168296 _____ () C:\Users\Jibi\Downloads\♩♫ Epic and Dramatic Trailer Music ♪♬ - Copyright and Royalty Free.mp3.sfk
2015-03-04 14:48 - 2015-03-04 16:25 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (3)
2015-02-25 11:19 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 11:19 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-23 22:20 - 2015-02-23 22:31 - 84817327 _____ () C:\Users\Jibi\Desktop\DeeEF - BBK Quali.mp4
2015-02-23 20:05 - 2015-02-23 20:06 - 00134672 _____ () C:\Users\Jibi\Downloads\DeeEF-BBK-Qualifikation.mp3.mp3.sfk
2015-02-23 03:40 - 2015-03-17 12:20 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\FCBfan
2015-02-23 03:40 - 2015-02-23 03:40 - 00003424 _____ () C:\Windows\System32\Tasks\FCBfan
2015-02-22 19:18 - 2014-12-18 18:49 - 36420117 _____ () C:\Users\Jibi\Downloads\MSIAfterburnerSetup410.exe
2015-02-22 19:16 - 2015-02-22 19:16 - 36210245 _____ () C:\Users\Jibi\Downloads\MSIAfterburnerSetup410.zip
2015-02-22 19:14 - 2015-02-22 19:15 - 01203488 _____ () C:\Users\Jibi\Downloads\MSI Afterburner - CHIP-Installer.exe
2015-02-22 15:36 - 2015-02-26 10:22 - 00000000 ____D () C:\Users\Jibi\Desktop\Dietrich Drehtag
2015-02-21 03:26 - 2014-11-22 11:46 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-02-21 03:26 - 2014-11-22 11:46 - 00032400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-02-20 13:50 - 2015-02-20 13:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2015-02-20 02:06 - 2015-02-20 13:10 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\NVIDIA
2015-02-20 00:23 - 2015-02-20 08:36 - 00000022 _____ () C:\Windows\GPU-Z.INI
2015-02-20 00:23 - 2014-01-06 17:46 - 00015648 _____ () C:\Windows\system32\Drivers\nvflash.sys
2015-02-20 00:08 - 2015-02-20 00:08 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS
2015-02-20 00:07 - 2015-02-20 00:09 - 00000032 _____ () C:\setup.log
2015-02-20 00:07 - 2015-02-20 00:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-02-20 00:07 - 2015-02-20 00:09 - 00000000 ____D () C:\Program Files (x86)\ASUS
2015-02-20 00:07 - 2015-02-20 00:08 - 00000000 ____D () C:\Windows\Downloaded Installations
2015-02-20 00:07 - 2015-02-20 00:07 - 00001049 _____ () C:\Users\Public\Desktop\ASUS GPU Tweak.lnk
2015-02-20 00:07 - 2015-02-20 00:07 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2015-02-20 00:05 - 2015-02-21 03:23 - 00000000 ____D () C:\Users\Jibi\AppData\Local\NVIDIA Corporation
2015-02-20 00:05 - 2015-02-21 03:23 - 00000000 ____D () C:\Users\Jibi\AppData\Local\NVIDIA
2015-02-20 00:05 - 2015-02-20 00:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-02-20 00:05 - 2014-12-13 01:12 - 02824504 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-02-20 00:05 - 2014-12-13 01:12 - 02210040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-02-20 00:05 - 2014-12-13 01:12 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-02-20 00:05 - 2014-12-13 01:12 - 01291464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-02-20 00:04 - 2015-03-21 13:25 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-20 00:04 - 2015-02-20 00:04 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-02-20 00:04 - 2014-11-22 11:46 - 00035472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-02-20 00:04 - 2014-07-02 18:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-02-20 00:03 - 2015-02-20 01:57 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-20 00:03 - 2014-07-02 22:29 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-02-20 00:03 - 2014-07-02 22:29 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-02-20 00:03 - 2014-07-02 22:29 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-02-20 00:03 - 2014-07-02 21:48 - 00075040 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-02-20 00:03 - 2014-07-02 21:48 - 00061912 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 06783776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 03522392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 02559960 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 00935368 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-02-20 00:03 - 2014-07-02 19:55 - 00386520 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-02-20 00:03 - 2014-07-02 19:55 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-02-20 00:03 - 2014-07-02 11:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2015-02-20 00:02 - 2014-07-02 21:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll
2015-02-20 00:02 - 2014-07-02 21:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll
2015-02-20 00:02 - 2014-07-02 21:48 - 00026353 _____ () C:\Windows\system32\nvinfo.pb
2015-02-20 00:01 - 2014-07-02 21:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 14498552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-02-20 00:01 - 2014-07-02 21:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00965312 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-02-20 00:01 - 2014-07-02 21:48 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 03196816 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-02-20 00:00 - 2014-07-02 21:48 - 02814656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-02-19 23:59 - 2015-02-21 03:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-19 13:16 - 2015-02-19 13:16 - 00298000 _____ () C:\Users\Jibi\Downloads\TAP_-_Bring_It_Back_www.rappers.in.mp3.sfk
2015-02-19 13:04 - 2015-02-19 13:07 - 00199792 _____ () C:\Users\Jibi\Downloads\Toto_Beat_Music_-_In_Da_Hood_Track_1_www.rappers.in.mp3.sfk
2015-02-19 12:56 - 2015-02-19 12:57 - 00239000 _____ () C:\Users\Jibi\Downloads\JL6_-_realhiphop_www.rappers.in.mp3.sfk
2015-02-19 12:55 - 2015-02-19 12:55 - 00303080 _____ () C:\Users\Jibi\Downloads\TAP_-_NICE_www.rappers.in.mp3.sfk
2015-02-19 12:53 - 2015-02-19 12:54 - 00285904 _____ () C:\Users\Jibi\Downloads\MurdyBautBeats_-_Palm_www.rappers.in.mp3.sfk
2015-02-19 12:45 - 2015-02-19 12:47 - 00143312 _____ () C:\Users\Jibi\Downloads\Klick_Boom_Beatz_-_VBT15_VR2_www.rappers.in.mp3.sfk
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-21 16:08 - 2011-01-08 21:30 - 00000000 ____D () C:\Users\Jibi
2015-03-21 16:04 - 2014-03-21 17:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-21 16:03 - 2012-02-04 11:53 - 00000924 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-21 16:01 - 2015-01-21 20:01 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-21 16:00 - 2015-01-21 20:00 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-21 16:00 - 2014-03-05 20:14 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-21 15:59 - 2015-01-21 19:59 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-21 15:58 - 2015-01-21 19:58 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-21 15:44 - 2012-06-14 12:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-21 15:35 - 2012-11-25 17:39 - 00123136 _____ () C:\Windows\setupact.log
2015-03-21 15:17 - 2011-01-08 21:22 - 01529206 _____ () C:\Windows\WindowsUpdate.log
2015-03-21 14:03 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-21 14:03 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-21 13:32 - 2014-07-25 11:47 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-21 13:32 - 2014-07-25 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-03-21 13:32 - 2014-07-25 11:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-03-21 13:32 - 2012-01-17 16:40 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-21 13:31 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Origin
2015-03-21 13:26 - 2014-03-21 17:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-21 13:25 - 2012-06-23 12:04 - 00000198 _____ () C:\Windows\Tasks\AutoKMS.job
2015-03-21 13:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-21 13:20 - 2012-02-21 16:49 - 00000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-03-21 12:58 - 2011-01-11 19:31 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Adobe
2015-03-20 14:51 - 2012-07-11 06:46 - 00000000 ____D () C:\Users\Jibi\Documents\Vegas Movie Studio HD Platinum 11.0 Projekte
2015-03-20 11:58 - 2012-02-04 11:53 - 00000872 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
2015-03-19 18:46 - 2014-09-19 13:55 - 00000524 _____ () C:\Users\Jibi\Desktop\wwe.txt
2015-03-18 11:06 - 2009-07-14 18:58 - 00699912 _____ () C:\Windows\system32\perfh007.dat
2015-03-18 11:06 - 2009-07-14 18:58 - 00149794 _____ () C:\Windows\system32\perfc007.dat
2015-03-18 11:06 - 2009-07-14 06:13 - 01622420 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-17 15:10 - 2013-01-24 14:43 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Skype
2015-03-17 15:01 - 2011-01-13 19:55 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Last.fm
2015-03-14 17:59 - 2014-12-30 02:10 - 00000000 ____D () C:\Users\Jibi\Desktop\Werbungsvideo
2015-03-14 15:37 - 2012-06-14 12:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-14 15:36 - 2012-06-14 12:43 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 15:36 - 2011-05-13 21:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-14 15:31 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 19:49 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-11 19:59 - 2009-07-14 05:45 - 05361848 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 19:56 - 2012-11-25 22:18 - 00269930 _____ () C:\Windows\PFRO.log
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 15:53 - 2012-03-18 17:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-11 15:53 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-11 15:46 - 2013-08-15 01:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 15:37 - 2011-01-18 11:24 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-08 15:59 - 2012-05-31 13:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-06 13:15 - 2013-08-19 13:26 - 00001974 _____ () C:\Users\Jibi\Desktop\amer.txt
2015-03-05 11:25 - 2014-10-15 08:43 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:25 - 2013-08-21 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:25 - 2013-08-21 21:46 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 11:09 - 2013-08-21 22:03 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-03-03 13:23 - 2014-08-17 22:30 - 00000000 ____D () C:\Users\Jibi\AppData\Local\IE Tab
2015-02-27 12:55 - 2013-01-28 09:46 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\TS3Client
2015-02-27 11:56 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-27 11:56 - 2012-10-25 08:33 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-20 08:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-20 02:22 - 2012-03-18 17:37 - 01595764 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-20 00:09 - 2011-01-11 19:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-20 00:05 - 2013-09-17 22:59 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-02-20 00:04 - 2011-10-09 14:07 - 00000000 ____D () C:\temp
2015-02-20 00:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
==================== Files in the root of some directories =======
2013-11-21 10:25 - 2013-11-21 10:25 - 4216840 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\vcredist.exe
2012-02-21 16:49 - 2015-03-21 13:20 - 0000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2012-01-16 13:08 - 2012-01-16 18:46 - 0477992 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ff_1.gif
2012-01-17 02:00 - 2012-01-18 15:47 - 0478725 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ff_4.gif
2012-01-16 13:08 - 2012-01-16 18:46 - 0421457 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ic_1.gif
2012-01-17 02:00 - 2012-01-18 15:47 - 0422803 _____ () C:\Users\Jibi\AppData\Roaming\m_cmon_ic_4.gif
2015-02-15 21:45 - 2014-12-12 14:11 - 14397440 _____ () C:\Users\Jibi\AppData\Roaming\Sandra.mdb
2014-04-02 11:03 - 2014-04-02 11:03 - 0001456 _____ () C:\Users\Jibi\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2012-11-26 06:55 - 2015-02-09 00:00 - 0005120 _____ () C:\Users\Jibi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Some content of TEMP:
====================
C:\Users\Jibi\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Jibi\AppData\Local\Temp\AskSLib.dll
C:\Users\Jibi\AppData\Local\Temp\avgnt.exe
C:\Users\Jibi\AppData\Local\Temp\DWPUpgradeInstaller.exe
C:\Users\Jibi\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\Jibi\AppData\Local\Temp\install_helper.exe
C:\Users\Jibi\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Jibi\AppData\Local\Temp\Last.fm-2.1.30.exe
C:\Users\Jibi\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jibi\AppData\Local\Temp\Softonic_chr_1-8-19-3.exe
C:\Users\Jibi\AppData\Local\Temp\uninst1.exe
C:\Users\Jibi\AppData\Local\Temp\YgoUpdater.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-07 13:47
==================== End Of Log ============================
--- --- --- |
|
21.03.2015, 17:19
| #5 |
| | WIN7 - PC langsam, Internetabbrüche, viele Befunde GMER: [CODE] GMER Logfile: Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-03-21 16:30:47
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST3500418AS rev.CC38 465,76GB
Running: f9lghzg5.exe; Driver: C:\Users\Jibi\AppData\Local\Temp\kwtdypod.sys
---- User code sections - GMER 2.1 ----
? C:\Windows\system32\mssprxy.dll [3056] entry point in ".rdata" section 00000000740b71e6
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Origin\Origin.exe[4440] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4472] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe[4848] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe[4460] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\KERNEL32.dll
.text ... * 9
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\BlueStacks\HD-Agent.exe[4304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[4296] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[5000] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076ed1401 2 bytes JMP 7584b21b C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076ed1419 2 bytes JMP 7584b346 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076ed1431 2 bytes JMP 758c8ea9 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 0000000076ed144a 2 bytes CALL 758248ad C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 0000000076ed14dd 2 bytes JMP 758c87a2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 0000000076ed14f5 2 bytes JMP 758c8978 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 0000000076ed150d 2 bytes JMP 758c8698 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076ed1525 2 bytes JMP 758c8a62 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 0000000076ed153d 2 bytes JMP 7583fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076ed1555 2 bytes JMP 758468ef C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 0000000076ed156d 2 bytes JMP 758c8f61 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076ed1585 2 bytes JMP 758c8ac2 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 0000000076ed159d 2 bytes JMP 758c865c C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 0000000076ed15b5 2 bytes JMP 7583fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 0000000076ed15cd 2 bytes JMP 7584b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 0000000076ed16b2 2 bytes JMP 758c8e24 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe[7012] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 0000000076ed16bd 2 bytes JMP 758c85f1 C:\Windows\syswow64\kernel32.dll
---- EOF - GMER 2.1 ----
|
|
22.03.2015, 08:02
| #6 |
| /// the machine /// TB-Ausbilder | WIN7 - PC langsam, Internetabbrüche, viele Befunde Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ --> WIN7 - PC langsam, Internetabbrüche, viele Befunde |
|
22.03.2015, 14:01
| #7 |
| | WIN7 - PC langsam, Internetabbrüche, viele Befunde Erledigt Code:
ATTFilter Combofix Logfile: |
|
23.03.2015, 08:06
| #8 |
| /// the machine /// TB-Ausbilder | WIN7 - PC langsam, Internetabbrüche, viele Befunde Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.03.2015, 15:22
| #9 |
| | WIN7 - PC langsam, Internetabbrüche, viele Befunde Erledigt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 24.03.2015 Suchlauf-Zeit: 11:36:54 Logdatei: mbam.txt Administrator: Ja Version: 2.01.4.1018 Malware Datenbank: v2015.03.24.03 Rootkit Datenbank: v2015.02.25.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jibi Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 383293 Verstrichene Zeit: 22 Min, 40 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 9 PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [1e353c0d7c0ea88efb1eef722ad94cb4], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [1e353c0d7c0ea88efb1eef722ad94cb4], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, In Quarantäne, [1e353c0d7c0ea88efb1eef722ad94cb4], PUP.Optional.Babylon.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, In Quarantäne, [272cfe4b83072d09e7c8f82fc93a8977], PUP.Optional.MeinGutscheincode.A, HKLM\SOFTWARE\WOW6432NODE\Mein Gutscheincode, In Quarantäne, [460d5eeb8802d36361abca36778df808], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\eooncjejnppfjjklapaamhcdmjbilmde, In Quarantäne, [1241d574c5c5092d27a27f542cd742be], PUP.Optional.DataMngr.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\DataMngr_Toolbar, In Quarantäne, [ce85f2570882da5c9559e03afb0a748c], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\INSTALLCORE, In Quarantäne, [450e2326642679bd4bc758c352b3f010], PUP.Optional.BProtector.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, In Quarantäne, [cd8658f13357ed4971c4021c85806f91], Registrierungswerte: 2 PUP.Optional.InstallCore.A, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\INSTALLCORE|tb, 0D1N1N1B1K1L1JtG0ZtH1O, In Quarantäne, [450e2326642679bd4bc758c352b3f010] PUP.BProtector, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, In Quarantäne, [4c07a3a61f6b03336789db3f06ff32ce], Registrierungsdaten: 1 Hijack.StartPage, HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931, Gut: (www.google.com), Schlecht: (hxxp://www.doko-search.com/?babsrc=HP_ss_mib2&mntrId=A0ED002586DCEA82&affID=120662&tsp=4931),Ersetzt,[e271dd6c7f0b77bfe99f0aeac3423ac6] Ordner: 9 PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy, In Quarantäne, [ba9990b994f6e94db9960a6bb64d817f], PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98, In Quarantäne, [ba9990b994f6e94db9960a6bb64d817f], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar, In Quarantäne, [c09387c2e5a505311664b1d5dc272fd1], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\LocalLow\BabylonToolbar\BabylonToolbar, In Quarantäne, [c09387c2e5a505311664b1d5dc272fd1], PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, In Quarantäne, [e66daa9f0d7d03337b17a9e79e6540c0], PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch, In Quarantäne, [e76c8abf6f1b0a2c1caa4e4971929070], PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch, In Quarantäne, [e76c8abf6f1b0a2c1caa4e4971929070], PUP.Optional.OnlySearch, C:\Users\Jibi\AppData\Local\onlysearch\onlysearch\1.3.12.9, In Quarantäne, [e76c8abf6f1b0a2c1caa4e4971929070], Dateien: 103 PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient Updater, In Quarantäne, [f85b9aaf0387e05682bf387cf013a15f], PUP.Optional.DLClient.A, C:\Windows\System32\Tasks\dlclient, In Quarantäne, [a6ad4affd8b2ad8998ab6f4514efd52b], PUP.Optional.BitGuard.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BitGuard.xml, In Quarantäne, [272c83c61674f343adf4c31fc043f709], PUP.Optional.BrowserDefender.A, C:\Windows\System32\Tasks\BrowserDefendert, In Quarantäne, [a0b3c3862862b28419f67e653cc715eb], PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\softonic.xml, In Quarantäne, [2c270148494147ef4e58ad4abf4433cd], PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\babylon.xml, In Quarantäne, [054e2a1f8ffb03338b07e218b0532fd1], PUP.Optional.BProtector.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\bProtector_extensions.sqlite, In Quarantäne, [80d37bce8901c670950906f415ee7d83], PUP.Optional.Delta.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\delta.xml, In Quarantäne, [3d16ee5be5a5e0563193e911956eaf51], PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\speedtestanalysis.crx, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\DeskTopIcon.ico, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], PUP.Optional.SpeedTestAnalysis.A, C:\Users\Jibi\AppData\Roaming\SpeedTestAnalysis\install_helper.exe, In Quarantäne, [6be83a0f7b0f7abc15c822e02fd5d12f], PUP.Optional.OpenCandy, C:\Users\Jibi\AppData\Roaming\OpenCandy\5BFA656A60EF4BFD8C8C354C21065D98\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe, In Quarantäne, [ba9990b994f6e94db9960a6bb64d817f], PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService\repository.xml, In Quarantäne, [e66daa9f0d7d03337b17a9e79e6540c0], PUP.Optional.CrossRider.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "13fa612b836a5abd9074469d5c7528f7");), Ersetzt,[025174d5e4a6a492dfdfd95952b4d927] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar.admin", false);), Ersetzt,[9cb7ea5f3b4fdd599c301919a561857b] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you m), Ersetzt,[96bd4306a6e4092d329a3cf610f64db3] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you), Ersetzt,[93c01c2d7e0c082ef2daf93940c67e82] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make chan), Ersetzt,[bf9482c736546acceddf7db59b6bd729] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (/* Do not edit this file. * * If you make chan), Ersetzt,[4b08a5a41971b87e9f2d5ad8a95d0bf5] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you ), Ersetzt,[7ed52128becc55e19d2fdd553dc9fb05] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you m), Ersetzt,[f65dc0893753d75f2aa2112116f0ae52] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences /* Do not edit this file. * * If you make changes to this fil), Ersetzt,[0b481039c4c6b18522aadb5728de0df3] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file. * * If you make changes to this file whil), Ersetzt,[8ec511380882af87f3d946ec51b5758b] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make ch), Ersetzt,[0152b396b0daba7cdcf041f1ec1a51af] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you ), Ersetzt,[490ab990523861d5a6264fe3a85ef50b] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make changes to), Ersetzt,[242fc38645452a0ce5e78aa89b6b669a] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (not edit this file. * * If you make changes to this fil), Ersetzt,[c48f7dcccac067cfdbf1cd6545c16799] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s /* Do not edit this file. * * If you make c), Ersetzt,[e96ab7924b3fda5c4d7f66ccfa0c837d] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you make changes to this file while the appli), Ersetzt,[21327fca9af050e6af1d87ab45c13dc3] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( * If you make changes to this file while the applicati), Ersetzt,[99ba1a2f404aa69015b740f2ac5aa45c] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you make changes t), Ersetzt,[22311a2f0a808ea85379bc7627df827e] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make changes to this ), Ersetzt,[91c27fca3e4c191dbe0ed35fbc4a7789] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make ch), Ersetzt,[f95aa5a49feb69cda8248ca69c6a18e8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (Preferences /* Do not edit this file. * * If), Ersetzt,[99ba3b0e622850e6ad1fa68cc73f5ca4] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (eferences /* Do not edit this file. * * If you make), Ersetzt,[5cf7ee5b93f74de92ba187ab82844bb5] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es /* Do not edit this file. * * If you make cha), Ersetzt,[c98a0a3f5d2d0a2c3e8e30021fe738c8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you make), Ersetzt,[4c07bd8c9eec96a028a4b67ce0266b95] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you m), Ersetzt,[97bc0f3a6e1cb97dc10b58dabd4913ed] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you ), Ersetzt,[86cd9dacf79367cfc80492a0e32329d7] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences /* Do not edit this file. * * If you make), Ersetzt,[4b0874d5a1e968ce23a90d2561a549b7] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you make changes to t), Ersetzt,[7cd7fe4baedc2511e2eae64cb74f14ec] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file. * * If you make changes to th), Ersetzt,[015262e71674eb4bb913b67cf016c13f] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make cha), Ersetzt,[d0830445a7e339fd7d4ffd3520e632ce] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you mak), Ersetzt,[eb686edbcbbfa096765655dde91da759] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you make changes ), Ersetzt,[23300b3e0882b3830fbd4ce675914ab6] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file. * * If you make changes to this file while the applicati), Ersetzt,[2e253712008a4fe77a523002fd0928d8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (file. * * If you make changes to this file while the application is running,), Ersetzt,[d0835bee8dfd1e18eddff43e03037b85] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (his file. * * If you make changes to this file while th), Ersetzt,[f65dc6833951280e3399d062a561f40c] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s /* Do not edit this file. * * If you make change), Ersetzt,[c0932524f595d56110bc81b112f49b65] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make c), Ersetzt,[341f1b2e48420f273498bc76c83e53ad] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwritten ), Ersetzt,[d87b2623d4b6a690755765cde1253cc4] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ation is running, * the changes will be overwritten when the ap), Ersetzt,[ff5475d4830780b6af1d80b2ca3c02fe] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file. * * If you make changes to this), Ersetzt,[9db64207cebc41f54587b87a30d66997] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make changes), Ersetzt,[450ebb8ed6b423135c707bb7b0567b85] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If you make), Ersetzt,[6be8ee5b414965d177555dd5ad59f808] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you make cha), Ersetzt,[163d5aef305a0432913b52e031d51fe1] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es /* Do not edit this file. * * If you make changes to this ), Ersetzt,[ba997bce8dfd0c2a46860d25b94d59a7] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (o not edit this file. * * If you make changes to this f), Ersetzt,[153ed772305a5fd7ad1f4ee4c244e21e] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.admin", false);), Ersetzt,[80d34801fc8e40f6cf04d2606d99be42] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * ), Ersetzt,[b0a3b297c8c288aef1e2fc3644c23bc5] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make changes to this file ), Ersetzt,[044f83c64644f83ef8db1d159f67d030] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (e. * * If you make changes to this file while t), Ersetzt,[9cb789c0b3d788ae716262d03cca47b9] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you), Ersetzt,[bd962f1ac4c606304192e34fc244fe02] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences /* Do not edit this file. * * If ), Ersetzt,[a3b075d43456e94d686b61d1a16558a8] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (rences /* Do not edit this file. * * If), Ersetzt,[500344056624979ffdd668ca8d792fd1] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If), Ersetzt,[450e0c3d0a80e84e50831f138185a15f] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (es /* Do not edit this file. * * If y), Ersetzt,[3d1669e0c3c789adede69d9519edb749] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (references /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be ove), Ersetzt,[70e32a1f3a50c76fe5eeb08292746997] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (tion is running, * the changes will be overwritten when the appl), Ersetzt,[0e450940a7e356e0369de64c58aeff01] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (t edit this file. * * If you make changes to this file while the app), Ersetzt,[381b2b1e2a60d660b023a989e0269c64] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file. * * If you make changes to this fil), Ersetzt,[b89bfe4ba9e1f64062713cf69c6a619f] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwritten wh), Ersetzt,[7fd45deca8e2fa3cce052f03b65045bb] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ion is running, * the changes will be overwr), Ersetzt,[2132fa4fb1d914224390ab8747bf8878] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ferences /* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwrit), Ersetzt,[411215345a301521c70cd1619a6c8878] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (n is running, * the changes will be overwritten w), Ersetzt,[9cb72e1b1a70de5833a0b37fab5b936d] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ces /* Do not edit this file. * * If you make ), Ersetzt,[094a84c50d7d1d19914277bb15f1d52b] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s /* Do not edit this file. * * If you m), Ersetzt,[b89b27220e7c1a1cbf1478ba8c7aa957] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (erences /* Do not edit this file. * * If y), Ersetzt,[94bf5bee0d7d7eb8ab288aa87690e31d] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ences /* Do not edit this file. * * If you make changes to this f), Ersetzt,[fe55b990cdbd191d3d9692a00600af51] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( this file. * * If you make changes to this file while ), Ersetzt,[a1b21a2f8307db5bdef51e147492e719] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (* Do not edit this file. * * If you make changes to this file while the application is running, * the changes will be overwritten when the app), Ersetzt,[61f2a1a86d1dd264458e76bc8a7ca957] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (s running, * the changes will be overwritten whe), Ersetzt,[0a4952f794f6290d349f5bd726e0a957] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (nces /* Do not edit this file. * * If you make change), Ersetzt,[2a29ee5b7119340240935ad8e81e13ed] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: ( Do not edit this file. * * If you make changes), Ersetzt,[f65d8bbe4d3da096bb18c76be32359a7] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=13&cc=&mi=a0ed2c59000000000000002586dcea82");), Ersetzt,[183b0643335741f5a13afc3610f67c84] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (sesensitive", 1); user_pref("accessibility.typeaheadfind.flashBar", 0); user_pref("app.update.lastUpdateTime.addon-background-update-timer", ), Ersetzt,[9fb4e7622b5f03336f6c59d9e52135cb] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (ing, * the changes will be overwritten when the application exits. * * To make a manual change to preferences, you can visit the URL about:), Ersetzt,[82d199b06822a1954b904de59e68e61a] PUP.Optional.Softonic.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\prefs.js, Gut: (), Schlecht: (te.lastUpdateTime.addon-background-update-timer", 1427137956); user_pref("app.update.lastUpdateTime.background-update-timer", 1427137716); user_pr), Ersetzt,[d57e0445494146f0cc0fbe741aec54ac] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819");), Ersetzt,[8fc499b0cebcbf772f3c6ac804021be5] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lbar_i.babTrack", "affID=110819"); user_pref("exten), Ersetzt,[a2b1cd7c7416cf67f5766bc79b6bba46] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ons.BabylonToolbar_i.babTrack", "affID=110819"); user), Ersetzt,[163d22271b6fab8b99d256dc10f66d93] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (s.BabylonToolbar_i.babTrack", "affID=110819"); user_pref("extensions.BabylonToo), Ersetzt,[b1a207427a107abc88e3de5480866f91] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (k", "affID=110819"); user_pref("extensions.BabylonToolbar_i.babExt", ""); user_pre), Ersetzt,[84cfa5a4ef9b082e1a51fd351fe757a9] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: ("affID=110819"); user_pref("extensions.BabylonToolbar_i.ba), Ersetzt,[a0b3e762cdbddc5ae7840e24b94d1ae6] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819"); user_pref("exte), Ersetzt,[ea69fd4c8cfed3634328cf63e22408f8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (bylonToolbar_i.babTrack", "affID=110819"); user_pref("exte), Ersetzt,[afa4f455d3b793a3c0abeb47f4124db3] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ylonToolbar_i.babTrack", "affID=110819"); user_pref("extensions.Bab), Ersetzt,[044fba8f8307e650dc8feb47f11558a8] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (ar_i.babTrack", "affID=110819"); user_pref("extensions.Baby), Ersetzt,[75de4dfce6a46dc928439e94dd29c937] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (lonToolbar_i.babTrack", "affID=110819"); user_pref("extensions.B), Ersetzt,[a2b193b68bff4aec81ea62d0e0269c64] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (olbar_i.babTrack", "affID=110819"); user_pref("extensio), Ersetzt,[89ca77d2c1c9d0669ccff042bb4bae52] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (BabylonToolbar_i.babTrack", "affID=110819"); user_pref("), Ersetzt,[68eb1930fe8c5adc3e2dc1718f7744bc] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (abylonToolbar_i.babTrack", "affID=110819"); user_pref(), Ersetzt,[3f143811206a2412f77451e1749247b9] PUP.Optional.Babylon.A, C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js, Gut: (), Schlecht: (.BabylonToolbar_i.babTrack", "affID=110819"); user_pref(), Ersetzt,[f3605fea5634a88e79f2d85a60a6a45c] Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end) Code:
ATTFilter # AdwCleaner v4.113 - Bericht erstellt 25/03/2015 um 14:22:23
# Aktualisiert 22/03/2015 von Xplode
# Datenbank : 2015-03-23.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Jibi - JIBI-PC
# Gestarted von : C:\Users\Jibi\Downloads\AdwCleaner_4.113.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : APNMCP
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\AskPartnerNetwork
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
Ordner Gelöscht : C:\Program Files (x86)\AskPartnerNetwork
Ordner Gelöscht : C:\Program Files (x86)\simplitec
Ordner Gelöscht : C:\Program Files (x86)\B1 Free Archiver
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\AskPartnerNetwork
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\Delta
Ordner Gelöscht : C:\Users\Jibi\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Jibi\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\anttoolbar@ant.com
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\bProtector_extensions.rdf
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\foxydeal.sqlite
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\invalidprefs.js
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\searchplugins\BrowserDefender.xml
Datei Gelöscht : C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\user.js
***** [ Geplante Tasks ] *****
Task Gelöscht : BrowserDefendert
Task Gelöscht : dlclient Updater
Task Gelöscht : dlclient
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Schlüssel Gelöscht : HKCU\Software\Classes\keepmysearch
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaacalgebmfelllfiaoknifldpngjh
Schlüssel Gelöscht : HKCU\Software\a68b8db66fe948
Schlüssel Gelöscht : HKLM\SOFTWARE\a68b8db66fe948
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{318CA664-3DA3-441E-8A53-898DF41959FC}
Schlüssel Gelöscht : HKCU\Software\AskPartnerNetwork
Schlüssel Gelöscht : HKCU\Software\b1.org
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\SOFTWARE\b1.org
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\simplitec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AskPartnerNetwork
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\b1.org
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\ADE301FD73976694E8BFE55F3C38102F
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - 103.10.231.110:8080
***** [ Internetbrowser ] *****
-\\ Internet Explorer v10.0.9200.17267
-\\ Mozilla Firefox v36.0.4 (x86 de)
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.admin", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.babExt", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.babTrack", "affID=110819");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", 14);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.dfltSrch", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.hmpg", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15458");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.lastDP", 14);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1723:52:50");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "22.0");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.newTab", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.propectorlck", 112402551);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 1);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.ptch_0717", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.smplGrp", "azb");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.srcExt", "ss");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1723:52:50");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.hardId", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.instlDay", "15458");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110819&babsrc=NT_ss&mntrId=a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1723:52:50");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.admin", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.aflt", "SD");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.autoRvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dfltLng", "de");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dfltSrch", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.dnsErr", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.excTlbr", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.ffxUnstlRst", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hmpg", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=13&cc=&mi=a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.hpOld0", "hxxp://www.t-online.de");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.instlDay", "15998");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.instlRef", "MOY00009");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.kw_url", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=2&cc=&mi=a0ed2c59000000000000002586dcea82&q=");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.newTab", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00009/tb_v1/?SearchSource=15&cc=&mi=a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.prdct", "Softonic");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.prtnrId", "softonic");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.rvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.smplGrp", "none");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.tlbrId", "2013desingbrand");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=1&cc=&mi=a0ed2c59000000000000002586dcea82&q=");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsn", "1.8.19.3");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsnTs", "1.8.19.318:35:28");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Softonic.vrsni", "1.8.19.3");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.crossrider.bic", "13fa612b836a5abd9074469d5c7528f7");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.admin", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.aflt", "babsst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.dfltLng", "de");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.excTlbr", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.id", "a0ed2c59000000000000002586dcea82");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.instlDay", "15888");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.instlRef", "sst");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.lastVrsnTs", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.newTab", false);
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.prdct", "delta");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.rvrt", "false");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.smplGrp", "none");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.tlbrId", "base");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.vrsn", "1.8.21.5");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.21.50:30:42");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta.vrsni", "1.8.21.5");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta_i.babExt", "");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta_i.babTrack", "affID=120662&tsp=4931");
[58ohugm3.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
-\\ Google Chrome v41.0.2272.101
*************************
AdwCleaner[R0].txt - [21099 Bytes] - [25/03/2015 14:18:07]
AdwCleaner[S0].txt - [21326 Bytes] - [25/03/2015 14:22:23]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [21386 Bytes] ##########
|
|
25.03.2015, 15:23
| #10 |
| | WIN7 - PC langsam, Internetabbrüche, viele BefundeCode:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.6 (03.22.2015:1)
OS: Windows 7 Home Premium x64
Ran by Jibi on 25.03.2015 at 14:45:44,38
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{028D1B66-1C19-4921-AA8E-5ECDB42CEABB}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{3816987A-84FB-4361-B586-B1E97159E52B}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{3BF3359F-470E-4DA7-A271-77FD63309276}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{5142CF1C-28BA-4851-BBD8-25CBBB6979C2}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{6394A81C-79CC-460A-86EC-F280D250D46B}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{6620FF96-F0CA-4662-AD31-EF4703B6B2F6}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{6D5F0E76-A5A5-4CE6-BFE0-A14CBB4F4EC7}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{705760DC-834D-4F85-A53C-D8B91907F606}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{8549B74A-84D2-4D01-84DC-C33F9B0CF8CF}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{8AA51DFB-AD80-4D26-A712-21E652B84C70}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{8E193D4C-2098-4A3A-AA8C-E70BB9A29A77}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{9875D751-B788-48BD-A352-472079EB9D9B}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{9D7AD2FD-B487-4103-8AE8-F98A48081490}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{AC7DEB86-A090-4526-AA88-70190D5592DA}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{BE98C51E-CA67-4419-8C4B-19FD5CB21A4E}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{C0A8CDF1-E3BE-4448-A55A-03347CF9AA98}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{C1BFD7B3-5BD8-4135-B58A-FD6D2303812E}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{C555314A-B685-4A53-812B-A383358EA1F0}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{CCA3B516-AB20-4B50-87D0-EBD0D2F0C23C}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{CCEE9C91-FD63-4F55-95E2-B6F855F8A5E4}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{D203970E-642E-4E6E-85E6-4165A9880397}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{DDD69635-08B5-41E5-B867-34CE3C779160}
Successfully deleted: [Empty Folder] C:\Users\Jibi\appdata\local\{EBBE0B0C-13A0-4CD0-B57C-42A1F42184BF}
~~~ FireFox
Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Jibi\AppData\Roaming\mozilla\firefox\profiles\58ohugm3.default\minidumps [328 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.03.2015 at 14:50:27,85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jibi (administrator) on JIBI-PC on 25-03-2015 14:55:22
Running from C:\Users\Jibi\Downloads
Loaded Profiles: Jibi (Available profiles: Jibi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\SysWOW64\ASGT.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Avid Technology, Inc..) C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(SoftPerfect Research) C:\Program Files\NetWorx\networx.exe
(Avid Technology, Inc.) C:\Windows\System32\M-AudioTaskBarIcon.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(FILSH Media GmbH) C:\Program Files (x86)\FILSHtray\FILSHtray.exe
(Hama GmbH & Co KG) C:\Program Files (x86)\Hama\Common\RaUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Google Inc.) C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\RockMeltCrashHandler.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6297088 2008-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [4760464 2012-12-18] (SoftPerfect Research)
HKLM\...\Run: [M-Audio Taskbar Icon] => C:\Windows\system32\M-AudioTaskBarIcon.exe [798728 2010-12-07] (Avid Technology, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\Video Capture Master\Filters\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [DigidesignMMERefresh] => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [RockMelt Update] => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-02-04] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3631448 2015-02-27] (Electronic Arts)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FILSHtray.lnk
ShortcutTarget: FILSHtray.lnk -> C:\Program Files (x86)\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hama Wireless LAN Utility.lnk
ShortcutTarget: Hama Wireless LAN Utility.lnk -> C:\Program Files (x86)\Hama\Common\RaUI.exe (Hama GmbH & Co KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-05-25] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-05-25] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default
FF DefaultSearchEngine: Wikipedia (de)
FF Homepage: hxxp://www.t-online.de/
FF NetworkProxy: "backup.ftp", "202.147.198.217"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.socks", "202.147.198.217"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "202.147.198.217"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "202.147.198.217"
FF NetworkProxy: "ftp_port", 8888
FF NetworkProxy: "http", "202.147.198.217"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "202.147.198.217"
FF NetworkProxy: "socks_port", 8888
FF NetworkProxy: "ssl", "202.147.198.217"
FF NetworkProxy: "ssl_port", 8888
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-02-20] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2011-11-08] (Skype Limited)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/O1DPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll [2012-02-04] (RockMelt Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-05-04] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2010-07-27] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiFFPlugin1.dll [2010-07-28] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Extension: Firebug - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\firebug@software.joehewitt.com.xpi [2013-11-21]
FF Extension: ProxTube - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\ich@maltegoetz.de.xpi [2014-09-10]
FF Extension: ReloadEvery - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2013-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2013-01-21]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.ver-filmes.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll ()
CHR Plugin: (ijji Auto Install Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.)
CHR Plugin: (ijji Web Launching Plugin for FF) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiFFPlugin1.dll (NHN USA Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-21]
CHR Extension: (Google Drive) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-21]
CHR Extension: (YouTube) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-21]
CHR Extension: (Adblock Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-24]
CHR Extension: (Google Search) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-21]
CHR Extension: (IE Tab) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-08-17]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-21]
CHR Extension: (Auto Refresh Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilipfekkmncanaajkapbpancpelijih [2014-03-31]
CHR Extension: (Gmail) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992504 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-01-14] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4208208 2010-10-21] (INCA Internet Co., Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-27] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [185632 2009-12-10] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [212256 2009-12-10] (Ralink Technology, Corp.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe [73200 2014-12-17] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-30] (DT Soft Ltd)
S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [187912 2010-12-07] (Avid Technology, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4774 2012-03-06] (INCA Internet Co., Ltd.) [File not signed]
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corporation )
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dump_wmimmc; \??\C:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-25 14:55 - 2015-03-25 14:56 - 00031040 _____ () C:\Users\Jibi\Downloads\FRST.txt
2015-03-25 14:44 - 2015-03-25 14:44 - 01388782 _____ (Thisisu) C:\Users\Jibi\Downloads\JRT.exe
2015-03-25 14:18 - 2015-03-25 14:42 - 00000000 ____D () C:\AdwCleaner
2015-03-25 14:12 - 2015-03-25 14:12 - 02168320 _____ () C:\Users\Jibi\Downloads\AdwCleaner_4.113.exe
2015-03-25 12:13 - 2015-03-25 12:13 - 00000061 _____ () C:\Users\Jibi\Desktop\bsafetest.txt
2015-03-24 11:33 - 2015-03-24 11:33 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Jibi\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-23 11:43 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-03-22 16:50 - 2015-03-22 18:10 - 437338288 _____ () C:\Users\Jibi\Desktop\jibitetet.mp4
2015-03-22 15:56 - 2015-03-22 16:03 - 00257088 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4.sfk
2015-03-22 13:55 - 2015-03-22 13:55 - 00038062 _____ () C:\ComboFix.txt
2015-03-22 13:22 - 2015-03-22 13:22 - 00001154 _____ () C:\Users\Jibi\Desktop\ComboFix - Verknüpfung.lnk
2015-03-22 13:21 - 2015-03-22 13:21 - 05615380 ____R (Swearware) C:\Users\Jibi\Downloads\ComboFix.exe
2015-03-22 13:11 - 2015-03-22 13:11 - 00001274 _____ () C:\Users\Jibi\Desktop\Revo Uninstaller.lnk
2015-03-22 13:11 - 2015-03-22 13:11 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-22 13:10 - 2015-03-22 13:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jibi\Downloads\revosetup95.exe
2015-03-22 12:26 - 2015-03-22 12:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-21 16:12 - 2015-03-25 14:51 - 00000000 ____D () C:\Users\Jibi\Desktop\Virus
2015-03-21 16:09 - 2015-03-25 14:55 - 00000000 ____D () C:\FRST
2015-03-21 16:08 - 2015-03-21 16:08 - 00000540 _____ () C:\Users\Jibi\Downloads\defogger_disable.log
2015-03-21 16:08 - 2015-03-21 16:08 - 00000168 _____ () C:\Users\Jibi\defogger_reenable
2015-03-21 14:00 - 2015-03-21 14:00 - 02095616 _____ (Farbar) C:\Users\Jibi\Downloads\FRST64.exe
2015-03-21 14:00 - 2015-03-21 14:00 - 00380416 _____ () C:\Users\Jibi\Downloads\f9lghzg5.exe
2015-03-21 13:57 - 2015-03-21 13:57 - 00050477 _____ () C:\Users\Jibi\Downloads\Defogger.exe
2015-03-19 19:16 - 2015-03-22 18:42 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf
2015-03-19 19:16 - 2015-03-22 16:50 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf.bak
2015-03-18 19:38 - 2015-03-22 15:43 - 00000000 ____D () C:\Users\Jibi\Desktop\Alkohol Test
2015-03-17 13:07 - 2015-03-17 14:59 - 00000000 ____D () C:\Users\Jibi\Downloads\German Top 100 Single Charts 16.03.2015
2015-03-17 12:54 - 2015-03-17 13:07 - 911811482 _____ () C:\Users\Jibi\Downloads\German Top100 Single Charts 16.03.2015.rar
2015-03-16 13:25 - 2015-03-17 11:50 - 00000000 ____D () C:\Users\Jibi\Desktop\Wand
2015-03-14 18:54 - 2015-03-14 19:06 - 105310610 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4
2015-03-14 18:23 - 2015-03-14 18:23 - 00000000 ____D () C:\Users\Jibi\Downloads\Neuer Ordner (2)
2015-03-14 18:05 - 2015-03-14 18:10 - 00279280 _____ () C:\Users\Jibi\Downloads\Conflikt_Beatz_-_Spiriduell_VR3_Beat_www.rappers.in.mp3.sfk
2015-03-13 12:03 - 2015-03-14 19:25 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf
2015-03-13 12:03 - 2015-03-14 18:53 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf.bak
2015-03-13 11:02 - 2015-03-13 11:05 - 00213832 _____ () C:\Users\Jibi\Desktop\jibitestetfb.MP3.sfk
2015-03-11 13:53 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 13:53 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 13:53 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 13:52 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 13:52 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 13:52 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 13:52 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 13:52 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 13:52 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 13:52 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 13:52 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 13:51 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 13:51 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 13:51 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 13:51 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 13:51 - 2015-02-23 11:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 13:51 - 2015-02-23 11:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 13:51 - 2015-02-23 10:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 13:51 - 2015-02-23 09:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 13:51 - 2015-02-23 09:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-21 06:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 13:51 - 2015-02-21 06:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 13:51 - 2015-02-21 06:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 13:51 - 2015-02-21 05:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 13:51 - 2015-02-21 05:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 13:51 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 13:51 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 13:51 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 13:51 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 13:50 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 13:46 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 13:46 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:16 - 2015-03-12 12:49 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf
2015-03-10 19:16 - 2015-03-12 12:48 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf.bak
2015-03-10 18:33 - 2015-03-10 18:34 - 18597681 _____ () C:\Users\Jibi\Desktop\kopfballmaster.mp4
2015-03-10 18:28 - 2015-03-12 12:21 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (4)
2015-03-05 14:43 - 2015-03-05 14:54 - 123529920 _____ () C:\Users\Jibi\Desktop\ytmmrz.mp4
2015-03-05 14:29 - 2015-03-05 14:29 - 00030976 _____ () C:\Users\Jibi\Desktop\outronew.mp4.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00125584 _____ () C:\Users\Jibi\Desktop\MVI_0331.MOV.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00042608 _____ () C:\Users\Jibi\Desktop\MVI_0330.MOV.sfk
2015-03-05 14:23 - 2015-03-05 14:19 - 475796800 ____N () C:\Users\Jibi\Desktop\MVI_0331.MOV
2015-03-05 14:23 - 2015-03-05 14:15 - 155390932 ____N () C:\Users\Jibi\Desktop\MVI_0330.MOV
2015-03-05 13:22 - 2015-03-05 14:56 - 00050552 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf
2015-03-05 13:22 - 2015-03-05 14:40 - 00049784 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf.bak
2015-03-05 12:57 - 2015-03-05 12:58 - 00243856 _____ () C:\Users\Jibi\Desktop\ytmnews.MP3.sfk
2015-03-05 12:57 - 2015-03-05 12:57 - 00004704 _____ () C:\Users\Jibi\Desktop\Intro.mp4.sfk
2015-03-05 00:37 - 2015-03-17 23:59 - 00000000 ____D () C:\Users\Jibi\Desktop\BeGe
2015-03-04 17:35 - 2015-03-04 17:44 - 36873627 _____ () C:\Users\Jibi\Desktop\diagpromo.mp4
2015-03-04 16:07 - 2015-03-04 16:10 - 00044240 _____ () C:\Users\Jibi\Desktop\Diagnose.MP3.sfk
2015-03-04 15:52 - 2015-03-04 15:53 - 00168296 _____ () C:\Users\Jibi\Downloads\♩♫ Epic and Dramatic Trailer Music ♪♬ - Copyright and Royalty Free.mp3.sfk
2015-03-04 14:48 - 2015-03-04 16:25 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (3)
2015-02-25 11:19 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 11:19 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-23 22:20 - 2015-02-23 22:31 - 84817327 _____ () C:\Users\Jibi\Desktop\DeeEF - BBK Quali.mp4
2015-02-23 20:05 - 2015-02-23 20:06 - 00134672 _____ () C:\Users\Jibi\Downloads\DeeEF-BBK-Qualifikation.mp3.mp3.sfk
2015-02-23 03:40 - 2015-03-17 12:20 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\FCBfan
2015-02-23 03:40 - 2015-02-23 03:40 - 00003424 _____ () C:\Windows\System32\Tasks\FCBfan
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-25 14:44 - 2012-06-14 12:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-25 14:42 - 2014-07-25 11:47 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-25 14:33 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-25 14:33 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-25 14:29 - 2011-01-08 21:22 - 01777769 _____ () C:\Windows\WindowsUpdate.log
2015-03-25 14:25 - 2015-02-20 00:04 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-25 14:25 - 2014-03-21 17:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-25 14:25 - 2012-11-25 17:39 - 00126061 _____ () C:\Windows\setupact.log
2015-03-25 14:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-25 14:04 - 2014-03-21 17:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-25 14:03 - 2012-02-04 11:53 - 00000924 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-25 14:01 - 2015-01-21 20:01 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-25 14:00 - 2015-01-21 20:00 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-25 14:00 - 2014-03-05 20:14 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-25 13:59 - 2015-01-21 19:59 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-25 13:58 - 2015-01-21 19:58 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-25 13:55 - 2012-02-21 16:49 - 00000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-03-25 12:11 - 2013-09-22 18:58 - 00000042 _____ () C:\Users\Jibi\Desktop\wpa.txt
2015-03-25 11:58 - 2012-02-04 11:53 - 00000872 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
2015-03-25 02:00 - 2011-01-11 19:31 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Adobe
2015-03-24 20:03 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Origin
2015-03-24 19:48 - 2012-11-25 22:18 - 00277964 _____ () C:\Windows\PFRO.log
2015-03-24 13:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-03-24 11:34 - 2012-01-17 16:40 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-23 11:52 - 2009-07-14 18:58 - 00699912 _____ () C:\Windows\system32\perfh007.dat
2015-03-23 11:52 - 2009-07-14 18:58 - 00149794 _____ () C:\Windows\system32\perfc007.dat
2015-03-23 11:52 - 2009-07-14 06:13 - 01622420 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-22 14:42 - 2012-07-11 06:46 - 00000000 ____D () C:\Users\Jibi\Documents\Vegas Movie Studio HD Platinum 11.0 Projekte
2015-03-22 13:56 - 2012-01-18 16:37 - 00000000 ____D () C:\Qoobox
2015-03-22 13:48 - 2012-01-18 16:37 - 00000000 ____D () C:\Windows\ERDNT
2015-03-22 13:48 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-22 13:46 - 2012-05-31 13:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-21 17:25 - 2014-08-17 22:30 - 00000000 ____D () C:\Users\Jibi\AppData\Local\IE Tab
2015-03-21 16:43 - 2014-09-19 13:55 - 00000530 _____ () C:\Users\Jibi\Desktop\wwe.txt
2015-03-21 16:08 - 2011-01-08 21:30 - 00000000 ____D () C:\Users\Jibi
2015-03-17 15:10 - 2013-01-24 14:43 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Skype
2015-03-17 15:01 - 2011-01-13 19:55 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Last.fm
2015-03-17 06:15 - 2014-07-25 11:42 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-17 06:15 - 2014-07-25 11:42 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-17 06:15 - 2012-01-17 16:40 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-14 17:59 - 2014-12-30 02:10 - 00000000 ____D () C:\Users\Jibi\Desktop\Werbungsvideo
2015-03-14 15:37 - 2012-06-14 12:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-14 15:36 - 2012-06-14 12:43 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 15:36 - 2011-05-13 21:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-14 15:31 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 19:49 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-11 19:59 - 2009-07-14 05:45 - 05361848 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 15:53 - 2012-03-18 17:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-11 15:53 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-11 15:46 - 2013-08-15 01:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 15:37 - 2011-01-18 11:24 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-06 13:15 - 2013-08-19 13:26 - 00001974 _____ () C:\Users\Jibi\Desktop\amer.txt
2015-03-05 11:25 - 2014-10-15 08:43 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:25 - 2013-08-21 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:25 - 2013-08-21 21:46 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 11:09 - 2013-08-21 22:03 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-02-27 12:55 - 2013-01-28 09:46 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\TS3Client
2015-02-27 11:56 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-27 11:56 - 2012-10-25 08:33 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-26 10:22 - 2015-02-22 15:36 - 00000000 ____D () C:\Users\Jibi\Desktop\Dietrich Drehtag
==================== Files in the root of some directories =======
2013-11-21 10:25 - 2013-11-21 10:25 - 4216840 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\vcredist.exe
2012-02-21 16:49 - 2015-03-25 13:55 - 0000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-02-15 21:45 - 2014-12-12 14:11 - 14397440 _____ () C:\Users\Jibi\AppData\Roaming\Sandra.mdb
2014-04-02 11:03 - 2014-04-02 11:03 - 0001456 _____ () C:\Users\Jibi\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2012-11-26 06:55 - 2015-02-09 00:00 - 0005120 _____ () C:\Users\Jibi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Some content of TEMP:
====================
C:\Users\Jibi\AppData\Local\Temp\avgnt.exe
C:\Users\Jibi\AppData\Local\Temp\Quarantine.exe
C:\Users\Jibi\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-07 13:47
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Jibi at 2015-03-25 14:56:53
Running from C:\Users\Jibi\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Akamai NetSession Interface (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.026 - ASUSTek Computer Inc.)
Avid Pro Tools SE 8.0.3 (HKLM-x32\...\{371F27A1-9502-4762-AE97-1C1938B21055}) (Version: 8.0.3 - Digidesign, ein Geschäftsbereich von Avid Technology, Inc.)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.32.25147 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C1801}) (Version: 12.24.1.234 - APN, LLC)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.)
CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3341 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Druckerdeinstallation für EPSON XP-215 217 Series (HKLM\...\EPSON XP-215 217 Series) (Version: - SEIKO EPSON Corporation)
DVD Architect Studio 5.0 (HKLM-x32\...\{04DF4A51-DE2A-11E0-9AB5-F04DA23A5C58}) (Version: 5.0.156 - Sony)
Epson Easy Photo Print 2 (HKLM-x32\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8A17C27D-0325-400C-8AA9-DAA6B16CBD74}) (Version: 2.40.0009 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX130 Series Printer Uninstall (HKLM\...\EPSON SX130 Series) (Version: - SEIKO EPSON Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Facebook Video Calling 1.0.0.7339 (HKLM-x32\...\{EEA5F1E7-E934-4F4E-85C8-8FEC9CCE525C}) (Version: 1.0.7339 - Skype Limited)
Facebook Video Calling 1.0.0.8953 (HKLM-x32\...\{1D7CE340-70C3-4848-BCCF-215950328A4C}) (Version: 1.0.8953 - Skype Limited)
ffdshow [rev 2975] [2009-05-28] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - )
FILSHtray (HKLM-x32\...\{0844CC2A-512E-4BA1-872B-02887E7A2672}) (Version: 0.12 - FILSH Media GmbH)
FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
FormatFactory 3.3.2.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.2.0 - Format Factory)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.1.118 - Foxit Corporation)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Free AVI Video Converter version 5.0.24.426 (HKLM-x32\...\Free AVI Video Converter_is1) (Version: 5.0.24.426 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.9.32 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Limited.)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.3.0 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Hama Wireless LAN Adapter (HKLM-x32\...\{E91E8912-769D-42F0-8408-0E329443BABC}) (Version: 10.1.0 - Hama)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.13 - PACE Anti-Piracy)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
Layer III Audio Encoder (HKLM-x32\...\Layer III Audio Encoder 1.0.70111) (Version: 1.0.70111 - Elecard)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
MAGIX Audio Cleaning Lab 2013 (HKLM-x32\...\MAGIX_{97E2116F-CC11-4EDA-B179-78CB6A89D836}) (Version: 19.0.0.10 - MAGIX AG)
MAGIX Audio Cleaning Lab 2013 (Version: 19.0.0.10 - MAGIX AG) Hidden
MAGIX Music Maker 17 Premium Download Version (HKLM-x32\...\MAGIX_MSI_mm17dlx) (Version: 17.0.0.16 - MAGIX AG)
MAGIX Music Maker 17 Premium Download Version (x32 Version: 17.0.0.16 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\{DFDD2913-557D-4EB5-8745-47749E521760}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{7F4DE580-F810-431C-8730-34F6CD89C4F6}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
M-Audio FastTrack Driver 6.0.6 (x64) (HKLM\...\{91A8C38A-0239-11E0-9658-189EDFD72085}) (Version: 6.0.6 - M-Audio)
Media Player Codec Pack 4.0.1 (HKLM-x32\...\Media Player - Codec Pack) (Version: - Media Player Codec Pack)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MorphVOX Pro (HKLM-x32\...\{DB2B4DA8-595D-42A1-A1AF-8AF654C18D54}) (Version: 4.4.5 - Screaming Bee)
Mozilla Firefox 36.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NetWorx 5.2.7 (HKLM\...\NetWorx_is1) (Version: - Softperfect Research)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.2 - )
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
photoFXlab (HKLM-x32\...\photoFXlab) (Version: 1.2.6 - Topaz Labs)
PhotoResampling 12.1 (HKLM-x32\...\PhotoResampling_is1) (Version: - )
Power Sound Editor Free (HKLM-x32\...\Power Sound Editor Free) (Version: - PowerSE Studio Inc.)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
QuickTime Alternative 2.8.0 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 2.8.0 - )
Real Alternative 1.8.4 Lite (HKLM-x32\...\RealAlt_is1) (Version: 1.8.4 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.61.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RockMelt (HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\RockMelt) (Version: 0.16.91.483 - RockMelt, Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2015x (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 21.15.2015.1 - SiSoftware)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)
Sony Ericsson Themes Creator 4.16.2.6 (HKLM-x32\...\Sony Ericsson Themes Creator) (Version: 4.16.2.6 - Sony Ericsson Mobile Communications AB)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{0AA0DA00-A1D3-11E0-B9A9-005056C00008}) (Version: 10.0.176 - Sony)
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.0.2 - Topaz Labs, LLC)
Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC)
Topaz DeNoise 5 (HKLM-x32\...\Topaz DeNoise 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.1.0 - Topaz Labs, LLC)
Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC)
Topaz ReMask 3 (HKLM-x32\...\Topaz ReMask 3) (Version: 3.2.1 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.0.0 - Topaz Labs, LLC)
Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.2.1 - TP-LINK)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version: - )
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Movie Studio HD Platinum 11.0 (HKLM-x32\...\{DA00F140-1C03-11E1-AE47-F04DA23A5C58}) (Version: 11.0.283 - Sony)
VLC media player 1.1.5 (HKLM-x32\...\VLC media player) (Version: 1.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
YGOPro DevPro Version 1.9.2r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\program\so_activex_x64.dll ()
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\ooofiltproxy_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll (OpenOffice.org)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File
==================== Restore Points =========================
11-03-2015 15:34:17 Windows Update
15-03-2015 19:00:09 Windows-Sicherung
17-03-2015 12:18:52 Removed BlueStacks Notification Center
22-03-2015 13:12:30 Revo Uninstaller's restore point - Delta toolbar
22-03-2015 13:15:46 Revo Uninstaller's restore point - Delta Chrome Toolbar
22-03-2015 13:18:45 Revo Uninstaller's restore point - PriceGong 2.6.11
22-03-2015 19:00:12 Windows-Sicherung
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2015-03-22 13:44 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {148B9FF8-AD9B-4939-A971-E4651FF9C5E8} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-03-25] (ASUSTek Computer Inc.)
Task: {1D7CE3C9-2B2A-47EB-A828-A90FDAAB8D28} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {30973219-71E8-43B4-A613-CDB938E98CA9} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {3410C2E5-7288-4C9C-81CF-B47892E0D4D3} - System32\Tasks\{A84C457A-CCAC-4B7E-8B48-6EB6B2C86990} => pcalua.exe -a C:\Users\Jibi\Downloads\ArticGunZ_Installer_23052014.exe -d C:\Users\Jibi\Downloads
Task: {39FFD13A-E76D-4D6C-AAFC-D19A68636283} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe [2012-03-19] ()
Task: {3EAA0B57-E774-44D5-B95B-E1910FD2882C} - System32\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {51488CC2-CE57-49D5-86EC-80F29FD1177D} - System32\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {55A13CFE-6A8F-4125-B0BA-19F43534FDAE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {6B44A402-03E6-49A1-AAC7-2DD228FA33DE} - System32\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {7336D0CE-6C96-47AD-96F5-4F62EEC33A72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: {75A3A52B-31A2-4BC4-A6B7-9EC07DFC5E40} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {7E4BC6EE-C068-4C77-B407-D887AC9D29BA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)
Task: {8E65CF69-13EF-42C8-8CBB-7EA35F5C9DC3} - System32\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [2012-02-04] (Google Inc.)
Task: {91DE9A25-CE2D-48F5-A26D-EAFAE27F9485} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-14] (Adobe Systems Incorporated)
Task: {965DE61A-2096-40CB-8DF5-A9E5C25CA850} - System32\Tasks\AdobeAAMUpdater-1.0-Jibi-PC-Jibi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {CB2CEECB-52A7-4319-ABC6-5408D6B5E831} - System32\Tasks\FCBfan => C:\Users\Jibi\AppData\Roaming\FCBfan\fcbfan.exe
Task: {CF7CBD1F-0A14-4E15-8B9F-1C3EF186A44B} - System32\Tasks\{88AEA439-7C97-48A7-AA75-B6210354059D} => pcalua.exe -a C:\Users\Jibi\Downloads\ZeusProInstall.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {DE5D4799-3376-4F3C-9CAC-5E1E015429F5} - System32\Tasks\{AD781ADF-B570-4985-B48C-4E5EECEAB2AF} => pcalua.exe -a C:\Users\Jibi\AppData\Local\Temp\Temp1_animake.zip\SETUP.EXE
Task: {DF6E8E9A-8CE7-40B7-8376-72755C7A6EFA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe [2014-03-05] (Google Inc.)
Task: {E28BEE1B-F9B1-4331-8B70-79DB6480C3E0} - System32\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2013-04-30] (SEIKO EPSON CORPORATION)
Task: {EC7F474B-97F6-4C43-A443-4CEA64A39830} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-21] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{35651874-80E9-4EE7-A1F0-3E21ADA902D7} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{D45E6B82-C3DA-4F6E-9045-2208BD7865C1} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
Task: C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2015-02-20 00:03 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-02-20 18:07 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2013-05-09 11:29 - 2011-09-17 11:12 - 00664576 _____ () C:\Program Files\NetWorx\sqlite.dll
2011-01-14 05:58 - 2010-03-15 11:28 - 00052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2014-07-14 15:25 - 2014-07-14 15:25 - 00278528 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Vender.dll
2014-06-16 17:25 - 2014-06-16 17:25 - 00053248 _____ () C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
2011-01-11 19:18 - 2009-12-10 12:16 - 00918816 _____ () C:\Program Files (x86)\Hama\Common\RaWLAPI.dll
2010-05-04 15:36 - 2010-05-04 15:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 13:08 - 2011-11-11 13:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-03-14 15:36 - 2015-03-14 15:36 - 16858288 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\Microsoft:69ElgEF7iygl4sAe7O961m3q
AlternateDataStreams: C:\ProgramData\Microsoft:ZfmP3J0OhHEOv0FcWdGFrW
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\Lokale Einstellungen:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:io0ixmDJZ5jbABAKuZ4Ktb
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Anwendungsdaten:oVnqElZKfcCPatCKgwCPYBLEr00
AlternateDataStreams: C:\Users\Jibi\AppData\Local\DjJBtBcdu89:GDoD5RxXtm7M7QHNUX8F7tmsNA
AlternateDataStreams: C:\Users\Jibi\AppData\Local\dNJMUE2SBzD:u2YxZ8UuqYMS0BVHDHedfJM0
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:4gSuiEdYVtWsBig0N2ymvN3aI
AlternateDataStreams: C:\Users\Jibi\AppData\Local\Temporary Internet Files:jR4u6Rc8LPoZPKgCv8ljft
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
7EC67C03D29E42C8B5CC (S-1-5-21-2430596823-3442958056-1693070999-1004 - Limited - Enabled)
Administrator (S-1-5-21-2430596823-3442958056-1693070999-500 - Administrator - Disabled)
Gast (S-1-5-21-2430596823-3442958056-1693070999-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2430596823-3442958056-1693070999-1002 - Limited - Enabled)
Jibi (S-1-5-21-2430596823-3442958056-1693070999-1000 - Administrator - Enabled) => C:\Users\Jibi
==================== Faulty Device Manager Devices =============
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz
Percentage of memory in use: 42%
Total physical RAM: 4095.24 MB
Available physical RAM: 2362.56 MB
Total Pagefile: 8188.67 MB
Available Pagefile: 6019.68 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:465.76 GB) (Free:93.68 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3775115E)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
26.03.2015, 10:35
| #11 |
| /// the machine /// TB-Ausbilder | WIN7 - PC langsam, Internetabbrüche, viele BefundeESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.03.2015, 00:39
| #12 |
| | WIN7 - PC langsam, Internetabbrüche, viele Befunde Läuft in jenem Fall wieder flüssiger, vielen dank schon mal Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=1213e20208c97648bf705ceb883f4440
# engine=23094
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-26 03:17:19
# local_time=2015-03-26 04:17:19 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 53768899 179012889 0 0
# scanned=341546
# found=16
# cleaned=0
# scan_time=8999
sh=1268802D5952FCA12B7773468AC3DB79BDAD66F5 ft=1 fh=8cbade19ae4d7cac vn="Variante von Win32/4Shared.T evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\B1 Free Archiver\installer.exe.vir"
sh=D80123E6AC987CF995575868B56CDFBF9EF4DCC6 ft=1 fh=50275bc8e5a4a4a3 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Forbidden Duel\Gunz.exe"
sh=91E25C0E559F3ADB71DE828E5A9CDFDE3E8935A7 ft=1 fh=1b1b874fb1c78831 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Forbidden Duel\GunzLauncher.exe"
sh=CF5C38D61E9742980C8983DCB51F46C582FC85C9 ft=1 fh=5030f6078266cae1 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\ijji\ENGLISH\Gunz\Gunz.exe"
sh=261C2730BC3E466344CB93C1245C78F7951B8C5E ft=1 fh=38a35ccfed3ac690 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\EntityGaming Network\ArticGunZ\Gunz.exe"
sh=E5A3C100D2D0FD94482783AF2B2FF94CDFC9923F ft=1 fh=a0ddd0619a504a2e vn="Variante von Win32/Hao123.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe"
sh=64415FA6FF25F9943B9882D48B98D9CBCE1A4971 ft=1 fh=fb393e5a201064c9 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\HeroGamers\Gunz Beta\gunz.exe"
sh=F9E91AC299893D807D0C62FC271CFBE9C21914C4 ft=1 fh=ad7442ea028cc53b vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Power Sound Editor Free\FreeOnlineRadioPlayerRecorder.exe"
sh=61B71BC4759715C444AD943747852B6F418DFBD9 ft=1 fh=a0ae22699c04ac55 vn="Variante von Win32/Injector.NMJ Trojaner" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\XxksWjWBdt0XuC\IJv6SoDIr.exe.vir"
sh=F2B555F04C85CAE909552B4D5B4C5EA5CD96FD14 ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\3e57c383-572bcd01"
sh=1522AB4C510B94BA3D29F44F86980EB9F6067756 ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\601fdb83-769d4617"
sh=BD92C8E681824C31736629085EE9F9CD8A84DFF4 ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\1d17861-1fa3b604"
sh=0CC99B62CD56088496C3F72CD1E9EFF3B2E47A9C ft=0 fh=0000000000000000 vn="Variante von Java/Exploit.CVE-2011-3544.BP Trojaner" ac=I fn="C:\Users\Jibi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\1c7583f5-4f7598e1"
sh=CB0CBA53366072785B0E30C66D410E133E13D5A0 ft=1 fh=68efb6649f09c452 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Jibi\Downloads\MSI Afterburner - CHIP-Installer.exe"
sh=D53CA1F19B28CFA1B9C3E362B82789397E7B8AA2 ft=1 fh=5ebef63faf55e674 vn="Variante von Win32/Injector.NIM Trojaner" ac=I fn="C:\_OTL\MovedFiles\01182012_063741\C_ProgramData\SmGIbGCGFJi\viylMPHb5k.exe"
sh=61B71BC4759715C444AD943747852B6F418DFBD9 ft=1 fh=a0ae22699c04ac55 vn="Variante von Win32/Injector.NMJ Trojaner" ac=I fn="C:\_OTL\MovedFiles\01182012_063741\C_ProgramData\XxksWjWBdt0XuC\IJv6SoDIr.exe"
Code:
ATTFilter Results of screen317's Security Check version 0.99.97
Windows 7 Service Pack 1 x64
Internet Explorer 10 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 21
Java version 32-bit out of Date!
Java 64-bit 8 Update 31
Adobe Flash Player 17.0.0.134
Mozilla Firefox (36.0.4)
Google Chrome (41.0.2272.101)
Google Chrome (41.0.2272.89)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Jibi (administrator) on JIBI-PC on 27-03-2015 00:36:08
Running from C:\Users\Jibi\Downloads
Loaded Profiles: Jibi (Available profiles: Jibi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\SysWOW64\ASGT.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Windows\RAVCpl64.exe
(SoftPerfect Research) C:\Program Files\NetWorx\networx.exe
(Avid Technology, Inc.) C:\Windows\System32\M-AudioTaskBarIcon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILGE.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\RockMeltCrashHandler.exe
(Hama GmbH & Co KG) C:\Program Files (x86)\Hama\Common\RaUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Akamai Technologies, Inc.) C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avid Technology, Inc..) C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RAVCpl64.exe [6297088 2008-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [NetWorx] => C:\Program Files\NetWorx\networx.exe [4760464 2012-12-18] (SoftPerfect Research)
HKLM\...\Run: [M-Audio Taskbar Icon] => C:\Windows\system32\M-AudioTaskBarIcon.exe [798728 2010-12-07] (Avid Technology, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-08-30] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\Video Capture Master\Filters\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [DigidesignMMERefresh] => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [127792 2015-02-12] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [RockMelt Update] => C:\Users\Jibi\AppData\Local\RockMelt\Update\RockMeltUpdate.exe [136336 2012-02-04] (Google Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3631448 2015-02-27] (Electronic Arts)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Jibi\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILGE.EXE [297024 2013-04-30] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FILSHtray.lnk
ShortcutTarget: FILSHtray.lnk -> C:\Program Files (x86)\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hama Wireless LAN Utility.lnk
ShortcutTarget: Hama Wireless LAN Utility.lnk -> C:\Program Files (x86)\Hama\Common\RaUI.exe (Hama GmbH & Co KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Jibi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2430596823-3442958056-1693070999-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {93D3B8AD-132C-4F50-ABFA-62FD82DBFACC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2430596823-3442958056-1693070999-1000 -> {5A39CCDF-55F5-45CB-9121-13364B8573DB} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-05-25] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-05-25] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default
FF DefaultSearchEngine: Wikipedia (de)
FF Homepage: hxxp://www.t-online.de/
FF NetworkProxy: "backup.ftp", "202.147.198.217"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.socks", "202.147.198.217"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "202.147.198.217"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "202.147.198.217"
FF NetworkProxy: "ftp_port", 8888
FF NetworkProxy: "http", "202.147.198.217"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "202.147.198.217"
FF NetworkProxy: "socks_port", 8888
FF NetworkProxy: "ssl", "202.147.198.217"
FF NetworkProxy: "ssl_port", 8888
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-14] ()
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-02-20] (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-05-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2852 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nppl3260.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1662 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.46 -> C:\Program Files (x86)\Video Capture Master\Filters\Real\browser\plugins\nprpjplug.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2011-11-08] (Skype Limited)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @talk.google.com/O1DPlugin -> C:\Users\Jibi\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Jibi\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin HKU\S-1-5-21-2430596823-3442958056-1693070999-1000: @us-w1.rockmelt.com/RockMelt Update;version=8 -> C:\Users\Jibi\AppData\Local\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll [2012-02-04] (RockMelt Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-05-04] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2010-07-27] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npijjiFFPlugin1.dll [2010-07-28] (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-06-03] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jibi\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Extension: Firebug - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\firebug@software.joehewitt.com.xpi [2013-11-21]
FF Extension: ProxTube - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\ich@maltegoetz.de.xpi [2014-09-10]
FF Extension: ReloadEvery - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2013-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\Jibi\AppData\Roaming\Mozilla\Firefox\Profiles\58ohugm3.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2013-01-21]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.ver-filmes.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll ()
CHR Plugin: (ijji Auto Install Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.)
CHR Plugin: (ijji Web Launching Plugin for FF) - C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiFFPlugin1.dll (NHN USA Inc.)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Jibi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-21]
CHR Extension: (Google Drive) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-21]
CHR Extension: (YouTube) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-21]
CHR Extension: (Adblock Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-24]
CHR Extension: (Google Search) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-21]
CHR Extension: (IE Tab) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-08-17]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-21]
CHR Extension: (Auto Refresh Plus) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilipfekkmncanaajkapbpancpelijih [2014-03-31]
CHR Extension: (Gmail) - C:\Users\Jibi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-21]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992504 2015-03-19] (Avira Operations GmbH & Co. KG)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [184056 2015-02-12] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.)
R2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe [81920 2011-08-11] (Avid Technology, Inc..) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-30] (SEIKO EPSON CORPORATION)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2011-01-14] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4208208 2010-10-21] (INCA Internet Co., Ltd.) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-02-27] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [185632 2009-12-10] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [212256 2009-12-10] (Ralink Technology, Corp.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\RpcAgentSrv.exe [73200 2014-12-17] (SiSoftware) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128536 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-03-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-06] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-30] (DT Soft Ltd)
S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-07-02] (ASUSTeK Computer Inc.)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [187912 2010-12-07] (Avid Technology, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4774 2012-03-06] (INCA Internet Co., Ltd.) [File not signed]
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corporation )
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2015x\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 dump_wmimmc; \??\C:\ijji\ENGLISH\Gunz\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-27 00:36 - 2015-03-27 00:36 - 00030710 _____ () C:\Users\Jibi\Downloads\FRST.txt
2015-03-26 13:38 - 2015-03-26 13:38 - 00852604 _____ () C:\Users\Jibi\Desktop\SecurityCheck.exe
2015-03-26 13:32 - 2015-03-26 13:32 - 02347384 _____ (ESET) C:\Users\Jibi\Downloads\esetsmartinstaller_deu.exe
2015-03-26 13:03 - 2013-07-02 16:29 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-03-25 14:44 - 2015-03-25 14:44 - 01388782 _____ (Thisisu) C:\Users\Jibi\Downloads\JRT.exe
2015-03-25 14:18 - 2015-03-25 14:42 - 00000000 ____D () C:\AdwCleaner
2015-03-25 14:12 - 2015-03-25 14:12 - 02168320 _____ () C:\Users\Jibi\Downloads\AdwCleaner_4.113.exe
2015-03-25 12:13 - 2015-03-26 13:38 - 00000261 _____ () C:\Users\Jibi\Desktop\bsafetest.txt
2015-03-25 07:48 - 2015-03-11 05:06 - 00943616 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-03-25 07:48 - 2015-03-11 05:06 - 00760832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-03-25 07:48 - 2015-03-11 05:06 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-03-25 07:48 - 2015-03-11 05:06 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-03-25 07:48 - 2015-03-11 05:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-03-25 07:48 - 2015-03-11 05:05 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-03-25 07:48 - 2015-03-11 05:05 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-03-25 07:48 - 2015-03-11 05:02 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-03-24 11:33 - 2015-03-24 11:33 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Jibi\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-22 16:50 - 2015-03-22 18:10 - 437338288 _____ () C:\Users\Jibi\Desktop\jibitetet.mp4
2015-03-22 15:56 - 2015-03-22 16:03 - 00257088 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4.sfk
2015-03-22 13:55 - 2015-03-22 13:55 - 00038062 _____ () C:\ComboFix.txt
2015-03-22 13:22 - 2015-03-22 13:22 - 00001154 _____ () C:\Users\Jibi\Desktop\ComboFix - Verknüpfung.lnk
2015-03-22 13:21 - 2015-03-22 13:21 - 05615380 ____R (Swearware) C:\Users\Jibi\Downloads\ComboFix.exe
2015-03-22 13:11 - 2015-03-22 13:11 - 00001274 _____ () C:\Users\Jibi\Desktop\Revo Uninstaller.lnk
2015-03-22 13:11 - 2015-03-22 13:11 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-22 13:10 - 2015-03-22 13:10 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Jibi\Downloads\revosetup95.exe
2015-03-22 12:26 - 2015-03-22 12:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-21 16:12 - 2015-03-27 00:24 - 00000000 ____D () C:\Users\Jibi\Desktop\Virus
2015-03-21 16:09 - 2015-03-27 00:36 - 00000000 ____D () C:\FRST
2015-03-21 16:08 - 2015-03-21 16:08 - 00000540 _____ () C:\Users\Jibi\Downloads\defogger_disable.log
2015-03-21 16:08 - 2015-03-21 16:08 - 00000168 _____ () C:\Users\Jibi\defogger_reenable
2015-03-21 14:00 - 2015-03-21 14:00 - 02095616 _____ (Farbar) C:\Users\Jibi\Downloads\FRST64.exe
2015-03-21 14:00 - 2015-03-21 14:00 - 00380416 _____ () C:\Users\Jibi\Downloads\f9lghzg5.exe
2015-03-21 13:57 - 2015-03-21 13:57 - 00050477 _____ () C:\Users\Jibi\Downloads\Defogger.exe
2015-03-19 19:16 - 2015-03-22 18:42 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf
2015-03-19 19:16 - 2015-03-22 16:50 - 00123648 _____ () C:\Users\Jibi\Desktop\aloholtet.vf.bak
2015-03-18 19:38 - 2015-03-22 15:43 - 00000000 ____D () C:\Users\Jibi\Desktop\Alkohol Test
2015-03-17 13:07 - 2015-03-17 14:59 - 00000000 ____D () C:\Users\Jibi\Downloads\German Top 100 Single Charts 16.03.2015
2015-03-17 12:54 - 2015-03-17 13:07 - 911811482 _____ () C:\Users\Jibi\Downloads\German Top100 Single Charts 16.03.2015.rar
2015-03-16 13:25 - 2015-03-17 11:50 - 00000000 ____D () C:\Users\Jibi\Desktop\Wand
2015-03-14 18:54 - 2015-03-14 19:06 - 105310610 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.mp4
2015-03-14 18:23 - 2015-03-14 18:23 - 00000000 ____D () C:\Users\Jibi\Downloads\Neuer Ordner (2)
2015-03-14 18:05 - 2015-03-14 18:10 - 00279280 _____ () C:\Users\Jibi\Downloads\Conflikt_Beatz_-_Spiriduell_VR3_Beat_www.rappers.in.mp3.sfk
2015-03-13 12:03 - 2015-03-14 19:25 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf
2015-03-13 12:03 - 2015-03-14 18:53 - 00069648 _____ () C:\Users\Jibi\Desktop\jibitestfbproto.vf.bak
2015-03-13 11:02 - 2015-03-13 11:05 - 00213832 _____ () C:\Users\Jibi\Desktop\jibitestetfb.MP3.sfk
2015-03-11 13:53 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 13:53 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 13:53 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 13:53 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 13:53 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 13:53 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 13:52 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 13:52 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 13:52 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 13:52 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 13:52 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 13:52 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 13:52 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 13:52 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 13:52 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 13:52 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 13:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 13:52 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 13:52 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 13:52 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 13:52 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 13:52 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 13:52 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 13:52 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 13:52 - 2014-06-28 01:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 13:51 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 13:51 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 13:51 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 13:51 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 13:51 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 13:51 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 13:51 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 13:51 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 13:51 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 13:51 - 2015-02-23 11:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 13:51 - 2015-02-23 11:51 - 01409024 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 13:51 - 2015-02-23 11:51 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 19301888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 15410688 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 02656256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 13:51 - 2015-02-23 11:50 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 13:51 - 2015-02-23 11:49 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 13:51 - 2015-02-23 10:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 13:51 - 2015-02-23 09:51 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 13:51 - 2015-02-23 09:25 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-21 06:31 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 13:51 - 2015-02-21 06:31 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 14380544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 13768704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02864640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 13:51 - 2015-02-21 06:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 13:51 - 2015-02-21 06:29 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 13:51 - 2015-02-21 06:29 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 13:51 - 2015-02-21 06:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 13:51 - 2015-02-21 05:42 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-03-11 13:51 - 2015-02-21 05:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2015-03-11 13:51 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 13:51 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 13:51 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 13:51 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 13:51 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 13:51 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 13:50 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 13:46 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 13:46 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:16 - 2015-03-12 12:49 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf
2015-03-10 19:16 - 2015-03-12 12:48 - 00091408 _____ () C:\Users\Jibi\Desktop\rage4.vf.bak
2015-03-10 18:33 - 2015-03-10 18:34 - 18597681 _____ () C:\Users\Jibi\Desktop\kopfballmaster.mp4
2015-03-10 18:28 - 2015-03-12 12:21 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (4)
2015-03-05 14:43 - 2015-03-05 14:54 - 123529920 _____ () C:\Users\Jibi\Desktop\ytmmrz.mp4
2015-03-05 14:29 - 2015-03-05 14:29 - 00030976 _____ () C:\Users\Jibi\Desktop\outronew.mp4.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00125584 _____ () C:\Users\Jibi\Desktop\MVI_0331.MOV.sfk
2015-03-05 14:25 - 2015-03-05 14:26 - 00042608 _____ () C:\Users\Jibi\Desktop\MVI_0330.MOV.sfk
2015-03-05 14:23 - 2015-03-05 14:19 - 475796800 ____N () C:\Users\Jibi\Desktop\MVI_0331.MOV
2015-03-05 14:23 - 2015-03-05 14:15 - 155390932 ____N () C:\Users\Jibi\Desktop\MVI_0330.MOV
2015-03-05 13:22 - 2015-03-05 14:56 - 00050552 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf
2015-03-05 13:22 - 2015-03-05 14:40 - 00049784 _____ () C:\Users\Jibi\Desktop\ytmyolo.vf.bak
2015-03-05 12:57 - 2015-03-05 12:58 - 00243856 _____ () C:\Users\Jibi\Desktop\ytmnews.MP3.sfk
2015-03-05 12:57 - 2015-03-05 12:57 - 00004704 _____ () C:\Users\Jibi\Desktop\Intro.mp4.sfk
2015-03-05 00:37 - 2015-03-17 23:59 - 00000000 ____D () C:\Users\Jibi\Desktop\BeGe
2015-03-04 17:35 - 2015-03-04 17:44 - 36873627 _____ () C:\Users\Jibi\Desktop\diagpromo.mp4
2015-03-04 16:07 - 2015-03-04 16:10 - 00044240 _____ () C:\Users\Jibi\Desktop\Diagnose.MP3.sfk
2015-03-04 15:52 - 2015-03-04 15:53 - 00168296 _____ () C:\Users\Jibi\Downloads\♩♫ Epic and Dramatic Trailer Music ♪♬ - Copyright and Royalty Free.mp3.sfk
2015-03-04 14:48 - 2015-03-04 16:25 - 00000000 ____D () C:\Users\Jibi\Desktop\Neuer Ordner (3)
2015-02-25 11:19 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-25 11:19 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-27 00:04 - 2014-03-21 17:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-27 00:03 - 2012-02-04 11:53 - 00000924 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-27 00:01 - 2015-01-21 20:01 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-27 00:00 - 2015-01-21 20:00 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {35651874-80E9-4EE7-A1F0-3E21ADA902D7}.job
2015-03-27 00:00 - 2014-03-05 20:14 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000UA.job
2015-03-26 23:59 - 2015-01-21 19:59 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-26 23:58 - 2015-01-21 19:58 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {D45E6B82-C3DA-4F6E-9045-2208BD7865C1}.job
2015-03-26 23:44 - 2012-06-14 12:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-26 23:08 - 2011-01-08 21:22 - 01875503 _____ () C:\Windows\WindowsUpdate.log
2015-03-26 13:35 - 2009-07-14 18:58 - 00699912 _____ () C:\Windows\system32\perfh007.dat
2015-03-26 13:35 - 2009-07-14 18:58 - 00149794 _____ () C:\Windows\system32\perfc007.dat
2015-03-26 13:35 - 2009-07-14 06:13 - 01622420 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-26 13:15 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-26 13:15 - 2009-07-14 05:45 - 00023072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-26 13:04 - 2012-11-25 17:39 - 00126397 _____ () C:\Windows\setupact.log
2015-03-26 13:03 - 2014-03-21 17:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-26 13:02 - 2015-02-20 00:04 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-26 13:02 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-26 02:00 - 2011-01-11 19:31 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Adobe
2015-03-25 15:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-25 15:02 - 2014-12-12 21:10 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-25 15:02 - 2014-05-06 22:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-25 14:42 - 2014-07-25 11:47 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-25 13:55 - 2012-02-21 16:49 - 00000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-03-25 12:11 - 2013-09-22 18:58 - 00000042 _____ () C:\Users\Jibi\Desktop\wpa.txt
2015-03-25 11:58 - 2012-02-04 11:53 - 00000872 _____ () C:\Windows\Tasks\RockMeltUpdateTaskUserS-1-5-21-2430596823-3442958056-1693070999-1000Core.job
2015-03-24 20:03 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Origin
2015-03-24 19:48 - 2012-11-25 22:18 - 00277964 _____ () C:\Windows\PFRO.log
2015-03-24 13:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-03-24 11:34 - 2014-07-25 11:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-03-24 11:34 - 2012-01-17 16:40 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-22 14:42 - 2012-07-11 06:46 - 00000000 ____D () C:\Users\Jibi\Documents\Vegas Movie Studio HD Platinum 11.0 Projekte
2015-03-22 13:56 - 2012-01-18 16:37 - 00000000 ____D () C:\Qoobox
2015-03-22 13:48 - 2012-01-18 16:37 - 00000000 ____D () C:\Windows\ERDNT
2015-03-22 13:48 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-03-22 13:46 - 2012-05-31 13:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-21 17:25 - 2014-08-17 22:30 - 00000000 ____D () C:\Users\Jibi\AppData\Local\IE Tab
2015-03-21 16:43 - 2014-09-19 13:55 - 00000530 _____ () C:\Users\Jibi\Desktop\wwe.txt
2015-03-21 16:08 - 2011-01-08 21:30 - 00000000 ____D () C:\Users\Jibi
2015-03-17 15:10 - 2013-01-24 14:43 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\Skype
2015-03-17 15:01 - 2011-01-13 19:55 - 00000000 ____D () C:\Users\Jibi\AppData\Local\Last.fm
2015-03-17 12:20 - 2015-02-23 03:40 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\FCBfan
2015-03-17 06:15 - 2014-07-25 11:42 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-17 06:15 - 2014-07-25 11:42 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-17 06:15 - 2012-01-17 16:40 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-14 17:59 - 2014-12-30 02:10 - 00000000 ____D () C:\Users\Jibi\Desktop\Werbungsvideo
2015-03-14 15:37 - 2012-06-14 12:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-14 15:36 - 2012-06-14 12:43 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 15:36 - 2011-05-13 21:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-14 15:31 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-13 19:49 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-11 19:59 - 2009-07-14 05:45 - 05361848 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-11 19:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 15:53 - 2012-03-18 17:12 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-11 15:53 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-03-11 15:46 - 2013-08-15 01:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 15:37 - 2011-01-18 11:24 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-06 13:15 - 2013-08-19 13:26 - 00001974 _____ () C:\Users\Jibi\Desktop\amer.txt
2015-03-05 11:25 - 2014-10-15 08:43 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-05 11:25 - 2013-08-21 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-03-05 11:25 - 2013-08-21 21:46 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-03-04 11:09 - 2013-08-21 22:03 - 00044088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-03-04 11:09 - 2013-08-21 21:46 - 00128536 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-02-27 12:55 - 2013-01-28 09:46 - 00000000 ____D () C:\Users\Jibi\AppData\Roaming\TS3Client
2015-02-27 11:56 - 2012-10-25 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-27 11:56 - 2012-10-25 08:33 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-26 10:22 - 2015-02-22 15:36 - 00000000 ____D () C:\Users\Jibi\Desktop\Dietrich Drehtag
==================== Files in the root of some directories =======
2013-11-21 10:25 - 2013-11-21 10:25 - 4216840 _____ (Microsoft Corporation) C:\Program Files (x86)\Common Files\vcredist.exe
2012-02-21 16:49 - 2015-03-25 13:55 - 0000132 _____ () C:\Users\Jibi\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-02-15 21:45 - 2014-12-12 14:11 - 14397440 _____ () C:\Users\Jibi\AppData\Roaming\Sandra.mdb
2014-04-02 11:03 - 2014-04-02 11:03 - 0001456 _____ () C:\Users\Jibi\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2012-11-26 06:55 - 2015-02-09 00:00 - 0005120 _____ () C:\Users\Jibi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Some content of TEMP:
====================
C:\Users\Jibi\AppData\Local\Temp\avgnt.exe
C:\Users\Jibi\AppData\Local\Temp\Quarantine.exe
C:\Users\Jibi\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-25 15:42
==================== End Of Log ============================
--- --- --- |
|
27.03.2015, 00:40
| #13 |
| | WIN7 - PC langsam, Internetabbrüche, viele BefundeCode:
ATTFilter
|
|
27.03.2015, 18:59
| #14 |
| /// the machine /// TB-Ausbilder | WIN7 - PC langsam, Internetabbrüche, viele Befunde Java updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
 Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
dann auf 
und dann auf 
. 
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
