Trojaner-Board - Außer dem Browser hat nichts eine Internet Verbindung.

Hier der ESET Log (der ganze 10 Stunden gedauert hat) :

Code:

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# end=init

# utc_time=2015-08-29 09:02:40

# local_time=2015-08-29 11:02:40 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=37126

Update Finalize

Updated modules version: 0

Old modules - leave modules

Update Init

Update Download

Update Finalize

Updated modules version: 25511

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# end=init

# utc_time=2015-08-30 02:11:03

# local_time=2015-08-30 04:11:03 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

Update Finalize

Updated modules version: 25517

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# end=updated

# utc_time=2015-08-30 02:12:12

# local_time=2015-08-30 04:12:12 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# engine=25517

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-08-30 11:48:16

# local_time=2015-08-31 01:48:16 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 50211 4452508 0 0

# scanned=668478

# found=85

# cleaned=0

# scan_time=34563

sh=27E2403996F39126357EF251A0D1BC5517C5F271 ft=1 fh=aa073b3a6b90da7a vn="Variante von Win32/SpeedBit.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Common Files\System\SysMenu.dll.vir"

sh=0BD180116F51D685EBD8BAC54ED6FD7132F641B8 ft=1 fh=4f149b7c95160dc8 vn="Win32/UniBlue.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe.vir"

sh=858EC738084695AA4FE740A544EA329EFE295BA2 ft=1 fh=9b50a5d203e19d39 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\eUninstall.exe.vir"

sh=BEC6B95D047100118D70D9504479C36A797B9B06 ft=1 fh=e155e3de02881385 vn="Variante von Win32/ELEX.BF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\TrayDownloader.exe.vir"

sh=F7CCF23CCC312320FFF35E4B649D79BC8DC1F7C3 ft=1 fh=94ac2cff9dfbe8b8 vn="Variante von Win32/ELEX.CK evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\winzipersvc.exe.vir"

sh=167D90B2D8F35CB351CD94F0183B03F5B9707D3A ft=1 fh=d50364fb63674653 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\WinZipper.exe.vir"

sh=9DB8374DD34CE102AC7E3E70EE0FFCE589BC5AB0 ft=1 fh=54832be67bb145bc vn="Variante von Win32/Adware.SpeedingUpMyPC.AP Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\{0afb63ea-fe72-508b-0afb-b63eafe78fab}\hqghumeaylnlf.exe.vir"

sh=DCAB19C3B29983F8202126485987DBC2D4890ED2 ft=1 fh=b61413e006807dfc vn="Variante von Win32/Adware.ConvertAd.XQ Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\onsf2E67.tmp.vir"

sh=EBCBE69547B658A6E2902A8CB080C977DDBEF228 ft=1 fh=021433a36051dfa4 vn="Variante von Win32/Adware.ConvertAd.YB.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\pnsf2E68.exe.vir"

sh=6A7396167CB9406C56FA09347C509CB3AED2375C ft=1 fh=216745d3d66755b9 vn="Variante von Win32/Adware.ConvertAd.WR Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\rnsf2E66.exe.vir"

sh=491164FE123DB6DA6E777864326D6213AD986A78 ft=1 fh=3cc6bbefcd819d9d vn="Win32/Adware.ConvertAd.UC Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\snsf2E65.tmp.vir"

sh=34C11A75B2A93EDE2B3B945AA6A09250EF5C06F4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\background.js.vir"

sh=832ADA6E9B2673CA1DE314A566FF76316F0A2997 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\chrome.js.vir"

sh=F4FE303A5886572113DF4DA3579956CEBB907F56 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\cookie.js.vir"

sh=FD2A3FEFF97D325433D2011C5ED5755B6D6A8FAA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\message.js.vir"

sh=F12AB7ECE7B656776B6C51962B568E2ABCDE1D4D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\monitor.js.vir"

sh=CA4563F63D05349DF3C504C456185B7559177496 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\bg_app_api.js.vir"

sh=6B8D57805A81A0C2A68E87C410FF89D15BB71CC9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\cookie_store.js.vir"

sh=CCE2C38E8E351E54EF7624D60D5C8E8943A8C1D9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\crossriderAPI.js.vir"

sh=EDB82EF0A2AC160256F1A5C49F0778E3A42AC559 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\events.js.vir"

sh=902E327ADBC89F0A47999D10E7F6F6554CFCC0F4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\onBGDocumentLoad.js.vir"

sh=09D5AE4A80F65C6B9123A1F494E3E181BF3C46FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\reports.js.vir"

sh=BE038417E468CAA3BBA91CFFD2F554922504407C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\util.js.vir"

sh=D88F73897D0415B880A52D98AACBCBA8372956B2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\xhr.js.vir"

sh=B090F1A1C2FFF6216E8655CB3C75EA344568B33E ft=0 fh=0000000000000000 vn="JS/Adware.MultiPlug.I Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\pmpjlejpmgmmdlaejghcdlfigcbfajch\5.10\JraV6Yz_t.js.vir"

sh=8551A28BB06FC03A841EF3B2A3CA4215570C687F ft=1 fh=345be1ceb6dfca44 vn="Variante von Win32/ELEX.BF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Roaming\337\337 Wallpaper\TrayDownloader.exe.vir"

sh=16E54F243A10629AA0AF4E39FD2FFDC525BA6C94 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Roaming\Mozilla\Firefox\Profiles\dh2dfdjv.default\Extensions\defsearchp@gmail.com\chrome\content\jquery-2.1.0.min.js.vir"

sh=6FA07C781B84151C862A8FACD4E2EFB7D8DA3E2F ft=1 fh=ebf21d2230451b57 vn="Win32/AnyProtect.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\nsg7DCB.tmp"

sh=F8748BD45C0F205C81CC7B093476563DBB8B8775 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\CS Browser Assistant\Chrome\CS Browser Assistant.crx"

sh=4BD0D7C58415632955A584C285756B4BC7B396AF ft=1 fh=1e5217d92724bc77 vn="Win32/AdWare.1ClickDownload.AT Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000"

sh=4BD0D7C58415632955A584C285756B4BC7B396AF ft=1 fh=1e5217d92724bc77 vn="Win32/AdWare.1ClickDownload.AT Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000001"

sh=755E08068CF5872EB9C1A818559E9034B0B77FF6 ft=1 fh=d653b6746ba58d84 vn="Win32/Somoto.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\004\t\00\00000000"

sh=7AAECAB98EE4E1B56402519C0FCE146F26E1D16F ft=1 fh=f6facd0c88803555 vn="Variante von Win32/SpeedBit.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Installer\Install_24093\DCYTDownloader.exe"

sh=2589466CDD0F234F1B364FC1068D649720B3AE51 ft=1 fh=d238798951ddac27 vn="Variante von Win32/Toolbar.CrossRider.CZ evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\1009.exe"

sh=C68C8F20A53851AA76878F99CEC71FAAB7672304 ft=1 fh=d69a68dd77646994 vn="Variante von Win32/Toolbar.CrossRider.CZ evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\1617.exe"

sh=C42717D06B908A9E2BDA632F5E1C3A4592C75C16 ft=1 fh=661fca1a529ec094 vn="Variante von Win32/Packed.ScrambleWrapper.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\6622.exe"

sh=8C936AB45D7371EBCDF0BA085DC7557FCF688394 ft=1 fh=656a6f4f440ae74d vn="Variante von Win32/Adware.iBryte.CD Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\installer.exe"

sh=C176EA4125EC45264A84405B07AC11143F8CDD84 ft=1 fh=ea3ec20e5dd16079 vn="Variante von Win32/Adware.ConvertAd.XC.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsa1B97.tmp"

sh=574BDC64C4C790A31E010AABB2D6789E690B8E7D ft=1 fh=be1af8505cbed5bf vn="Variante von Win32/Adware.ConvertAd.XD.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsa1FA.tmp"

sh=E7B7F95437C63331B5403ED337A04A110A862CC2 ft=1 fh=db5ca7363141132f vn="Win32/InstallMonetizer.BG evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nse4A3A.tmp"

sh=574BDC64C4C790A31E010AABB2D6789E690B8E7D ft=1 fh=be1af8505cbed5bf vn="Variante von Win32/Adware.ConvertAd.XD.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsi420.tmp"

sh=7CC8C2B04AABE9A5C7E837AB9DEA2FFDF76A3F76 ft=1 fh=f7c537e7bb1daf4e vn="Win32/Adware.ConvertAd.RL Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsk2750.tmp"

sh=2C4DCB3C068FD9F508BB734518555D45450472A3 ft=1 fh=30322ce419bafb8f vn="Variante von Win32/Adware.ConvertAd.XA.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nspCE08.tmp"

sh=E5342C5232805D45B07B0C5B96B4A8E487DE386E ft=1 fh=a7c896ef97059766 vn="Win32/OutBrowse.BH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsqA61D.tmp"

sh=F2F94C43D7C9E1A2210C8443CE31F2EED41C5245 ft=1 fh=17f6cd6b608050b9 vn="Variante von Win32/Adware.ConvertAd.YB.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nssDBA9.tmp"

sh=E0118A55956BB3448D5D6F45EF7E9BD43C8224D8 ft=1 fh=b450d75ff86965e7 vn="Variante von Win32/Adware.ConvertAd.XC.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nswC533.tmp"

sh=57655C1166FF8775A30D199F34F2B3EF6E0EB935 ft=1 fh=5bda4522bb58fd81 vn="Variante von Win32/Adware.EoRezo.AZ Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsy433D.tmp"

sh=F33C00E143E0B72F7CEED0E6533B776DE9640B07 ft=1 fh=0467fef2cf5f6289 vn="Variante von Win32/Amonetize.HD evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Setup__11652_il42251.exe"

sh=9DB8374DD34CE102AC7E3E70EE0FFCE589BC5AB0 ft=1 fh=54832be67bb145bc vn="Variante von Win32/Adware.SpeedingUpMyPC.AP Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\SuperOptimizer.exe"

sh=47AFBB6BF8ADFBC1BCB3ECBCC2AAAB374B16B752 ft=1 fh=30f427f041cc1a0c vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\supoptsetup.exe"

sh=C138C508AB2C484D1DB5450EC3F3AAD9ABCFC20A ft=1 fh=b5a4d3fe7d0ce426 vn="Variante von Win32/TrojanDropper.Addrop.A Trojaner" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_cr.exe"

sh=C43B918AF0918027164361DB3DE9297234950418 ft=1 fh=0701875ff34514c7 vn="Variante von Win32/TrojanDropper.Addrop.A Trojaner" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_iwebar.exe"

sh=9C497507092A066B37BA0DF660214C8AB9BA3AD7 ft=1 fh=1805362db5764ba1 vn="Variante von Win32/SpeedBit.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_shopperpro.exe"

sh=72620DD2A4ECD90B7B8028DFACC3B78B1C136321 ft=1 fh=620507279d5e8351 vn="Variante von Win32/SpeedBit.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_ytd.exe"

sh=35EF55C080F91899E4139A540AC00B9E8643D0D0 ft=1 fh=61cd81a8756828d1 vn="Variante von Win32/Adware.EoRezo.AZ Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\465.exe"

sh=046AB61D7D443516530FE30BC8D050BC4783D9CB ft=1 fh=61cd81a84ef5edf9 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_BubbleSound_installer_multilang.exe"

sh=6C19B9CEFDFBF99FBA6CA456DED8CE9E113219FE ft=1 fh=61cd81a8d01d3305 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_pcrossbrowser_installer_multilang.exe"

sh=F73ABB317BAC98B5141246C9B37FC4659DB1B4CC ft=1 fh=61cd81a81a6964bb vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_SByoutube_installer_multilang.exe"

sh=14EFDAEA06CAE595B9EE80F1868F71E4E1C1A845 ft=1 fh=84e2a5d4b4059f21 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-85IFE.tmp\gentlemjmp_ieu.exe"

sh=F04800DE3C63F4703E275F33F3BEC70C91D7C92B ft=1 fh=48455528ce3b6034 vn="Variante von Win32/Adware.AdInstaller.E Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-90VL5.tmp\465.exe"

sh=14EFDAEA06CAE595B9EE80F1868F71E4E1C1A845 ft=1 fh=84e2a5d4b4059f21 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-JM6NQ.tmp\gentlemjmp_ieu.exe"

sh=A9C155D4BBF271453A1E6DB687DFABAD82DE39C8 ft=1 fh=61cd81a83c3a4307 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\577.exe"

sh=E7D9F4605EDCB62C4EF2BACA0F8911E9DB5678EF ft=1 fh=61cd81a8a3ac5bc2 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\602.exe"

sh=F73ABB317BAC98B5141246C9B37FC4659DB1B4CC ft=1 fh=61cd81a81a6964bb vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\package_SByoutube_installer_multilang.exe"

sh=C4B7154B4840572423BE460F3721BB8A46D254B0 ft=1 fh=970f5e5f4b3f1ea8 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-P39DQ.tmp\465.exe"

sh=F46F29207788875FA4FDB1C1F645E29EB55091A6 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\defsearchp@gmail.com!1.0.0.1039.xpi"

sh=A126E2B4C61B86EC4B9E9CF5A578D3071072C8D9 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\ms-dll1.zip"

sh=79549886CBFEEFF2A6E8C18C477EE0E216CEABB8 ft=1 fh=c71c0011daa5127d vn="Variante von Win32/Toolbar.CrossRider.CM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\jedvbhyxa.dll"

sh=37AA6D54A71A13C76C069911E288846BBFEFA63B ft=1 fh=68968b70eaac10cb vn="Variante von Win32/Packed.VMDetector.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\sqxgiczw.dll"

sh=A5700511E6EAC7B54C77D7324A594F378B654512 ft=1 fh=27426a319c558461 vn="Variante von Win32/Packed.ScrambleWrapper.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\emxdy.dll"

sh=DEF15CC236BFC03C446CEFDA158601A999A5D701 ft=1 fh=e61e12cf1975b594 vn="Variante von Win32/Toolbar.CrossRider.CM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\Hmpvbxjf.exe"

sh=F33C00E143E0B72F7CEED0E6533B776DE9640B07 ft=1 fh=0467fef2cf5f6289 vn="Variante von Win32/Amonetize.HD evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Rar$EXa0.043\Setup__11652_il42251.exe"

sh=EB8EE7B4DF7BE5349A00FEB81CD53DEC957B1030 ft=1 fh=a54434155eb563ad vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\eUpgrade\eupgrade.exe"

sh=858EC738084695AA4FE740A544EA329EFE295BA2 ft=1 fh=9b50a5d203e19d39 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\eUninstall.exe"

sh=C6FCA683C4C9D9B7D6D624425165F64A395CE61C ft=1 fh=4c929ecf9ada9787 vn="Variante von Win32/ELEX.BR evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\TrayDownloader.exe"

sh=F7CCF23CCC312320FFF35E4B649D79BC8DC1F7C3 ft=1 fh=94ac2cff9dfbe8b8 vn="Variante von Win32/ELEX.CK evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\winzipersvc.exe"

sh=167D90B2D8F35CB351CD94F0183B03F5B9707D3A ft=1 fh=d50364fb63674653 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\WinZipper.exe"

sh=F46F29207788875FA4FDB1C1F645E29EB55091A6 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Zero-tmp\defsearchp@gmail.com!1.0.0.1039.xpi"

sh=88A690FDD3F5BBAFC115912DD7962EF82343BAF8 ft=1 fh=f9eb43941369847b vn="Variante von Win32/DownloadAdmin.N evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\Downloads\minecraft_1254.exe"

sh=2D179BA42FA305313AAB31DC77C6E1F3CD5E59F9 ft=1 fh=23c7f393770180e9 vn="Variante von Win32/DepoDownloader.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp"

sh=5258F47EA3D5C8A029F12482A6F05769E50350C4 ft=1 fh=81458dcd3b86c70b vn="Win64/Riskware.Komodia.C Anwendung" ac=I fn="C:\Windows\System32\drivers\acwfp64.sys"

sh=DDFFD5DE2329087778C065BD7982413DC5522222 ft=1 fh=b20656cb7b4ccd96 vn="Variante von Win32/ELEX.BU evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\eUpgrade\eupgrade.exe"

sh=133AD7F29355A770C2E927837712E7F0B997A04B ft=1 fh=c0c9a0dc6047faad vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\eUninstall.exe"

sh=E200E0E1187F484EEBD1B630EF93D99CDB8EF5E1 ft=1 fh=01cca6eac81f1998 vn="Variante von Win32/ELEX.BR evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\TrayDownloader.exe"

sh=0FED6A8D58C6D90533DAB72B200BD198568781AC ft=1 fh=e69782aa317200f9 vn="Variante von Win32/ELEX.CK evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\winzipersvc.exe"

Und hier der SecurityCheck Log :

Code:

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# end=init

# utc_time=2015-08-29 09:02:40

# local_time=2015-08-29 11:02:40 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=37126

Update Finalize

Updated modules version: 0

Old modules - leave modules

Update Init

Update Download

Update Finalize

Updated modules version: 25511

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# end=init

# utc_time=2015-08-30 02:11:03

# local_time=2015-08-30 04:11:03 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

Update Finalize

Updated modules version: 25517

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# end=updated

# utc_time=2015-08-30 02:12:12

# local_time=2015-08-30 04:12:12 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=bcee91d3acca3c4ebe5d84d4e9ff633a

# engine=25517

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-08-30 11:48:16

# local_time=2015-08-31 01:48:16 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 50211 4452508 0 0

# scanned=668478

# found=85

# cleaned=0

# scan_time=34563

sh=27E2403996F39126357EF251A0D1BC5517C5F271 ft=1 fh=aa073b3a6b90da7a vn="Variante von Win32/SpeedBit.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Common Files\System\SysMenu.dll.vir"

sh=0BD180116F51D685EBD8BAC54ED6FD7132F641B8 ft=1 fh=4f149b7c95160dc8 vn="Win32/UniBlue.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe.vir"

sh=858EC738084695AA4FE740A544EA329EFE295BA2 ft=1 fh=9b50a5d203e19d39 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\eUninstall.exe.vir"

sh=BEC6B95D047100118D70D9504479C36A797B9B06 ft=1 fh=e155e3de02881385 vn="Variante von Win32/ELEX.BF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\TrayDownloader.exe.vir"

sh=F7CCF23CCC312320FFF35E4B649D79BC8DC1F7C3 ft=1 fh=94ac2cff9dfbe8b8 vn="Variante von Win32/ELEX.CK evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\winzipersvc.exe.vir"

sh=167D90B2D8F35CB351CD94F0183B03F5B9707D3A ft=1 fh=d50364fb63674653 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinZipper\WinZipper.exe.vir"

sh=9DB8374DD34CE102AC7E3E70EE0FFCE589BC5AB0 ft=1 fh=54832be67bb145bc vn="Variante von Win32/Adware.SpeedingUpMyPC.AP Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\{0afb63ea-fe72-508b-0afb-b63eafe78fab}\hqghumeaylnlf.exe.vir"

sh=DCAB19C3B29983F8202126485987DBC2D4890ED2 ft=1 fh=b61413e006807dfc vn="Variante von Win32/Adware.ConvertAd.XQ Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\onsf2E67.tmp.vir"

sh=EBCBE69547B658A6E2902A8CB080C977DDBEF228 ft=1 fh=021433a36051dfa4 vn="Variante von Win32/Adware.ConvertAd.YB.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\pnsf2E68.exe.vir"

sh=6A7396167CB9406C56FA09347C509CB3AED2375C ft=1 fh=216745d3d66755b9 vn="Variante von Win32/Adware.ConvertAd.WR Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\rnsf2E66.exe.vir"

sh=491164FE123DB6DA6E777864326D6213AD986A78 ft=1 fh=3cc6bbefcd819d9d vn="Win32/Adware.ConvertAd.UC Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\1FC532F5-1440027500-4F4C-8F8D-630A2C741625\snsf2E65.tmp.vir"

sh=34C11A75B2A93EDE2B3B945AA6A09250EF5C06F4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\background.js.vir"

sh=832ADA6E9B2673CA1DE314A566FF76316F0A2997 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\chrome.js.vir"

sh=F4FE303A5886572113DF4DA3579956CEBB907F56 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\cookie.js.vir"

sh=FD2A3FEFF97D325433D2011C5ED5755B6D6A8FAA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\message.js.vir"

sh=F12AB7ECE7B656776B6C51962B568E2ABCDE1D4D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\api\monitor.js.vir"

sh=CA4563F63D05349DF3C504C456185B7559177496 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\bg_app_api.js.vir"

sh=6B8D57805A81A0C2A68E87C410FF89D15BB71CC9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\cookie_store.js.vir"

sh=CCE2C38E8E351E54EF7624D60D5C8E8943A8C1D9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\crossriderAPI.js.vir"

sh=EDB82EF0A2AC160256F1A5C49F0778E3A42AC559 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\events.js.vir"

sh=902E327ADBC89F0A47999D10E7F6F6554CFCC0F4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\onBGDocumentLoad.js.vir"

sh=09D5AE4A80F65C6B9123A1F494E3E181BF3C46FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\reports.js.vir"

sh=BE038417E468CAA3BBA91CFFD2F554922504407C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\util.js.vir"

sh=D88F73897D0415B880A52D98AACBCBA8372956B2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\gcjbopemebdnolilndkpjfmhakccapkh\1.26.26_0\js\lib\xhr.js.vir"

sh=B090F1A1C2FFF6216E8655CB3C75EA344568B33E ft=0 fh=0000000000000000 vn="JS/Adware.MultiPlug.I Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Local\torch\User Data\Default\Extensions\pmpjlejpmgmmdlaejghcdlfigcbfajch\5.10\JraV6Yz_t.js.vir"

sh=8551A28BB06FC03A841EF3B2A3CA4215570C687F ft=1 fh=345be1ceb6dfca44 vn="Variante von Win32/ELEX.BF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Roaming\337\337 Wallpaper\TrayDownloader.exe.vir"

sh=16E54F243A10629AA0AF4E39FD2FFDC525BA6C94 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\yenal\AppData\Roaming\Mozilla\Firefox\Profiles\dh2dfdjv.default\Extensions\defsearchp@gmail.com\chrome\content\jquery-2.1.0.min.js.vir"

sh=6FA07C781B84151C862A8FACD4E2EFB7D8DA3E2F ft=1 fh=ebf21d2230451b57 vn="Win32/AnyProtect.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\nsg7DCB.tmp"

sh=F8748BD45C0F205C81CC7B093476563DBB8B8775 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\CS Browser Assistant\Chrome\CS Browser Assistant.crx"

sh=4BD0D7C58415632955A584C285756B4BC7B396AF ft=1 fh=1e5217d92724bc77 vn="Win32/AdWare.1ClickDownload.AT Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000"

sh=4BD0D7C58415632955A584C285756B4BC7B396AF ft=1 fh=1e5217d92724bc77 vn="Win32/AdWare.1ClickDownload.AT Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000001"

sh=755E08068CF5872EB9C1A818559E9034B0B77FF6 ft=1 fh=d653b6746ba58d84 vn="Win32/Somoto.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\004\t\00\00000000"

sh=7AAECAB98EE4E1B56402519C0FCE146F26E1D16F ft=1 fh=f6facd0c88803555 vn="Variante von Win32/SpeedBit.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Installer\Install_24093\DCYTDownloader.exe"

sh=2589466CDD0F234F1B364FC1068D649720B3AE51 ft=1 fh=d238798951ddac27 vn="Variante von Win32/Toolbar.CrossRider.CZ evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\1009.exe"

sh=C68C8F20A53851AA76878F99CEC71FAAB7672304 ft=1 fh=d69a68dd77646994 vn="Variante von Win32/Toolbar.CrossRider.CZ evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\1617.exe"

sh=C42717D06B908A9E2BDA632F5E1C3A4592C75C16 ft=1 fh=661fca1a529ec094 vn="Variante von Win32/Packed.ScrambleWrapper.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\6622.exe"

sh=8C936AB45D7371EBCDF0BA085DC7557FCF688394 ft=1 fh=656a6f4f440ae74d vn="Variante von Win32/Adware.iBryte.CD Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\installer.exe"

sh=C176EA4125EC45264A84405B07AC11143F8CDD84 ft=1 fh=ea3ec20e5dd16079 vn="Variante von Win32/Adware.ConvertAd.XC.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsa1B97.tmp"

sh=574BDC64C4C790A31E010AABB2D6789E690B8E7D ft=1 fh=be1af8505cbed5bf vn="Variante von Win32/Adware.ConvertAd.XD.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsa1FA.tmp"

sh=E7B7F95437C63331B5403ED337A04A110A862CC2 ft=1 fh=db5ca7363141132f vn="Win32/InstallMonetizer.BG evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nse4A3A.tmp"

sh=574BDC64C4C790A31E010AABB2D6789E690B8E7D ft=1 fh=be1af8505cbed5bf vn="Variante von Win32/Adware.ConvertAd.XD.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsi420.tmp"

sh=7CC8C2B04AABE9A5C7E837AB9DEA2FFDF76A3F76 ft=1 fh=f7c537e7bb1daf4e vn="Win32/Adware.ConvertAd.RL Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsk2750.tmp"

sh=2C4DCB3C068FD9F508BB734518555D45450472A3 ft=1 fh=30322ce419bafb8f vn="Variante von Win32/Adware.ConvertAd.XA.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nspCE08.tmp"

sh=E5342C5232805D45B07B0C5B96B4A8E487DE386E ft=1 fh=a7c896ef97059766 vn="Win32/OutBrowse.BH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsqA61D.tmp"

sh=F2F94C43D7C9E1A2210C8443CE31F2EED41C5245 ft=1 fh=17f6cd6b608050b9 vn="Variante von Win32/Adware.ConvertAd.YB.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nssDBA9.tmp"

sh=E0118A55956BB3448D5D6F45EF7E9BD43C8224D8 ft=1 fh=b450d75ff86965e7 vn="Variante von Win32/Adware.ConvertAd.XC.gen Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nswC533.tmp"

sh=57655C1166FF8775A30D199F34F2B3EF6E0EB935 ft=1 fh=5bda4522bb58fd81 vn="Variante von Win32/Adware.EoRezo.AZ Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsy433D.tmp"

sh=F33C00E143E0B72F7CEED0E6533B776DE9640B07 ft=1 fh=0467fef2cf5f6289 vn="Variante von Win32/Amonetize.HD evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Setup__11652_il42251.exe"

sh=9DB8374DD34CE102AC7E3E70EE0FFCE589BC5AB0 ft=1 fh=54832be67bb145bc vn="Variante von Win32/Adware.SpeedingUpMyPC.AP Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\SuperOptimizer.exe"

sh=47AFBB6BF8ADFBC1BCB3ECBCC2AAAB374B16B752 ft=1 fh=30f427f041cc1a0c vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\supoptsetup.exe"

sh=C138C508AB2C484D1DB5450EC3F3AAD9ABCFC20A ft=1 fh=b5a4d3fe7d0ce426 vn="Variante von Win32/TrojanDropper.Addrop.A Trojaner" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_cr.exe"

sh=C43B918AF0918027164361DB3DE9297234950418 ft=1 fh=0701875ff34514c7 vn="Variante von Win32/TrojanDropper.Addrop.A Trojaner" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_iwebar.exe"

sh=9C497507092A066B37BA0DF660214C8AB9BA3AD7 ft=1 fh=1805362db5764ba1 vn="Variante von Win32/SpeedBit.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_shopperpro.exe"

sh=72620DD2A4ECD90B7B8028DFACC3B78B1C136321 ft=1 fh=620507279d5e8351 vn="Variante von Win32/SpeedBit.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_ytd.exe"

sh=35EF55C080F91899E4139A540AC00B9E8643D0D0 ft=1 fh=61cd81a8756828d1 vn="Variante von Win32/Adware.EoRezo.AZ Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\465.exe"

sh=046AB61D7D443516530FE30BC8D050BC4783D9CB ft=1 fh=61cd81a84ef5edf9 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_BubbleSound_installer_multilang.exe"

sh=6C19B9CEFDFBF99FBA6CA456DED8CE9E113219FE ft=1 fh=61cd81a8d01d3305 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_pcrossbrowser_installer_multilang.exe"

sh=F73ABB317BAC98B5141246C9B37FC4659DB1B4CC ft=1 fh=61cd81a81a6964bb vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_SByoutube_installer_multilang.exe"

sh=14EFDAEA06CAE595B9EE80F1868F71E4E1C1A845 ft=1 fh=84e2a5d4b4059f21 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-85IFE.tmp\gentlemjmp_ieu.exe"

sh=F04800DE3C63F4703E275F33F3BEC70C91D7C92B ft=1 fh=48455528ce3b6034 vn="Variante von Win32/Adware.AdInstaller.E Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-90VL5.tmp\465.exe"

sh=14EFDAEA06CAE595B9EE80F1868F71E4E1C1A845 ft=1 fh=84e2a5d4b4059f21 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-JM6NQ.tmp\gentlemjmp_ieu.exe"

sh=A9C155D4BBF271453A1E6DB687DFABAD82DE39C8 ft=1 fh=61cd81a83c3a4307 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\577.exe"

sh=E7D9F4605EDCB62C4EF2BACA0F8911E9DB5678EF ft=1 fh=61cd81a8a3ac5bc2 vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\602.exe"

sh=F73ABB317BAC98B5141246C9B37FC4659DB1B4CC ft=1 fh=61cd81a81a6964bb vn="Variante von Win32/Adware.EoRezo.AY Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\package_SByoutube_installer_multilang.exe"

sh=C4B7154B4840572423BE460F3721BB8A46D254B0 ft=1 fh=970f5e5f4b3f1ea8 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\yenal\AppData\Local\Temp\is-P39DQ.tmp\465.exe"

sh=F46F29207788875FA4FDB1C1F645E29EB55091A6 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\defsearchp@gmail.com!1.0.0.1039.xpi"

sh=A126E2B4C61B86EC4B9E9CF5A578D3071072C8D9 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\ms-dll1.zip"

sh=79549886CBFEEFF2A6E8C18C477EE0E216CEABB8 ft=1 fh=c71c0011daa5127d vn="Variante von Win32/Toolbar.CrossRider.CM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\jedvbhyxa.dll"

sh=37AA6D54A71A13C76C069911E288846BBFEFA63B ft=1 fh=68968b70eaac10cb vn="Variante von Win32/Packed.VMDetector.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\sqxgiczw.dll"

sh=A5700511E6EAC7B54C77D7324A594F378B654512 ft=1 fh=27426a319c558461 vn="Variante von Win32/Packed.ScrambleWrapper.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\emxdy.dll"

sh=DEF15CC236BFC03C446CEFDA158601A999A5D701 ft=1 fh=e61e12cf1975b594 vn="Variante von Win32/Toolbar.CrossRider.CM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\Hmpvbxjf.exe"

sh=F33C00E143E0B72F7CEED0E6533B776DE9640B07 ft=1 fh=0467fef2cf5f6289 vn="Variante von Win32/Amonetize.HD evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Rar$EXa0.043\Setup__11652_il42251.exe"

sh=EB8EE7B4DF7BE5349A00FEB81CD53DEC957B1030 ft=1 fh=a54434155eb563ad vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\eUpgrade\eupgrade.exe"

sh=858EC738084695AA4FE740A544EA329EFE295BA2 ft=1 fh=9b50a5d203e19d39 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\eUninstall.exe"

sh=C6FCA683C4C9D9B7D6D624425165F64A395CE61C ft=1 fh=4c929ecf9ada9787 vn="Variante von Win32/ELEX.BR evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\TrayDownloader.exe"

sh=F7CCF23CCC312320FFF35E4B649D79BC8DC1F7C3 ft=1 fh=94ac2cff9dfbe8b8 vn="Variante von Win32/ELEX.CK evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\winzipersvc.exe"

sh=167D90B2D8F35CB351CD94F0183B03F5B9707D3A ft=1 fh=d50364fb63674653 vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\WinZipper.exe"

sh=F46F29207788875FA4FDB1C1F645E29EB55091A6 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\AppData\Local\Temp\Zero-tmp\defsearchp@gmail.com!1.0.0.1039.xpi"

sh=88A690FDD3F5BBAFC115912DD7962EF82343BAF8 ft=1 fh=f9eb43941369847b vn="Variante von Win32/DownloadAdmin.N evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\Downloads\minecraft_1254.exe"

sh=2D179BA42FA305313AAB31DC77C6E1F3CD5E59F9 ft=1 fh=23c7f393770180e9 vn="Variante von Win32/DepoDownloader.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\yenal\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp"

sh=5258F47EA3D5C8A029F12482A6F05769E50350C4 ft=1 fh=81458dcd3b86c70b vn="Win64/Riskware.Komodia.C Anwendung" ac=I fn="C:\Windows\System32\drivers\acwfp64.sys"

sh=DDFFD5DE2329087778C065BD7982413DC5522222 ft=1 fh=b20656cb7b4ccd96 vn="Variante von Win32/ELEX.BU evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\eUpgrade\eupgrade.exe"

sh=133AD7F29355A770C2E927837712E7F0B997A04B ft=1 fh=c0c9a0dc6047faad vn="Variante von Win32/ELEX.DS evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\eUninstall.exe"

sh=E200E0E1187F484EEBD1B630EF93D99CDB8EF5E1 ft=1 fh=01cca6eac81f1998 vn="Variante von Win32/ELEX.BR evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\TrayDownloader.exe"

sh=0FED6A8D58C6D90533DAB72B200BD198568781AC ft=1 fh=e69782aa317200f9 vn="Variante von Win32/ELEX.CK evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\winzipersvc.exe"

Ups, ich habe ausversehen zweimal den ESET Log verschickt! :o

Hier der SecurityCheck log:

Code:

 Results of screen317's Security Check version 1.008  

   x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Windows Defender   

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 MVPS Hosts File  

 Spybot - Search & Destroy 

 Trojan Remover 6.9.2   

 Java 8 Update 51  

 Java SE Development Kit 8 

 Java version 32-bit out of Date! 

 Adobe Flash Player         18.0.0.232  

 Google Chrome (44.0.2403.157) 
 ````````Process Check: objlist.exe by Laurent````````  

 Spybot Teatimer.exe is disabled! 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

Hier der Fixlog :

Zitat:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-08-2015
durchgeführt von yenal (2015-09-01 20:58:42) Run:1
Gestartet von C:\Users\yenal\Downloads
Geladene Profile: yenal (Verfügbare Profile: yenal & kadir)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
C:\Users\yenal\AppData\Local\nsg7DCB.tmp

C:\Users\yenal\AppData\Local\CS Browser Assistant\Chrome\CS Browser Assistant.crx

C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000

C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000001

C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\004\t\00\00000000

C:\Users\yenal\AppData\Local\Installer\Install_24093\DCYTDownloader.exe

C:\Users\yenal\AppData\Local\Temp\1009.exe

C:\Users\yenal\AppData\Local\Temp\1617.exe

C:\Users\yenal\AppData\Local\Temp\6622.exe

C:\Users\yenal\AppData\Local\Temp\installer.exe

C:\Users\yenal\AppData\Local\Temp\nsa1B97.tmp

C:\Users\yenal\AppData\Local\Temp\nsa1FA.tmp

C:\Users\yenal\AppData\Local\Temp\nse4A3A.tmp

C:\Users\yenal\AppData\Local\Temp\nsi420.tmp

C:\Users\yenal\AppData\Local\Temp\nsk2750.tmp

C:\Users\yenal\AppData\Local\Temp\nspCE08.tmp

C:\Users\yenal\AppData\Local\Temp\nsqA61D.tmp

C:\Users\yenal\AppData\Local\Temp\nssDBA9.tmp

C:\Users\yenal\AppData\Local\Temp\nswC533.tmp

C:\Users\yenal\AppData\Local\Temp\nsy433D.tmp

C:\Users\yenal\AppData\Local\Temp\Setup__11652_il42251.exe

C:\Users\yenal\AppData\Local\Temp\SuperOptimizer.exe

C:\Users\yenal\AppData\Local\Temp\supoptsetup.exe

C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_cr.exe

C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_iwebar.exe

C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_shopperpro.exe

C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_ytd.exe

C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\465.exe

C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_BubbleSound_installer_multilang.exe

C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_pcrossbrowser_installer_multilang.exe

C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_SByoutube_installer_multilang.exe

C:\Users\yenal\AppData\Local\Temp\is-85IFE.tmp\gentlemjmp_ieu.exe

C:\Users\yenal\AppData\Local\Temp\is-90VL5.tmp\465.exe

C:\Users\yenal\AppData\Local\Temp\is-JM6NQ.tmp\gentlemjmp_ieu.exe

C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\577.exe

C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\602.exe

C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\package_SByoutube_installer_multilang.exe

C:\Users\yenal\AppData\Local\Temp\is-P39DQ.tmp\465.exe

C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\defsearchp@gmail.com!1.0.0.1039.xpi

C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\ms-dll1.zip

C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\jedvbhyxa.dll

C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\sqxgiczw.dll

C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\emxdy.dll

C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\Hmpvbxjf.exe

C:\Users\yenal\AppData\Local\Temp\Rar$EXa0.043\Setup__11652_il42251.exe

C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\eUpgrade\eupgrade.exe

C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\eUninstall.exe

C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\TrayDownloader.exe

C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\winzipersvc.exe

C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\WinZipper.exe

C:\Users\yenal\AppData\Local\Temp\Zero-tmp\defsearchp@gmail.com!1.0.0.1039.xpi

C:\Users\yenal\Downloads\minecraft_1254.exe

C:\Users\yenal\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp

C:\Windows\System32\drivers\acwfp64.sys

C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\eUpgrade\eupgrade.exe

C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\eUninstall.exe

C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\TrayDownloader.exe

C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\winzipersvc.exe

Emptytemp:

*****************

C:\Users\yenal\AppData\Local\nsg7DCB.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\CS Browser Assistant\Chrome\CS Browser Assistant.crx => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000000 => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\003\t\00\00000001 => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\File System\004\t\00\00000000 => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Installer\Install_24093\DCYTDownloader.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\1009.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\1617.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\6622.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\installer.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsa1B97.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsa1FA.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nse4A3A.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsi420.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsk2750.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nspCE08.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsqA61D.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nssDBA9.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nswC533.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsy433D.tmp => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\Setup__11652_il42251.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\SuperOptimizer.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\supoptsetup.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_cr.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_iwebar.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_shopperpro.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\Install_5413\ins_ytd.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\465.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_BubbleSound_installer_multilang.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_pcrossbrowser_installer_multilang.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-4DKOQ.tmp\package_SByoutube_installer_multilang.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-85IFE.tmp\gentlemjmp_ieu.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-90VL5.tmp\465.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-JM6NQ.tmp\gentlemjmp_ieu.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\577.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\602.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-LA03S.tmp\package_SByoutube_installer_multilang.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\is-P39DQ.tmp\465.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\defsearchp@gmail.com!1.0.0.1039.xpi => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\ms-tmp2006750\ms-dll1.zip => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\jedvbhyxa.dll => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nsd4629.tmp\sqxgiczw.dll => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\emxdy.dll => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\nslB40.tmp\Hmpvbxjf.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\Rar$EXa0.043\Setup__11652_il42251.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\eUpgrade\eupgrade.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\eUninstall.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\TrayDownloader.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\winzipersvc.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\st9D01.tmp\OmigaZip_patch\WinZipper.exe => erfolgreich verschoben
C:\Users\yenal\AppData\Local\Temp\Zero-tmp\defsearchp@gmail.com!1.0.0.1039.xpi => erfolgreich verschoben
C:\Users\yenal\Downloads\minecraft_1254.exe => erfolgreich verschoben
C:\Users\yenal\Downloads\{265D75E0-3FB2-4F4A-B980-B30F6D833DAC}.tmp => erfolgreich verschoben
C:\Windows\System32\drivers\acwfp64.sys => erfolgreich verschoben
C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\eUpgrade\eupgrade.exe => erfolgreich verschoben
C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\eUninstall.exe => erfolgreich verschoben
C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\TrayDownloader.exe => erfolgreich verschoben
C:\Windows.old\Users\yenal\AppData\Local\Temp\st6347.tmp\OmigaZip_patch\winzipersvc.exe => erfolgreich verschoben
EmptyTemp: => 1.7 GB temporäre Dateien entfernt.

Das System musste neu gestartet werden..

==== Ende von Fixlog 21:04:15 ====

"Yenal" ist ein von mir erfundener Name

FRST log folgt noch

FRST log:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015

durchgeführt von yenal (Administrator) auf KADIR-ALI (04-09-2015 21:48:07)

Gestartet von C:\Users\yenal\Downloads

Geladene Profile: yenal (Verfügbare Profile: yenal & kadir)

Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Opera)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe

(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Users\yenal\AppData\Local\Microsoft\OneDrive\OneDrive.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Intel Corporation) C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

() C:\Program Files (x86)\BlueStacks\HD-Adb.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe

(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.8.25.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe

(iolo technologies, LLC) C:\Program Files\Sony\VAIO Care\Iolo\ioloTools.exe

() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.827.16340.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.12711.0_x64__8wekyb3d8bbwe\Video.UI.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.6119\Battle.net.exe

(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.4318\Agent.exe

(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe

() C:\Program Files\Sony\VAIO Care\listener.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

(Microsoft Corporation) C:\Windows\System32\browser_broker.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)

HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)

HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)

HKLM-x32\...\Run: [Ad-Aware Browsing Protection] => C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [247016 2011-09-09] (CyberLink Corp.)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66936 2015-08-03] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1797496 2015-03-28] (Simply Super Software)

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [904824 2015-08-19] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [782008 2015-08-06] (Avira Operations GmbH & Co. KG)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-3818097743-2910630115-3089578861-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)

HKU\S-1-5-21-3818097743-2910630115-3089578861-1001\...\Run: [OneDrive] => C:\Users\yenal\AppData\Local\Microsoft\OneDrive\OneDrive.exe [404064 2015-08-19] (Microsoft Corporation)

HKU\S-1-5-21-3818097743-2910630115-3089578861-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)

HKU\S-1-5-21-3818097743-2910630115-3089578861-1001\...\Run: [GoogleChromeAutoLaunch_2A6D74064AE9646F1F75543FE157C450] => "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window

HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.)

ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei

ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei

ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-03-22]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{042cad28-524c-4224-8e9b-a0ebf3e6691a}: [NameServer] 52.18.92.32,8.8.8.8

Tcpip\..\Interfaces\{042cad28-524c-4224-8e9b-a0ebf3e6691a}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{1f85306a-6f8c-4785-83aa-2f8fc7f0f740}: [NameServer] 52.18.92.32,8.8.8.8

Tcpip\..\Interfaces\{88c6ca3d-a1a5-4605-953c-472029cb9b29}: [NameServer] 52.18.92.32,8.8.8.8

Tcpip\..\Interfaces\{aa1d9eb4-cd6b-4f61-9248-2022fea286bb}: [NameServer] 52.18.92.32,8.8.8.8

Tcpip\..\Interfaces\{aa1d9eb4-cd6b-4f61-9248-2022fea286bb}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{ac94f260-3aca-11e5-9bc2-806e6f6e6963}: [NameServer] 52.18.92.32,8.8.8.8
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1

HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

HKU\S-1-5-21-3818097743-2910630115-3089578861-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu

HKU\S-1-5-21-3818097743-2910630115-3089578861-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp

SearchScopes: HKLM-x32 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://www.v9.com/web?type=ds&ts=1439353577&from=zzgbkk123&uid=st500lm012xhn-m500mbb_s2tvj9aca00955&z=389281e43ef17c4c483a5abg5z5c6t0c9w6c9w4zaz&q={searchTerms}

SearchScopes: HKU\S-1-5-21-3818097743-2910630115-3089578861-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKU\S-1-5-21-3818097743-2910630115-3089578861-1001 -> {1D4D2F86-5C87-4638-8C18-15090024F198} URL = 

SearchScopes: HKU\S-1-5-21-3818097743-2910630115-3089578861-1001 -> {27CCB796-2EB8-4E68-8D93-E951DF98E876} URL = 

SearchScopes: HKU\S-1-5-21-3818097743-2910630115-3089578861-1001 -> {388008D3-0407-4305-8737-314A859DF6E0} URL = 

SearchScopes: HKU\S-1-5-21-3818097743-2910630115-3089578861-1001 -> {723FDFDD-60C8-4EB3-B67E-8A5BA842F315} URL = 

SearchScopes: HKU\S-1-5-21-3818097743-2910630115-3089578861-1001 -> {AFF1E0DD-5CEB-4E6D-BA74-C63C783EDF86} URL = 

SearchScopes: HKU\S-1-5-21-3818097743-2910630115-3089578861-1001 -> {F8C4E6D9-4294-446B-B564-9DB6E3193EAF} URL = 

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-01] (Oracle Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-01] (Oracle Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\yenal\AppData\Roaming\Mozilla\Firefox\Profiles\dh2dfdjv.default

FF SearchEngineOrder.1: V9

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll [2013-01-24] ( Microsoft Corporation)

FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-08-18] (Unity Technologies ApS)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll [2014-03-11] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-01] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-01] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll [2013-01-24] ( Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-08-05] (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-30] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-30] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\6\NP_wtapp.dll [2013-09-21] ()

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-3818097743-2910630115-3089578861-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\yenal\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

FF Plugin HKU\S-1-5-21-3818097743-2910630115-3089578861-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\yenal\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-18] (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-3818097743-2910630115-3089578861-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-08-05] (Pando Networks)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\yenal\AppData\Roaming\Mozilla\Firefox\Profiles\dh2dfdjv.default\searchplugins\v9-.xml [2015-06-09]

FF Extension: Avira Browser Safety - C:\Users\yenal\AppData\Roaming\Mozilla\Firefox\Profiles\dh2dfdjv.default\Extensions\abs@avira.com [2015-09-01]

FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\yenal\AppData\Roaming\Mozilla\Firefox\Profiles\dh2dfdjv.default\Extensions\artur.dubovoy@gmail.com [2015-08-28]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

FF HKU\S-1-5-21-3818097743-2910630115-3089578861-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff

FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-04-06]
 

Chrome: 

=======

CHR Profile: C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-26]

CHR Extension: (Chrome Web Store Payments) - C:\Users\yenal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-07]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

CHR HKLM-x32\...\Chrome\Extension: [mmiopbgcekanlhpjkonogoljpfmhpkhf] - C:\Program Files (x86)\LyricsPal\125.crx <nicht gefunden>

CHR HKLM-x32\...\Chrome\Extension: [pnbbffeddnekkhjmokkhdebbfbibbflc] - C:\Program Files (x86)\LyricsPal\130.crx <nicht gefunden>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [887128 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [461672 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [461672 2015-08-06] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1213072 2015-08-06] (Avira Operations GmbH & Co. KG)

S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [227592 2015-08-03] (Avira Operations GmbH & Co. KG)

R3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-08-19] (BlueStack Systems, Inc.)

R3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-08-19] (BlueStack Systems, Inc.)

R3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [839288 2015-08-19] (BlueStack Systems, Inc.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)

R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2015-02-04] (Intel Corporation)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2013-12-18] (WildTangent)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328608 2015-07-30] (Intel Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

R2 LMIGuardianSvc; C:\PROGRAM FILES (X86)\LOGMEIN HAMACHI\LMIGUARDIANSVC.EXE [377104 2013-10-11] (LogMeIn, Inc.)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)

S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3542000 2015-01-21] (INCA Internet Co., Ltd.)

S3 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [266168 2015-02-04] (Intel Corporation)

S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [377768 2015-02-04] (Intel Corporation)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-11-07] (Sony Corporation)

R3 VUAgent; C:\PROGRAM FILES\SONY\VAIO UPDATE\VUAGENT.EXE [1642544 2014-02-28] (Sony Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-11-28] (Atheros) [Datei ist nicht signiert]

S2 cobomiku; C:\Program Files (x86)\1FC532F5-1440020253-4F4C-8F8D-630A2C741625\hnsuE11F.tmp [X]

S2 hyverumu; C:\Program Files (x86)\1FC532F5-1440020253-4F4C-8F8D-630A2C741625\jnsqCA59.tmp [X]

S2 micidymy; C:\Program Files (x86)\1FC532F5-1440020253-4F4C-8F8D-630A2C741625\knso91BF.tmpfs [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 athr; C:\Windows\System32\drivers\athwbx.sys [3837440 2013-12-02] (Qualcomm Atheros Communications, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [137288 2015-08-06] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [148632 2015-08-06] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-08-06] (Avira Operations GmbH & Co. KG)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-08-19] (BlueStack Systems)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)

S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-10-04] (GFI Software)

S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-11-29] (LogMeIn Inc.)

S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)

S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-26] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)

R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )

R1 SbFw; C:\Windows\System32\drivers\SbFw.sys [253528 2011-04-05] (Sunbelt Software, Inc.)

R3 semav6thermal64ro; C:\WINDOWS\system32\drivers\semav6thermal64ro.sys [13792 2015-08-01] ()

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)

R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S2 acwfp; \??\C:\WINDOWS\system32\Drivers\acwfp64.sys [X]

U3 DfSdkS; kein ImagePath

S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-04 21:46 - 2015-09-04 21:46 - 00016148 _____ C:\WINDOWS\system32\KADIR-ALI_yenal_HistoryPrediction.bin

2015-09-04 21:22 - 2015-09-04 21:48 - 00028554 _____ C:\Users\yenal\Downloads\FRST.txt

2015-09-02 14:27 - 2015-09-02 14:28 - 02104188 _____ C:\Users\yenal\Downloads\SkyBlock-Map.zip

2015-09-02 14:18 - 2015-09-02 14:18 - 00003806 _____ C:\WINDOWS\System32\Tasks\One-Click Optimizer WO11

2015-09-02 14:16 - 2015-09-02 14:16 - 00001565 _____ C:\Users\Public\Desktop\Ein-Klick-Optimierung (WO2015).lnk

2015-09-02 14:16 - 2015-09-02 14:16 - 00001329 _____ C:\Users\Public\Desktop\Ashampoo WinOptimizer 2015.lnk

2015-09-02 14:16 - 2015-09-02 14:16 - 00000214 _____ C:\Users\Public\Desktop\Your Software Deals.url

2015-09-02 14:16 - 2015-09-02 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo

2015-09-02 14:16 - 2015-09-02 14:16 - 00000000 ____D C:\ProgramData\Ashampoo

2015-09-02 14:16 - 2015-09-02 14:16 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2015-09-02 14:16 - 2009-08-24 21:13 - 00034304 _____ (mst software GmbH, Germany) C:\WINDOWS\system32\DfSdkBt.exe

2015-09-02 14:11 - 2015-09-02 14:12 - 28444000 _____ (Ashampoo GmbH & Co. KG ) C:\Users\yenal\Downloads\ashampoo_winoptimizer_2015_18590.exe

2015-09-01 21:23 - 2015-09-01 21:23 - 00000000 ____D C:\Users\yenal\AppData\Roaming\Avira

2015-09-01 21:12 - 2015-08-06 20:58 - 00148632 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys

2015-09-01 21:12 - 2015-08-06 20:58 - 00137288 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys

2015-09-01 21:12 - 2015-08-06 20:58 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys

2015-09-01 21:12 - 2015-08-06 20:58 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys

2015-09-01 21:01 - 2015-09-01 21:01 - 00000000 ____D C:\Users\yenal\AppData\Roaming\Sun

2015-09-01 21:01 - 2015-09-01 21:01 - 00000000 ____D C:\Users\yenal\.oracle_jre_usage

2015-09-01 20:59 - 2015-09-01 20:59 - 00584288 _____ (Oracle Corporation) C:\Users\yenal\Downloads\JavaSetup8u60.exe

2015-09-01 13:42 - 2015-09-01 17:29 - 00000267 _____ C:\Users\yenal\Desktop\Handy.txt

2015-09-01 13:39 - 2015-08-20 08:07 - 08019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2015-09-01 13:39 - 2015-08-20 08:06 - 00609592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2015-09-01 13:39 - 2015-08-20 08:02 - 22324656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2015-09-01 13:39 - 2015-08-20 07:57 - 00077400 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-09-01 13:39 - 2015-08-20 07:26 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2015-09-01 13:39 - 2015-08-20 07:21 - 21875200 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-09-01 13:39 - 2015-08-20 07:21 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2015-09-01 13:39 - 2015-08-20 07:16 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2015-09-01 13:39 - 2015-08-20 07:13 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-09-01 13:39 - 2015-08-20 07:09 - 00929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2015-09-01 13:39 - 2015-08-20 06:31 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-09-01 13:39 - 2015-08-18 09:56 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2015-09-01 13:39 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2015-09-01 13:39 - 2015-08-18 09:54 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2015-09-01 13:39 - 2015-08-18 09:27 - 01771592 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2015-09-01 13:39 - 2015-08-18 09:24 - 00963920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2015-09-01 13:39 - 2015-08-18 09:13 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll

2015-09-01 13:39 - 2015-08-18 09:13 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll

2015-09-01 13:39 - 2015-08-18 09:12 - 02225664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2015-09-01 13:39 - 2015-08-18 09:07 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2015-09-01 13:39 - 2015-08-18 09:04 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2015-09-01 13:39 - 2015-08-18 09:04 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2015-09-01 13:39 - 2015-08-18 08:59 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll

2015-09-01 13:39 - 2015-08-18 08:59 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll

2015-09-01 13:39 - 2015-08-18 08:58 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll

2015-09-01 13:39 - 2015-08-18 08:58 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll

2015-09-01 13:39 - 2015-08-18 08:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll

2015-09-01 13:39 - 2015-08-18 08:58 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll

2015-09-01 13:39 - 2015-08-18 08:57 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll

2015-09-01 13:39 - 2015-08-18 08:56 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll

2015-09-01 13:39 - 2015-08-18 08:55 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-09-01 13:39 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll

2015-09-01 13:39 - 2015-08-18 08:54 - 00247296 _____ C:\WINDOWS\system32\facecredentialprovider.dll

2015-09-01 13:39 - 2015-08-18 08:52 - 01888768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2015-09-01 13:39 - 2015-08-18 08:50 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-09-01 13:39 - 2015-08-18 08:49 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2015-09-01 13:39 - 2015-08-18 08:49 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll

2015-09-01 13:39 - 2015-08-18 08:49 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll

2015-09-01 13:39 - 2015-08-18 08:36 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll

2015-09-01 13:39 - 2015-08-18 08:35 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll

2015-09-01 13:39 - 2015-08-18 08:35 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll

2015-09-01 13:39 - 2015-08-18 08:34 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll

2015-09-01 13:39 - 2015-08-18 08:29 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2015-09-01 13:39 - 2015-08-18 08:26 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll

2015-09-01 13:39 - 2015-08-18 06:44 - 00008847 _____ C:\WINDOWS\system32\ResPriHMImageList

2015-08-31 18:34 - 2015-09-01 18:12 - 00000946 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job

2015-08-31 18:34 - 2015-08-31 18:34 - 00004014 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier

2015-08-31 18:28 - 2015-08-31 18:28 - 08022840 _____ (Unity Technologies ApS) C:\Users\yenal\Downloads\UnityWebPlayerFull64.exe

2015-08-31 18:26 - 2015-08-31 18:27 - 00001863 _____ C:\Users\yenal\Desktop\chrome.exe.lnk

2015-08-31 18:25 - 2015-08-31 18:25 - 01089496 _____ (Unity Technologies ApS) C:\Users\yenal\Downloads\UnityWebPlayer.exe

2015-08-31 18:18 - 2015-08-31 18:18 - 00000000 ____D C:\Program Files\Unity

2015-08-31 18:17 - 2015-08-31 18:17 - 01106840 _____ (Unity Technologies ApS) C:\Users\yenal\Downloads\UnityWebPlayer64.exe

2015-08-31 14:26 - 2015-08-31 14:26 - 00000000 ____D C:\Users\yenal\Documents\Bloop

2015-08-30 12:00 - 2015-08-30 12:00 - 00000000 ___HD C:\OneDriveTemp

2015-08-29 23:10 - 2015-09-01 20:56 - 00000000 ____D C:\Users\yenal\Downloads\FRST-OlderVersion

2015-08-29 23:10 - 2015-08-29 23:12 - 00852704 _____ C:\Users\yenal\Desktop\SecurityCheck.exe

2015-08-29 22:59 - 2015-08-29 23:00 - 02870984 _____ (ESET) C:\Users\yenal\Downloads\esetsmartinstaller_deu.exe

2015-08-28 14:36 - 2015-08-28 15:02 - 00000000 ____D C:\Users\yenal\Downloads\BOISpiderMod09_1

2015-08-28 14:27 - 2015-08-28 14:33 - 38476675 _____ C:\Users\yenal\Downloads\BOISpiderMod09_1.zip

2015-08-26 22:37 - 2015-08-26 22:37 - 00931408 _____ (Google Inc.) C:\Users\yenal\Downloads\ChromeSetup.exe

2015-08-26 22:28 - 2015-08-26 22:32 - 96522107 _____ C:\Users\yenal\Downloads\chrome-win32 (1).zip

2015-08-26 20:42 - 2015-08-26 20:52 - 00000000 ____D C:\Program Files (x86)\BlueStacks

2015-08-26 20:42 - 2015-08-26 20:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2015-08-26 20:42 - 2015-08-26 20:42 - 00000000 ____D C:\ProgramData\BlueStacks

2015-08-26 20:41 - 2015-08-26 20:47 - 00000000 ____D C:\ProgramData\BlueStacksSetup

2015-08-26 20:41 - 2015-08-26 20:41 - 00000000 ____D C:\Users\yenal\AppData\Local\Bluestacks

2015-08-26 20:40 - 2015-08-26 20:41 - 14634624 _____ (BlueStack Systems Inc.) C:\Users\yenal\Downloads\ThinInstaller_native.exe

2015-08-26 16:50 - 2015-08-26 16:50 - 00001208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

2015-08-26 16:28 - 2015-08-26 16:28 - 01605632 _____ C:\Users\yenal\Downloads\AdwCleaner (1).exe

2015-08-26 15:47 - 2015-08-26 15:47 - 01605632 _____ C:\Users\yenal\Downloads\AdwCleaner.exe

2015-08-26 00:20 - 2015-08-26 00:20 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-08-26 00:20 - 2015-08-26 00:20 - 00001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-08-26 00:20 - 2015-08-26 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-08-26 00:20 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2015-08-26 00:20 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2015-08-26 00:20 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2015-08-26 00:19 - 2015-08-26 00:20 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-08-26 00:18 - 2015-08-26 00:18 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\yenal\Downloads\mbam-setup-2.1.8.1057.exe

2015-08-25 21:41 - 2015-09-02 14:22 - 00000000 ____D C:\WINDOWS\Minidump

2015-08-25 00:09 - 2015-08-25 00:11 - 67155919 _____ C:\Users\yenal\Downloads\ChromaHills-128x_1.6_1.0.6.zip

2015-08-25 00:06 - 2015-08-25 00:06 - 00950152 _____ C:\Users\yenal\Downloads\PortalGun2.0.2.zip

2015-08-24 23:53 - 2015-08-24 23:53 - 02206698 _____ C:\Users\yenal\Downloads\forge-1.6.4-9.11.0.883-installer.jar

2015-08-24 23:49 - 2015-08-24 23:50 - 02269709 _____ C:\Users\yenal\Downloads\forge-1.6.4-9.11.1.953-installer.jar

2015-08-24 23:42 - 2015-08-24 23:42 - 02786954 _____ C:\Users\yenal\Downloads\forge-1.7.2-10.12.2.1121-installer (1).jar

2015-08-24 23:40 - 2015-08-24 23:40 - 02786954 _____ C:\Users\yenal\Downloads\forge-1.7.2-10.12.2.1121-installer.jar

2015-08-24 23:38 - 2015-08-24 23:38 - 02752442 _____ () C:\Users\yenal\Downloads\forge-1.7.2-10.12.1.1060-installer-win.exe

2015-08-24 23:38 - 2015-08-24 23:38 - 02723770 _____ C:\Users\yenal\Downloads\forge-1.7.2-10.12.1.1060-installer.jar

2015-08-24 23:35 - 2015-08-24 23:35 - 02660825 _____ () C:\Users\yenal\Downloads\forge-1.7.2-10.12.0.1024-installer-win (1).exe

2015-08-24 23:35 - 2015-08-24 23:35 - 02632153 _____ C:\Users\yenal\Downloads\forge-1.7.2-10.12.0.1024-installer.jar

2015-08-24 23:34 - 2015-08-24 23:34 - 02660825 _____ () C:\Users\yenal\Downloads\forge-1.7.2-10.12.0.1024-installer-win.exe

2015-08-24 23:29 - 2015-08-24 23:30 - 24580833 _____ (Craften.de ) C:\Users\yenal\Downloads\craftenterminal.exe

2015-08-24 23:20 - 2015-08-24 23:20 - 00151280 _____ C:\Users\yenal\Downloads\GelsPlus-universal-1.7.2-1.2.0.jar

2015-08-24 23:09 - 2015-08-24 23:09 - 02936397 _____ C:\Users\yenal\Downloads\_Minecraft-Forge-Installer-1.7.2.jar

2015-08-24 23:05 - 2015-08-24 23:05 - 03077905 _____ C:\Users\yenal\Downloads\_forge-1.7.10-10.13.2.1230-installer.jar

2015-08-24 23:03 - 2015-08-24 23:03 - 03333571 _____ C:\Users\yenal\Downloads\forge-1.7.10-10.13.4.1492-1.7.10-installer-win (1).exe

2015-08-24 23:02 - 2015-08-24 23:02 - 03333571 _____ C:\Users\yenal\Downloads\forge-1.7.10-10.13.4.1492-1.7.10-installer-win.exe

2015-08-24 22:59 - 2015-08-24 22:59 - 00622662 _____ C:\Users\yenal\Downloads\Portal-Gun-Mod-1.7.10.jar

2015-08-24 22:58 - 2015-08-24 22:58 - 01152800 _____ C:\Users\yenal\Downloads\Portal Gun Mod Installer 1.7.10.exe

2015-08-24 22:57 - 2015-08-24 22:57 - 00559048 _____ C:\Users\yenal\Downloads\Portal Gun Mod Installer 1.7.10.zip

2015-08-24 22:57 - 2015-08-24 22:57 - 00559048 _____ C:\Users\yenal\Downloads\Portal Gun Mod Installer 1.7.10 (1).zip

2015-08-24 22:44 - 2015-08-24 22:53 - 00001540 _____ C:\Users\yenal\Downloads\SkyGrid 1_5.zip

2015-08-23 14:44 - 2015-08-23 14:44 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\yenal\Downloads\revosetup.exe

2015-08-23 14:44 - 2015-08-23 14:44 - 00001341 _____ C:\Users\yenal\Desktop\Revo Uninstaller.lnk

2015-08-23 14:44 - 2015-08-23 14:44 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2015-08-23 14:42 - 2015-08-23 14:42 - 01798576 _____ (Malwarebytes Corporation) C:\Users\yenal\Downloads\JRT.exe

2015-08-23 14:41 - 2015-08-23 14:42 - 21547816 _____ (Malwarebytes Corporation ) C:\Users\yenal\Downloads\mbam-setup.exe

2015-08-23 14:04 - 2015-08-23 14:06 - 00000022 _____ C:\Users\yenal\Downloads\chrome-win32.zip

2015-08-23 00:11 - 2015-08-23 00:11 - 00703472 _____ (Opera Software) C:\Users\yenal\Downloads\Opera_NI_stable.exe

2015-08-20 19:43 - 2015-09-04 21:48 - 00000000 ____D C:\FRST

2015-08-20 19:42 - 2015-09-01 20:56 - 02188800 _____ (Farbar) C:\Users\yenal\Downloads\FRST64.exe

2015-08-20 18:22 - 2015-08-20 18:30 - 00000000 ____D C:\Users\yenal\Downloads\backups

2015-08-20 18:07 - 2015-08-20 18:07 - 00017377 _____ C:\Users\yenal\Desktop\hijackthis.log

2015-08-20 16:16 - 2015-09-01 18:12 - 00000000 ____D C:\Program Files (x86)\Spyware Terminator

2015-08-20 16:15 - 2015-08-20 16:15 - 09488448 _____ (Crawler Group ) C:\Users\yenal\Downloads\SpywareTerminatorSetup2015_300102.exe

2015-08-20 16:15 - 2015-08-20 16:15 - 02024048 _____ C:\Users\yenal\Downloads\AdAware117WebInstaller.exe

2015-08-20 14:45 - 2015-08-20 14:45 - 00000000 ____D C:\Users\yenal\Documents\Simply Super Software

2015-08-20 14:45 - 2015-08-20 14:45 - 00000000 ____D C:\ProgramData\Licenses

2015-08-20 14:44 - 2015-08-28 12:02 - 00000000 ____D C:\Program Files (x86)\Trojan Remover

2015-08-20 14:44 - 2015-08-20 14:44 - 00000000 ____D C:\ProgramData\Simply Super Software

2015-08-20 14:44 - 2015-08-20 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover

2015-08-20 14:43 - 2015-08-20 14:44 - 35218576 _____ (Simply Super Software ) C:\Users\yenal\Downloads\trjsetup692.exe

2015-08-20 13:46 - 2015-07-24 22:40 - 00000854 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20150820-134621.backup

2015-08-20 13:41 - 2015-08-20 13:41 - 00000000 ____D C:\Users\kadir\AppData\Local\Packages

2015-08-20 13:35 - 2015-08-26 16:20 - 00000000 ____D C:\AdwCleaner

2015-08-20 13:31 - 2015-08-20 13:36 - 340465664 _____ C:\Users\yenal\Downloads\kav_rescue_1032.iso

2015-08-20 13:30 - 2015-08-20 13:30 - 00001464 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk

2015-08-20 13:30 - 2015-08-20 13:30 - 00001452 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2015-08-20 13:30 - 2015-08-20 13:30 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking

2015-08-20 13:30 - 2015-08-20 13:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2

2015-08-20 13:29 - 2015-08-26 16:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2015-08-20 13:29 - 2015-08-20 13:30 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2015-08-20 13:29 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe

2015-08-20 13:28 - 2015-08-20 13:28 - 01585664 _____ C:\Users\yenal\Downloads\adwcleaner_5.002.exe

2015-08-20 13:26 - 2015-08-20 13:27 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\yenal\Downloads\spybot-2.4.exe

2015-08-20 13:17 - 2015-08-20 13:19 - 115413136 _____ (Symantec Corporation) C:\Users\yenal\Downloads\NS-TW-22.0.0-GE.exe

2015-08-20 12:47 - 2015-08-30 11:46 - 00000000 ____D C:\Users\kadir

2015-08-20 12:47 - 2015-08-20 12:47 - 00000020 ___SH C:\Users\kadir\ntuser.ini

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Vorlagen

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Startmenü

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Netzwerkumgebung

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Lokale Einstellungen

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Eigene Dateien

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Druckumgebung

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Documents\Eigene Musik

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Documents\Eigene Bilder

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\AppData\Local\Verlauf

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\AppData\Local\Anwendungsdaten

2015-08-20 12:47 - 2015-08-20 12:47 - 00000000 _SHDL C:\Users\kadir\Anwendungsdaten

2015-08-20 12:47 - 2015-08-12 19:45 - 00000000 ___RD C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-20 12:47 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-08-20 12:47 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-08-20 12:47 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-08-20 12:47 - 2015-07-10 13:04 - 00000000 ____D C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-08-20 12:47 - 2014-11-21 05:42 - 00000369 _____ C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2015-08-20 12:47 - 2014-11-21 05:42 - 00000369 _____ C:\Users\kadir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2015-08-20 12:42 - 2015-08-20 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-08-20 12:10 - 2015-08-20 12:10 - 00001231 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk

2015-08-20 12:10 - 2015-08-20 12:10 - 00001220 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk

2015-08-20 12:10 - 2015-08-20 12:10 - 00001208 _____ C:\Users\Public\Desktop\Security Task Manager.lnk

2015-08-20 12:10 - 2015-08-20 12:10 - 00000000 ____D C:\Program Files (x86)\Security Task Manager

2015-08-20 12:09 - 2015-08-20 12:10 - 02816040 _____ C:\Users\yenal\Downloads\SecurityTaskManager_Setup.exe

2015-08-20 12:04 - 2015-08-20 12:04 - 00001287 _____ C:\Users\Public\Desktop\Avira Launcher.lnk

2015-08-20 12:02 - 2015-09-01 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-08-20 12:02 - 2015-09-01 21:12 - 00000000 ____D C:\ProgramData\Avira

2015-08-20 12:02 - 2015-09-01 21:12 - 00000000 ____D C:\Program Files (x86)\Avira

2015-08-20 12:01 - 2015-08-20 12:02 - 04771216 _____ (Avira Operations GmbH & Co. KG) C:\Users\yenal\Downloads\avira_de_av_55d5a55d16010__ws.exe

2015-08-20 00:53 - 2015-08-20 00:53 - 00388608 _____ (Trend Micro Inc.) C:\Users\yenal\Downloads\HijackThis_2.0.5.exe

2015-08-20 00:53 - 2015-08-20 00:53 - 00016333 _____ C:\Users\yenal\Downloads\hijackthis.log

2015-08-20 00:42 - 2015-08-20 00:42 - 00003256 _____ C:\WINDOWS\System32\Tasks\{7A8B00BA-CAD9-4D7A-91FB-2FC2ABDDC5A2}

2015-08-20 00:28 - 2015-08-20 00:28 - 00000268 _____ C:\WINDOWS\Tasks\Launch 7361.job

2015-08-20 00:25 - 2015-08-20 00:28 - 00000434 _____ C:\task.vbs

2015-08-20 00:25 - 2015-08-20 00:25 - 00000000 ____D C:\Users\yenal\AppData\Local\CrashRpt

2015-08-20 00:21 - 2015-08-20 00:25 - 00003338 _____ C:\WINDOWS\System32\Tasks\DailyPCClean Schedule

2015-08-20 00:17 - 2015-08-20 00:17 - 00003264 _____ C:\WINDOWS\System32\Tasks\{7D3C1379-04A4-40A6-87DB-081BD10EF78E}

2015-08-20 00:10 - 2015-08-20 00:10 - 00000000 ____D C:\TVTime

2015-08-19 23:59 - 2015-08-20 00:24 - 00000364 _____ C:\WINDOWS\SysWOW64\data.bin

2015-08-19 23:42 - 2015-08-19 23:42 - 00003158 _____ C:\WINDOWS\System32\Tasks\cfr3011

2015-08-19 23:41 - 2015-08-11 21:11 - 00349584 _____ (Abengine) C:\WINDOWS\system32\acengine64.dll

2015-08-19 23:38 - 2015-07-24 22:40 - 00000854 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak

2015-08-19 23:34 - 2015-08-19 23:34 - 00000000 _____ C:\WINDOWS\prleth.sys

2015-08-19 23:34 - 2015-08-19 23:34 - 00000000 _____ C:\WINDOWS\hgfs.sys

2015-08-19 23:22 - 2015-08-19 23:28 - 00000000 ___RD C:\Users\yenal\Documents\MEGA

2015-08-19 23:21 - 2015-08-19 23:21 - 00000000 ____D C:\Users\yenal\AppData\Local\Mega Limited

2015-08-19 19:56 - 2015-08-19 19:56 - 00000000 ____D C:\Users\yenal\AppData\Local\Blizzard

2015-08-19 17:58 - 2015-08-19 19:56 - 00000000 ____D C:\Program Files (x86)\Hearthstone

2015-08-19 17:58 - 2015-08-19 17:58 - 00001228 _____ C:\Users\Public\Desktop\Hearthstone.lnk

2015-08-19 17:58 - 2015-08-19 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone

2015-08-19 12:51 - 2015-08-13 06:33 - 24593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-08-19 12:50 - 2015-08-13 06:22 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2015-08-19 12:50 - 2015-08-13 06:20 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2015-08-19 12:50 - 2015-08-13 06:07 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-08-19 12:50 - 2015-08-13 05:53 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2015-08-19 12:50 - 2015-08-11 12:04 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2015-08-19 12:50 - 2015-08-11 12:04 - 02462648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2015-08-19 12:50 - 2015-08-11 12:04 - 01087296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll

2015-08-19 12:50 - 2015-08-11 12:03 - 00442208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2015-08-19 12:50 - 2015-08-11 12:02 - 00554744 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll

2015-08-19 12:50 - 2015-08-11 12:02 - 00292856 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2015-08-19 12:50 - 2015-08-11 12:02 - 00080720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2015-08-19 12:50 - 2015-08-11 11:57 - 03622256 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-08-19 12:50 - 2015-08-11 11:52 - 00993104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll

2015-08-19 12:50 - 2015-08-11 11:50 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2015-08-19 12:50 - 2015-08-11 11:40 - 04048808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2015-08-19 12:50 - 2015-08-11 11:40 - 02151208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2015-08-19 12:50 - 2015-08-11 11:40 - 00918320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll

2015-08-19 12:50 - 2015-08-11 11:38 - 00454000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll

2015-08-19 12:50 - 2015-08-11 11:37 - 00243800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2015-08-19 12:50 - 2015-08-11 11:31 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-08-19 12:50 - 2015-08-11 11:26 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll

2015-08-19 12:50 - 2015-08-11 11:23 - 16706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2015-08-19 12:50 - 2015-08-11 11:21 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2015-08-19 12:50 - 2015-08-11 11:21 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll

2015-08-19 12:50 - 2015-08-11 11:20 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2015-08-19 12:50 - 2015-08-11 11:19 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll

2015-08-19 12:50 - 2015-08-11 11:18 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll

2015-08-19 12:50 - 2015-08-11 11:16 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2015-08-19 12:50 - 2015-08-11 11:14 - 00404480 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll

2015-08-19 12:50 - 2015-08-11 11:13 - 00413184 _____ C:\WINDOWS\system32\diagtrack_win.dll

2015-08-19 12:50 - 2015-08-11 11:11 - 02446336 _____ C:\WINDOWS\system32\InputService.dll

2015-08-19 12:50 - 2015-08-11 11:11 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2015-08-19 12:50 - 2015-08-11 11:10 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2015-08-19 12:50 - 2015-08-11 11:10 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-08-19 12:50 - 2015-08-11 11:10 - 00293376 _____ C:\WINDOWS\system32\TextInputFramework.dll

2015-08-19 12:50 - 2015-08-11 11:09 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll

2015-08-19 12:50 - 2015-08-11 11:08 - 00893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll

2015-08-19 12:50 - 2015-08-11 11:08 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2015-08-19 12:50 - 2015-08-11 11:07 - 01178112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2015-08-19 12:50 - 2015-08-11 11:07 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2015-08-19 12:50 - 2015-08-11 11:07 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe

2015-08-19 12:50 - 2015-08-11 11:06 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2015-08-19 12:50 - 2015-08-11 11:06 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2015-08-19 12:50 - 2015-08-11 11:05 - 03527168 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2015-08-19 12:50 - 2015-08-11 11:05 - 00996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2015-08-19 12:50 - 2015-08-11 11:05 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll

2015-08-19 12:50 - 2015-08-11 11:05 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2015-08-19 12:50 - 2015-08-11 11:05 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPermissions.dll

2015-08-19 12:50 - 2015-08-11 11:05 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll

2015-08-19 12:50 - 2015-08-11 11:03 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2015-08-19 12:50 - 2015-08-11 11:02 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-08-19 12:50 - 2015-08-11 11:02 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2015-08-19 12:50 - 2015-08-11 11:02 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2015-08-19 12:50 - 2015-08-11 11:01 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-08-19 12:50 - 2015-08-11 11:00 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2015-08-19 12:50 - 2015-08-11 11:00 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll

2015-08-19 12:50 - 2015-08-11 10:59 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll

2015-08-19 12:50 - 2015-08-11 10:59 - 00642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll

2015-08-19 12:50 - 2015-08-11 10:59 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2015-08-19 12:50 - 2015-08-11 10:59 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tetheringclient.dll

2015-08-19 12:50 - 2015-08-11 10:58 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2015-08-19 12:50 - 2015-08-11 10:57 - 13024768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2015-08-19 12:50 - 2015-08-11 10:57 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll

2015-08-19 12:50 - 2015-08-11 10:51 - 01916928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2015-08-19 12:50 - 2015-08-11 10:51 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll

2015-08-19 12:50 - 2015-08-11 10:50 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe

2015-08-19 12:50 - 2015-08-11 10:50 - 00200704 _____ C:\WINDOWS\SysWOW64\TextInputFramework.dll

2015-08-19 12:50 - 2015-08-11 10:50 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2015-08-19 12:50 - 2015-08-11 10:49 - 00586752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2015-08-19 12:50 - 2015-08-11 10:49 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-08-19 12:50 - 2015-08-11 10:48 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll

2015-08-19 12:50 - 2015-08-11 10:47 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2015-08-19 12:50 - 2015-08-11 10:45 - 01820672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2015-08-19 12:50 - 2015-08-11 10:43 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2015-08-19 12:50 - 2015-08-11 10:42 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2015-08-19 12:50 - 2015-08-11 10:40 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2015-08-19 12:50 - 2015-08-11 10:40 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-08-19 12:50 - 2015-08-11 10:39 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2015-08-19 12:50 - 2015-08-11 10:38 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll

2015-08-14 20:52 - 2015-08-14 20:52 - 00057744 _____ (PhraseProfessor) C:\WINDOWS\system32\Drivers\ppfd_vw_1_10_0_22.sys

2015-08-13 02:13 - 2015-08-13 02:13 - 00000007 ____H C:\Users\yenal\Desktop\af.txt

2015-08-12 14:30 - 2015-08-03 04:18 - 08613200 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2015-08-12 14:30 - 2015-08-03 03:56 - 06878256 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2015-08-12 14:30 - 2015-08-03 03:18 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-08-12 14:30 - 2015-08-03 03:01 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-08-12 14:29 - 2015-08-08 09:29 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2015-08-12 14:29 - 2015-08-08 09:19 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2015-08-12 14:29 - 2015-08-08 09:01 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2015-08-12 14:29 - 2015-08-08 08:48 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2015-08-12 14:29 - 2015-08-08 08:40 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2015-08-12 14:29 - 2015-08-08 08:24 - 02415104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2015-08-12 14:29 - 2015-08-08 08:24 - 01679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2015-08-12 14:29 - 2015-08-08 08:15 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2015-08-12 14:29 - 2015-08-08 08:00 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2015-08-12 14:29 - 2015-08-06 05:17 - 00237392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys

2015-08-12 14:29 - 2015-08-06 05:17 - 00200528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys

2015-08-12 14:29 - 2015-08-06 04:22 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2015-08-12 14:29 - 2015-08-05 06:49 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2015-08-12 14:29 - 2015-08-05 06:29 - 00644128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2015-08-12 14:29 - 2015-08-05 06:00 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll

2015-08-12 14:29 - 2015-08-05 05:54 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll

2015-08-12 14:29 - 2015-08-05 05:47 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-08-12 14:29 - 2015-08-05 05:39 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll

2015-08-12 14:29 - 2015-08-04 06:07 - 00102752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys

2015-08-12 14:29 - 2015-08-04 06:06 - 00583128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2015-08-12 14:29 - 2015-08-04 06:06 - 00243248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2015-08-12 14:29 - 2015-08-04 05:23 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll

2015-08-12 14:29 - 2015-08-04 04:59 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2015-08-12 14:29 - 2015-08-04 04:47 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2015-08-12 14:29 - 2015-08-03 04:32 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll

2015-08-12 14:29 - 2015-08-03 04:28 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll

2015-08-12 14:29 - 2015-08-03 04:19 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2015-08-12 14:29 - 2015-08-03 04:19 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2015-08-12 14:29 - 2015-08-03 04:18 - 01983840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2015-08-12 14:29 - 2015-08-03 04:18 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2015-08-12 14:29 - 2015-08-03 04:18 - 00046432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys

2015-08-12 14:29 - 2015-08-03 04:17 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2015-08-12 14:29 - 2015-08-03 04:17 - 00052264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys

2015-08-12 14:29 - 2015-08-03 04:12 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2015-08-12 14:29 - 2015-08-03 03:49 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2015-08-12 14:29 - 2015-08-03 03:31 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2015-08-12 14:29 - 2015-08-03 03:30 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll

2015-08-12 14:29 - 2015-08-03 03:24 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2015-08-12 14:29 - 2015-08-03 03:24 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2015-08-12 14:29 - 2015-08-03 03:24 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll

2015-08-12 14:29 - 2015-08-03 03:23 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll

2015-08-12 14:29 - 2015-08-03 03:22 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2015-08-12 14:29 - 2015-08-03 03:22 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2015-08-12 14:29 - 2015-08-03 03:22 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2015-08-12 14:29 - 2015-08-03 03:21 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll

2015-08-12 14:29 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe

2015-08-12 14:29 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe

2015-08-12 14:29 - 2015-08-03 03:18 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2015-08-12 14:29 - 2015-08-03 03:18 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll

2015-08-12 14:29 - 2015-08-03 03:18 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll

2015-08-12 14:29 - 2015-08-03 03:15 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2015-08-12 14:29 - 2015-08-03 03:15 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2015-08-12 14:29 - 2015-08-03 03:15 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll

2015-08-12 14:29 - 2015-08-03 03:15 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2015-08-12 14:29 - 2015-08-03 03:15 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll

2015-08-12 14:29 - 2015-08-03 03:14 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2015-08-12 14:29 - 2015-08-03 03:12 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2015-08-12 14:29 - 2015-08-03 03:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll

2015-08-12 14:29 - 2015-08-03 03:11 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll

2015-08-12 14:29 - 2015-08-03 03:10 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2015-08-12 14:29 - 2015-08-03 03:06 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe

2015-08-12 14:29 - 2015-08-03 03:03 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll

2015-08-12 14:29 - 2015-08-03 03:02 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2015-08-12 14:29 - 2015-08-03 03:02 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2015-08-12 14:29 - 2015-08-03 02:59 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll

2015-08-11 21:47 - 2015-08-11 21:47 - 09284296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2015-08-10 15:38 - 2015-08-10 15:38 - 00000000 _____ C:\WINDOWS\system32\RENF6E1.tmp

2015-08-10 15:36 - 2015-08-10 15:36 - 00000000 ____D C:\ProgramData\Sun

2015-08-07 20:04 - 2015-08-07 20:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2015-08-07 10:09 - 2015-07-30 08:21 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2015-08-07 10:09 - 2015-07-30 08:16 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll

2015-08-07 10:09 - 2015-07-30 06:25 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2015-08-07 10:09 - 2015-07-30 05:49 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2015-08-07 10:09 - 2015-07-30 05:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2015-08-07 10:09 - 2015-07-30 05:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2015-08-07 10:09 - 2015-07-30 05:04 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2015-08-07 10:08 - 2015-07-30 08:24 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2015-08-07 10:08 - 2015-07-30 08:23 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2015-08-07 10:08 - 2015-07-30 08:17 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2015-08-07 10:08 - 2015-07-30 08:17 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll

2015-08-07 10:08 - 2015-07-30 08:15 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2015-08-07 10:08 - 2015-07-30 08:14 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll

2015-08-07 10:08 - 2015-07-30 08:09 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2015-08-07 10:08 - 2015-07-30 08:06 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2015-08-07 10:08 - 2015-07-30 08:05 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2015-08-07 10:08 - 2015-07-30 08:03 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2015-08-07 10:08 - 2015-07-30 07:24 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll

2015-08-07 10:08 - 2015-07-30 06:29 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2015-08-07 10:08 - 2015-07-30 06:26 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll

2015-08-07 10:08 - 2015-07-30 06:26 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2015-08-07 10:08 - 2015-07-30 06:25 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2015-08-07 10:08 - 2015-07-30 06:24 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2015-08-07 10:08 - 2015-07-30 06:24 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2015-08-07 10:08 - 2015-07-30 06:24 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll

2015-08-07 10:08 - 2015-07-30 06:22 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll

2015-08-07 10:08 - 2015-07-30 06:22 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2015-08-07 10:08 - 2015-07-30 06:12 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll

2015-08-07 10:08 - 2015-07-30 06:12 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2015-08-07 10:08 - 2015-07-30 06:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2015-08-07 10:08 - 2015-07-30 06:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2015-08-07 10:08 - 2015-07-30 06:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2015-08-07 10:08 - 2015-07-30 05:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2015-08-07 10:08 - 2015-07-30 05:52 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2015-08-07 10:08 - 2015-07-30 05:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll

2015-08-07 10:08 - 2015-07-30 05:46 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll

2015-08-07 10:08 - 2015-07-30 05:46 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2015-08-07 10:08 - 2015-07-30 05:45 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll

2015-08-07 10:08 - 2015-07-30 05:45 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys

2015-08-07 10:08 - 2015-07-30 05:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2015-08-07 10:08 - 2015-07-30 05:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll

2015-08-07 10:08 - 2015-07-30 05:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll

2015-08-07 10:08 - 2015-07-30 05:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys

2015-08-07 10:08 - 2015-07-30 05:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll

2015-08-07 10:08 - 2015-07-30 05:42 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2015-08-07 10:08 - 2015-07-30 05:41 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2015-08-07 10:08 - 2015-07-30 05:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll

2015-08-07 10:08 - 2015-07-30 05:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2015-08-07 10:08 - 2015-07-30 05:38 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll

2015-08-07 10:08 - 2015-07-30 05:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll

2015-08-07 10:08 - 2015-07-30 05:34 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2015-08-07 10:08 - 2015-07-30 05:29 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll

2015-08-07 10:08 - 2015-07-30 05:07 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll

2015-08-07 10:08 - 2015-07-30 05:06 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll

2015-08-07 10:08 - 2015-07-30 05:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll

2015-08-07 10:08 - 2015-07-30 05:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll

2015-08-07 10:08 - 2015-07-30 05:04 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2015-08-07 10:08 - 2015-07-30 04:59 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2015-08-07 10:08 - 2015-07-30 04:58 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2015-08-06 23:05 - 2015-08-06 23:06 - 00000000 ____D C:\Users\yenal\Documents\Heroes of the Storm

2015-08-06 18:19 - 2015-08-06 18:19 - 00001268 _____ C:\Users\Public\Desktop\Heroes of the Storm.lnk

2015-08-06 18:19 - 2015-08-06 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm

2015-08-06 17:39 - 2015-08-08 18:47 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm

2015-08-06 16:25 - 2015-09-04 21:49 - 00000000 ____D C:\Users\yenal\AppData\Local\Battle.net

2015-08-06 16:25 - 2015-09-04 18:17 - 00000000 ____D C:\Program Files (x86)\Battle.net

2015-08-06 16:25 - 2015-08-06 17:38 - 00000000 ____D C:\Users\yenal\AppData\Roaming\Battle.net

2015-08-06 16:25 - 2015-08-06 16:25 - 00001146 _____ C:\Users\Public\Desktop\Battle.net.lnk

2015-08-06 16:25 - 2015-08-06 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2015-08-06 16:06 - 2015-08-06 16:06 - 00001036 _____ C:\Users\Public\Desktop\Steam.lnk

2015-08-05 12:33 - 2015-08-05 12:37 - 00000000 ____D C:\Users\yenal\AppData\Local\MicrosoftEdge

2015-08-05 10:00 - 2015-08-05 10:00 - 00000000 ____D C:\Users\DefaultAccount\AppData\Local\Packages

2015-08-05 10:00 - 2015-08-05 10:00 - 00000000 ____D C:\Users\DefaultAccount

2015-08-05 01:29 - 2015-08-05 01:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-04 21:47 - 2013-03-10 14:11 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-09-04 21:21 - 2015-05-21 14:55 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-04 21:20 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru

2015-09-04 19:37 - 2013-02-23 20:32 - 00000948 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-3818097743-2910630115-3089578861-1001UA.job

2015-09-04 19:06 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-09-04 18:46 - 2014-08-05 16:19 - 00000000 ____D C:\Users\yenal\AppData\Local\PMB Files

2015-09-04 18:21 - 2015-02-04 19:19 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0409eaf513b0f.job

2015-09-04 17:40 - 2015-02-14 15:24 - 00000000 ____D C:\Program Files (x86)\Steam

2015-09-03 22:01 - 2015-03-24 23:30 - 00004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A36986D3-222A-41C8-9B57-9217FB454971}

2015-09-03 18:40 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache

2015-09-02 20:22 - 2014-05-03 14:32 - 00000000 ____D C:\Users\yenal\AppData\Roaming\Skype

2015-09-02 16:30 - 2014-08-05 16:19 - 00000000 ____D C:\ProgramData\PMB Files

2015-09-02 14:22 - 2015-08-04 20:02 - 00000000 ___DC C:\WINDOWS\Panther

2015-09-02 10:58 - 2013-10-04 21:26 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection

2015-09-02 10:57 - 2014-02-17 17:54 - 00000000 ____D C:\Users\yenal\Documents\Youcam

2015-09-02 10:49 - 2015-08-04 19:14 - 00000000 ____D C:\Users\yenal

2015-09-02 10:47 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-09-01 21:05 - 2015-07-10 11:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2015-09-01 21:02 - 2013-12-13 16:59 - 00000000 ____D C:\ProgramData\Oracle

2015-09-01 21:01 - 2015-06-30 15:55 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2015-09-01 21:01 - 2014-01-10 15:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit

2015-09-01 21:01 - 2013-12-13 16:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-09-01 21:00 - 2012-10-27 00:17 - 00000000 ____D C:\Program Files (x86)\Java

2015-09-01 18:14 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe

2015-09-01 18:14 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-09-01 15:23 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-08-31 18:35 - 2013-08-14 21:59 - 00000000 ____D C:\Users\yenal\AppData\Local\Adobe

2015-08-31 18:34 - 2013-03-10 14:11 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2015-08-31 12:48 - 2014-08-05 14:17 - 00000000 ____D C:\Users\yenal\AppData\Roaming\vlc

2015-08-31 12:45 - 2013-02-22 12:53 - 00000000 ____D C:\Users\yenal\AppData\Local\Packages

2015-08-30 18:16 - 2015-05-21 14:55 - 00004196 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2015-08-30 18:16 - 2015-05-21 14:55 - 00003994 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d0409eaf513b0f

2015-08-29 23:03 - 2015-08-04 19:35 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-08-29 23:03 - 2015-07-10 18:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat

2015-08-29 23:03 - 2015-07-10 18:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat

2015-08-29 22:53 - 2015-06-06 14:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-08-28 18:07 - 2014-02-23 09:46 - 00000000 ____D C:\Users\yenal\Documents\My Games

2015-08-28 17:14 - 2015-08-04 19:52 - 00000000 ____D C:\Users\yenal\AppData\Local\Comms

2015-08-27 15:25 - 2015-05-13 20:00 - 00000000 ____D C:\Users\yenal\AppData\Roaming\.minecraft

2015-08-26 22:38 - 2014-04-20 10:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-08-26 20:42 - 2015-07-10 13:04 - 00000000 __RHD C:\Users\Public\Libraries

2015-08-26 19:32 - 2015-06-07 11:19 - 00000000 ____D C:\Users\yenal\AppData\Local\Warframe

2015-08-26 18:15 - 2015-02-14 19:07 - 00000000 ____D C:\Users\yenal\AppData\Local\CSO

2015-08-26 16:50 - 2014-02-13 20:56 - 00000000 ____D C:\Users\yenal\AppData\Roaming\Opera Software

2015-08-26 16:50 - 2014-02-13 20:56 - 00000000 ____D C:\Users\yenal\AppData\Local\Opera Software

2015-08-26 16:50 - 2014-02-13 20:55 - 00000000 ____D C:\Program Files (x86)\Opera

2015-08-26 16:20 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\System

2015-08-26 16:20 - 2015-05-16 22:22 - 00000000 ____D C:\Users\yenal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-08-26 16:20 - 2015-01-19 15:39 - 00000000 ____D C:\WINDOWS\system32\log

2015-08-26 15:51 - 2014-12-21 21:37 - 636436025 _____ C:\WINDOWS\MEMORY.DMP

2015-08-26 00:09 - 2015-07-10 13:06 - 00000000 ____D C:\WINDOWS\Setup

2015-08-24 23:30 - 2015-06-30 16:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Craften Terminal

2015-08-24 23:30 - 2015-06-30 16:26 - 00000000 ____D C:\Program Files (x86)\Craften Terminal

2015-08-23 14:50 - 2013-03-05 14:00 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-08-20 16:15 - 2013-10-04 21:26 - 00000000 ____D C:\ProgramData\Lavasoft

2015-08-20 16:11 - 2015-08-04 17:39 - 00000000 ___HD C:\$Windows.~BT

2015-08-20 15:27 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF

2015-08-20 12:42 - 2015-03-07 14:57 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-08-20 12:42 - 2014-05-03 14:31 - 00000000 ____D C:\ProgramData\Skype

2015-08-20 12:02 - 2015-02-14 19:01 - 00000000 ____D C:\ProgramData\Package Cache

2015-08-20 00:00 - 2015-08-04 19:14 - 00000000 ___RD C:\Users\yenal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-19 23:49 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2015-08-19 22:41 - 2015-08-04 19:59 - 00002397 _____ C:\Users\yenal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2015-08-19 22:41 - 2015-08-04 19:59 - 00000000 ___RD C:\Users\yenal\OneDrive

2015-08-12 19:49 - 2015-07-10 14:20 - 00244216 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-08-12 19:45 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-12 19:45 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-08-12 14:44 - 2013-08-13 10:39 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-08-12 14:37 - 2013-02-23 10:01 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-08-10 15:38 - 2012-10-27 00:16 - 00000000 ____D C:\Program Files\Java

2015-08-08 18:30 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase

2015-08-08 17:55 - 2014-03-15 22:45 - 00000000 ____D C:\Users\yenal\AppData\Roaming\Apple Computer

2015-08-08 17:38 - 2015-07-10 13:06 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-08-08 17:38 - 2015-07-10 13:06 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-08-07 20:22 - 2014-03-15 22:45 - 00000000 ____D C:\Users\yenal\AppData\Local\Apple Computer

2015-08-07 20:13 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning

2015-08-07 20:04 - 2014-03-15 22:42 - 00000000 ____D C:\Program Files\Common Files\Apple

2015-08-06 23:05 - 2013-09-21 08:50 - 00000000 ____D C:\ProgramData\Blizzard Entertainment

2015-08-06 09:49 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\appcompat
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2013-12-23 13:32 - 2014-01-20 16:54 - 0000396 _____ () C:\Users\yenal\AppData\Roaming\launcher_profiles.json

2013-07-27 00:20 - 2013-08-30 16:20 - 0000073 _____ () C:\Users\yenal\AppData\Roaming\WB.CFG

2013-06-20 09:00 - 2013-07-03 02:41 - 0000005 _____ () C:\Users\yenal\AppData\Roaming\WBPU-Q2-TTL.DAT

2013-07-05 02:21 - 2013-07-07 09:42 - 0000005 _____ () C:\Users\yenal\AppData\Roaming\WBPU-Q3-TTL.DAT

2013-07-09 00:29 - 2013-07-09 00:29 - 0000005 _____ () C:\Users\yenal\AppData\Roaming\WBPU-Q4-TTL.DAT

2013-07-11 07:43 - 2013-07-29 10:20 - 0000005 _____ () C:\Users\yenal\AppData\Roaming\WBPU-Q5-TTL.DAT

2013-06-19 00:20 - 2013-08-30 16:20 - 0000005 _____ () C:\Users\yenal\AppData\Roaming\WBPU-TTL.DAT

2013-09-01 08:45 - 2013-09-01 08:45 - 0003584 _____ () C:\Users\yenal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-07-30 20:50 - 2015-07-30 20:50 - 0000000 _____ () C:\Users\yenal\AppData\Local\{A069CE64-368B-4905-840D-4F1DD0C55AB1}

2013-03-02 14:13 - 2013-03-02 14:13 - 0000060 _____ () C:\ProgramData\6354858.bat

2013-03-02 14:18 - 2013-03-02 14:48 - 0011576 _____ () C:\ProgramData\6354858.pad

2013-03-02 14:13 - 2013-03-02 14:13 - 0000153 _____ () C:\ProgramData\6354858.reg

2015-08-04 19:09 - 2015-08-04 19:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2015-06-20 18:51 - 2015-04-21 18:51 - 0000032 ____R () C:\ProgramData\hash.dat
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\ProgramData\6354858.bat

C:\ProgramData\6354858.pad

C:\ProgramData\6354858.reg

C:\ProgramData\hash.dat

C:\Users\Public\AlexaNSISPlugin.1548.dll
 
 

Einige Dateien in TEMP:

====================

C:\Users\yenal\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-08-26 16:02
 

==================== Ende von FRST.txt ============================