| meriberi | 15.06.2014 21:33 |
ok, der wahnsinn ich hab's geschafft:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-06-2014
Ran by Meriem (administrator) on MERIEM-PC on 15-06-2014 22:20:02
Running from C:\Users\Meriem\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(AppEx Networks Corporation) C:\Program Files\AMD Quick Stream\AMDQuickStream.exe
(Spotify Ltd) C:\Users\Meriem\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Windows\System32\DlProtectSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\EnergyCut\EnergyCut.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\ProgramData\dlprotect.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Windows\System32\PerfCfnterCPL.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [6346464 2013-01-04] (Realtek semiconductor)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2014-04-19] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6199128 2014-04-19] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\EnergyCut\utilty.exe [1581056 2007-04-27] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [EnergyCut] => C:\Program Files (x86)\Lenovo\EnergyCut\EnergyCut.exe [1167360 2007-03-09] (Lenovo (Beijing) Limited)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-05-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Download Protect] => C:\ProgramData\dlprotect.exe [12800 2014-06-12] ()
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2847094928-2611277413-3262722226-1000\...\Run: [AppEx Accelerator UI] => C:\Program Files\AMD Quick Stream\AMDQuickStream.exe [429792 2013-02-08] (AppEx Networks Corporation)
HKU\S-1-5-21-2847094928-2611277413-3262722226-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2847094928-2611277413-3262722226-1000\...\Run: [Spotify Web Helper] => C:\Users\Meriem\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-28] (Spotify Ltd)
HKU\S-1-5-21-2847094928-2611277413-3262722226-1000\...\MountPoints2: {55141ddc-c7e3-11e3-ac07-8211742138cb} - E:\wubi.exe
HKU\S-1-5-21-2847094928-2611277413-3262722226-1000\...\MountPoints2: {e26e12c6-c8ae-11e3-a547-a9957f8366c2} - F:\iLinker.exe
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [102512 2014-05-08] (Skytech Co., Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [91248 2014-05-08] (Skytech Co., Ltd.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = WebSearches
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = WebSearches
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1402613434&from=tugs&uid=ST500LM000-SSHD-8GB_W372PYKQXXXXW372PYKQ&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = WebSearches
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = WebSearches
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1402613434&from=tugs&uid=ST500LM000-SSHD-8GB_W372PYKQXXXXW372PYKQ&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1402613434&from=tugs&uid=ST500LM000-SSHD-8GB_W372PYKQXXXXW372PYKQ&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = WebSearches
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = WebSearches
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1402613434&from=tugs&uid=ST500LM000-SSHD-8GB_W372PYKQXXXXW372PYKQ&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1402613434&from=tugs&uid=ST500LM000-SSHD-8GB_W372PYKQXXXXW372PYKQ&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1402613434&from=tugs&uid=ST500LM000-SSHD-8GB_W372PYKQXXXXW372PYKQ&q={searchTerms}
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: HD-V1.3 - {11111111-1111-1111-1111-110511831160} - No File
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.1.1
FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Meriem\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
Chrome:
=======
CHR StartupUrls: "https://ixquick.de/"
CHR DefaultSearchKeyword: ixquick.com
CHR DefaultSearchProvider: Ixquick HTTPS - Deutsch
CHR DefaultSearchURL: https://ixquick.com/do/search?query={searchTerms}&cat=web&pl=chrome&language=deutsch
CHR DefaultNewTabURL:
CHR Extension: (Google Docs) - C:\Users\Meriem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-13]
CHR Extension: (Google Drive) - C:\Users\Meriem\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-13]
CHR Extension: (YouTube) - C:\Users\Meriem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-13]
CHR Extension: (Google-Suche) - C:\Users\Meriem\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-13]
CHR Extension: (Google Wallet) - C:\Users\Meriem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-13]
CHR Extension: (Google Mail) - C:\Users\Meriem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-13]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Meriem\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-06-13]
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-22] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-22] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [124496 2014-05-05] (Avira Operations GmbH & Co. KG)
R2 DlProtectSvc; C:\Windows\System32\DlProtectSvc.exe [123392 2014-06-12] () [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [704112 2014-05-08] (Cherished Technololgy LIMITED)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
R2 xcopy64; C:\Windows\system32\PerfCfnterCPL.exe [119296 2014-06-12] () [File not signed]
==================== Drivers (Whitelisted) ====================
R2 APXACC; C:\Windows\System32\DRIVERS\appexDrv.sys [217824 2013-03-21] (AppEx Networks Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-19] (Disc Soft Ltd)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-06-03] (Malwarebytes Corporation)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8239456 2013-01-04] (Realtek Semiconductor Corp.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-03-26] (TuneUp Software)
R1 {e63d9559-e4c3-499e-867a-a3c9d0a21400}Gw64; C:\Windows\System32\drivers\{e63d9559-e4c3-499e-867a-a3c9d0a21400}Gw64.sys [61120 2014-06-09] (StdLib)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-15 22:20 - 2014-06-15 22:22 - 00015468 _____ () C:\Users\Meriem\Downloads\FRST.txt
2014-06-15 22:19 - 2014-06-15 22:20 - 00000000 ____D () C:\FRST
2014-06-15 22:19 - 2014-06-15 22:19 - 02081280 _____ (Farbar) C:\Users\Meriem\Downloads\FRST64.exe
2014-06-13 19:56 - 2014-06-13 19:56 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-13 19:43 - 2014-06-13 19:43 - 00002213 _____ () C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2014-06-13 19:43 - 2014-06-13 19:43 - 00002205 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk
2014-06-13 19:43 - 2014-06-13 19:43 - 00002193 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2014-06-13 19:43 - 2014-06-13 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-06-13 19:43 - 2014-04-15 15:59 - 00040760 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2014-06-13 19:43 - 2014-04-15 15:59 - 00029496 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2014-06-13 19:43 - 2014-04-15 15:59 - 00025400 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2014-06-13 19:42 - 2014-06-13 19:43 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014
2014-06-13 19:42 - 2014-06-13 19:42 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\TuneUp Software
2014-06-13 19:42 - 2014-06-13 19:42 - 00000000 ____D () C:\Users\Meriem\AppData\Local\TuneUp Software
2014-06-13 19:41 - 2014-06-13 19:48 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-13 19:41 - 2014-06-13 19:41 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-13 19:39 - 2014-06-13 19:40 - 27883432 _____ (TuneUp Software) C:\Users\Meriem\Downloads\TuneUpUtilities2014_de-DE.exe
2014-06-13 19:01 - 2014-06-13 19:01 - 00388608 _____ (Trend Micro Inc.) C:\Users\Meriem\Downloads\hijackthis_5833.exe
2014-06-13 18:23 - 2014-06-13 18:23 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-13 18:23 - 2014-06-13 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-13 18:21 - 2014-06-15 21:27 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-13 18:21 - 2014-06-15 19:05 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-13 18:21 - 2014-06-13 18:21 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-13 18:21 - 2014-06-13 18:21 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-13 18:17 - 2014-06-13 18:17 - 00918672 _____ (Google Inc.) C:\Users\Meriem\Downloads\ChromeSetup.exe
2014-06-13 17:34 - 2014-06-13 19:02 - 00010925 _____ () C:\Users\Meriem\Downloads\hijackthis.log
2014-06-13 12:04 - 2009-06-10 23:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20140613-120430.backup
2014-06-13 01:29 - 2014-06-13 01:29 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-06-13 01:29 - 2014-06-13 01:29 - 00001383 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-06-13 01:29 - 2014-06-13 01:29 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-06-13 01:29 - 2014-06-13 01:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-06-13 01:28 - 2014-06-13 12:01 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-13 01:28 - 2014-06-13 01:30 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-13 01:28 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-06-13 01:23 - 2014-06-13 01:25 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Meriem\Downloads\spybot-2.3.exe
2014-06-13 01:20 - 2014-06-13 01:20 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Meriem\Downloads\SpyHunter-Installer (2).exe
2014-06-13 00:51 - 2014-06-13 18:12 - 00000000 ____D () C:\ProgramData\WindowsProtectManger
2014-06-13 00:51 - 2014-06-13 00:51 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\SupTab
2014-06-13 00:51 - 2014-06-13 00:51 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-06-13 00:51 - 2014-06-13 00:51 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-06-13 00:50 - 2014-06-13 00:50 - 00000000 ____D () C:\Program Files\003
2014-06-12 23:03 - 2014-06-09 12:10 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{e63d9559-e4c3-499e-867a-a3c9d0a21400}Gw64.sys
2014-06-12 22:02 - 2014-06-12 22:02 - 00000000 ____D () C:\Users\Meriem\AppData\Local\Skype
2014-06-12 22:01 - 2014-06-13 00:04 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Skype
2014-06-12 22:01 - 2014-06-12 22:01 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-12 22:01 - 2014-06-12 22:01 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-12 22:01 - 2014-06-12 22:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-12 22:00 - 2014-06-12 22:01 - 00000000 ____D () C:\ProgramData\Skype
2014-06-12 21:59 - 2014-06-12 21:59 - 00123392 _____ () C:\Windows\system32\DlProtectSvc.exe
2014-06-12 21:59 - 2014-06-12 21:59 - 00119296 _____ () C:\Windows\system32\PerfCfnterCPL.exe
2014-06-12 21:59 - 2014-06-12 21:59 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-06-12 21:57 - 2014-06-13 18:56 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-06-12 21:57 - 2014-06-12 21:57 - 00000000 ____D () C:\Users\Meriem\AppData\Local\globalUpdate
2014-06-12 21:56 - 2014-06-12 21:56 - 00469376 _____ () C:\Users\Meriem\Downloads\skype.exe
2014-06-11 02:05 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 02:05 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 02:05 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 02:05 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 02:05 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 02:05 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 02:05 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 02:05 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 02:05 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 02:05 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 02:05 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 02:05 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 02:05 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 02:05 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 02:05 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-11 02:05 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 02:05 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 02:05 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-11 02:05 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 02:05 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 02:05 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 02:05 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-11 02:05 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 02:05 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 02:05 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 02:05 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 02:05 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 02:05 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 02:05 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 02:05 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-11 02:05 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 02:05 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 02:05 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 02:05 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-11 02:05 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 02:05 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 02:05 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-11 02:05 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 02:05 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 02:05 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 02:05 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 02:05 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 02:05 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 02:05 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-11 02:05 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 02:05 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 02:05 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 02:05 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 02:05 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 02:05 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 02:05 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 02:05 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-11 02:05 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 02:05 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-11 02:05 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 02:05 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 02:05 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 02:05 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 02:05 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 02:05 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 02:05 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-11 02:05 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 02:05 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-11 02:05 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-11 02:03 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-11 02:03 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-06 02:44 - 2014-06-06 02:45 - 00000000 ____D () C:\Users\Meriem\Desktop\Darbuka_files
2014-06-06 02:44 - 2014-06-06 02:44 - 00080355 _____ () C:\Users\Meriem\Desktop\Darbuka.htm
2014-06-05 14:39 - 2014-06-05 14:39 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Mnemosyne
2014-06-05 14:39 - 2014-06-05 14:39 - 00000000 ____D () C:\Users\Meriem\.matplotlib
2014-06-05 14:33 - 2014-06-05 14:34 - 25784542 _____ ( ) C:\Users\Meriem\Downloads\mnemosyne-2.3-setup.exe
2014-06-05 14:27 - 2014-06-05 14:27 - 00000000 _____ () C:\Users\Meriem\Downloads\memorylifter_21362.exe
2014-06-03 03:03 - 2014-06-03 03:03 - 00038799 _____ () C:\Users\Meriem\Desktop\TypenTest XL Persönlichkeitstest.htm
2014-06-03 03:03 - 2014-06-03 03:03 - 00000000 ____D () C:\Users\Meriem\Desktop\TypenTest XL Persönlichkeitstest_files
2014-06-03 01:59 - 2014-06-03 02:00 - 09437951 _____ () C:\Users\Meriem\Downloads\krone-scheibenmaeher.wmv
2014-05-28 23:38 - 2014-05-28 23:38 - 00000000 ____D () C:\Users\Meriem\AppData\Local\com
2014-05-28 23:36 - 2014-06-03 00:25 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Activeris
2014-05-28 23:34 - 2014-06-11 11:02 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-05-28 23:33 - 2014-05-28 23:33 - 00809488 _____ () C:\Users\Meriem\Downloads\Player_Setup.exe
2014-05-28 18:43 - 2014-05-28 18:43 - 00501248 _____ (Facebook Inc.) C:\Users\Meriem\Downloads\FacebookVideoCallSetup_v1.2.205.0.exe
2014-05-28 00:11 - 2014-06-03 00:16 - 00000000 ____D () C:\Users\Meriem\AppData\Local\Spotify
2014-05-28 00:11 - 2014-05-28 00:11 - 00001811 _____ () C:\Users\Meriem\Desktop\Spotify.lnk
2014-05-28 00:11 - 2014-05-28 00:11 - 00001797 _____ () C:\Users\Meriem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-05-28 00:09 - 2014-06-03 21:07 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Spotify
2014-05-28 00:09 - 2014-05-28 00:09 - 00126112 _____ (Spotify Ltd) C:\Users\Meriem\Downloads\SpotifySetup_0.9.10.14.exe
2014-05-25 13:13 - 2014-05-25 13:13 - 00000000 ____D () C:\Program Files (x86)\ShowMyPCService
2014-05-25 13:09 - 2014-05-25 13:10 - 02146552 _____ () C:\Users\Meriem\Desktop\ShowMyPC3160.exe
2014-05-25 02:36 - 2014-05-25 02:36 - 01095461 _____ (pendrivelinux.com) C:\Users\Meriem\Downloads\Universal-USB-Installer-1.9.5.2.exe
2014-05-25 02:34 - 2014-05-25 02:45 - 957349888 ____R () C:\Users\Meriem\Downloads\xubuntu-14.04-desktop-amd64.iso
2014-05-25 02:34 - 2014-05-25 02:34 - 00036747 _____ () C:\Users\Meriem\Downloads\xubuntu-14.04-desktop-amd64.iso.torrent
2014-05-25 02:15 - 2014-05-25 02:16 - 00000000 ____D () C:\Program Files\AMD Quick Stream
2014-05-25 02:15 - 2014-05-25 02:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream
2014-05-25 02:15 - 2013-03-21 12:21 - 00217824 _____ (AppEx Networks Corporation) C:\Windows\system32\Drivers\appexDrv.sys
2014-05-25 02:15 - 2012-08-28 20:27 - 00058536 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys
2014-05-25 02:06 - 2014-05-25 02:06 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-05-25 02:04 - 2013-01-15 17:37 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsUVStoricon.dll
2014-05-25 02:04 - 2013-01-15 17:37 - 00327240 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsUVStor.sys
2014-05-25 02:03 - 2014-05-25 02:07 - 445336096 _____ (Lenovo Group Limited ) C:\Users\Meriem\Downloads\avga141w7.exe
2014-05-25 02:03 - 2014-05-25 02:03 - 06450792 _____ (Lenovo Group Limited ) C:\Users\Meriem\Downloads\cr159w7.exe
2014-05-25 01:58 - 2014-05-25 01:59 - 00000000 ____D () C:\Program Files (x86)\LinuxLive USB Creator
2014-05-25 01:58 - 2014-05-25 01:58 - 04999949 _____ (LinuxLive USB Creator) C:\Users\Meriem\Downloads\LinuxLive_USB_Creator_2.8.28.exe
2014-05-25 01:58 - 2014-05-25 01:58 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator
2014-05-25 01:33 - 2014-05-25 01:33 - 00000183 _____ () C:\Users\Meriem\Downloads\130827_rockenheim_tenaciousd_fes.mov
2014-05-25 01:22 - 2014-06-06 13:43 - 00000000 ____D () C:\Users\Meriem\Desktop\krims
2014-05-25 00:49 - 2014-05-25 00:49 - 00000000 ____D () C:\Users\Meriem\Downloads\The Lego Movie (2014) BLU-RAY [Heartbleed]
2014-05-25 00:17 - 2014-05-25 00:33 - 1010827264 _____ () C:\Users\Meriem\Downloads\ubuntu-14.04-desktop-amd64.iso
2014-05-22 13:48 - 2014-05-22 23:29 - 00000000 ____D () C:\AdwCleaner
2014-05-22 13:48 - 2014-05-22 13:48 - 01326389 _____ () C:\Users\Meriem\Downloads\adwcleaner_3.210.exe
2014-05-22 13:16 - 2014-05-22 13:17 - 00217871 _____ () C:\Users\Meriem\Downloads\ShellExView_1.86.zip
2014-05-22 13:16 - 2014-05-22 13:17 - 00217871 _____ () C:\Users\Meriem\Downloads\ShellExView_1.86 (1).zip
2014-05-22 02:43 - 2014-05-22 02:43 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-18 14:54 - 2014-05-18 14:54 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 14:54 - 2014-05-18 14:54 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-18 14:53 - 2014-05-18 14:53 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-18 14:52 - 2014-05-18 14:57 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-18 14:50 - 2014-05-18 14:56 - 00000000 ____D () C:\Users\Meriem\AppData\Local\Adobe
2014-05-18 14:45 - 2014-05-18 14:45 - 00022792 _____ () C:\Users\Meriem\Desktop\Fragen + Antworten Skript.odt
2014-05-17 23:03 - 2014-05-17 23:03 - 05597688 _____ (Uniblue Systems Ltd ) C:\Users\Meriem\Downloads\driverscanner.exe
2014-05-17 22:45 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-17 22:42 - 2014-05-17 22:42 - 01325827 _____ () C:\Users\Meriem\Downloads\adwcleaner08 (2).exe
2014-05-16 17:27 - 2014-06-10 22:34 - 00000000 ____D () C:\Users\Meriem\Desktop\UNI
2014-05-16 01:17 - 2014-05-16 01:17 - 409233544 _____ () C:\Windows\MEMORY.DMP
2014-05-16 01:17 - 2014-05-16 01:17 - 00276480 _____ () C:\Windows\Minidump\051614-28267-01.dmp
2014-05-16 01:17 - 2014-05-16 01:17 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 01:12 - 2014-06-11 03:12 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-16 01:12 - 2014-06-11 03:09 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
==================== One Month Modified Files and Folders =======
2014-06-15 22:23 - 2014-04-20 00:00 - 00000000 ____D () C:\Users\Meriem\AppData\Local\Temp
2014-06-15 22:22 - 2014-06-15 22:20 - 00015468 _____ () C:\Users\Meriem\Downloads\FRST.txt
2014-06-15 22:20 - 2014-06-15 22:19 - 00000000 ____D () C:\FRST
2014-06-15 22:19 - 2014-06-15 22:19 - 02081280 _____ (Farbar) C:\Users\Meriem\Downloads\FRST64.exe
2014-06-15 22:18 - 2014-04-19 23:31 - 01229505 _____ () C:\Windows\WindowsUpdate.log
2014-06-15 22:12 - 2009-07-14 06:51 - 00043888 _____ () C:\Windows\setupact.log
2014-06-15 21:51 - 2014-04-19 18:53 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-06-15 21:27 - 2014-06-13 18:21 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-15 19:05 - 2014-06-13 18:21 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-15 18:49 - 2011-04-12 09:43 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-06-15 18:49 - 2011-04-12 09:43 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-06-15 18:49 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-15 16:24 - 2014-04-20 00:00 - 00000000 ____D () C:\Users\Meriem\AppData\Local\VirtualStore
2014-06-13 19:56 - 2014-06-13 19:56 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-13 19:48 - 2014-06-13 19:41 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-13 19:43 - 2014-06-13 19:43 - 00002213 _____ () C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
2014-06-13 19:43 - 2014-06-13 19:43 - 00002205 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk
2014-06-13 19:43 - 2014-06-13 19:43 - 00002193 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2014-06-13 19:43 - 2014-06-13 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-06-13 19:43 - 2014-06-13 19:42 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014
2014-06-13 19:42 - 2014-06-13 19:42 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\TuneUp Software
2014-06-13 19:42 - 2014-06-13 19:42 - 00000000 ____D () C:\Users\Meriem\AppData\Local\TuneUp Software
2014-06-13 19:41 - 2014-06-13 19:41 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-13 19:40 - 2014-06-13 19:39 - 27883432 _____ (TuneUp Software) C:\Users\Meriem\Downloads\TuneUpUtilities2014_de-DE.exe
2014-06-13 19:02 - 2014-06-13 17:34 - 00010925 _____ () C:\Users\Meriem\Downloads\hijackthis.log
2014-06-13 19:01 - 2014-06-13 19:01 - 00388608 _____ (Trend Micro Inc.) C:\Users\Meriem\Downloads\hijackthis_5833.exe
2014-06-13 18:56 - 2014-06-12 21:57 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-06-13 18:23 - 2014-06-13 18:23 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-13 18:23 - 2014-06-13 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-13 18:21 - 2014-06-13 18:21 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-13 18:21 - 2014-06-13 18:21 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-13 18:21 - 2014-04-20 00:25 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-13 18:20 - 2010-11-21 05:47 - 00260182 _____ () C:\Windows\PFRO.log
2014-06-13 18:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-13 18:17 - 2014-06-13 18:17 - 00918672 _____ (Google Inc.) C:\Users\Meriem\Downloads\ChromeSetup.exe
2014-06-13 18:12 - 2014-06-13 00:51 - 00000000 ____D () C:\ProgramData\WindowsProtectManger
2014-06-13 18:11 - 2014-04-20 00:01 - 00000997 _____ () C:\Users\Meriem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-13 12:01 - 2014-06-13 01:28 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-13 01:30 - 2014-06-13 01:28 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-13 01:29 - 2014-06-13 01:29 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-06-13 01:29 - 2014-06-13 01:29 - 00001383 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-06-13 01:29 - 2014-06-13 01:29 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-06-13 01:29 - 2014-06-13 01:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-06-13 01:25 - 2014-06-13 01:23 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Meriem\Downloads\spybot-2.3.exe
2014-06-13 01:20 - 2014-06-13 01:20 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Meriem\Downloads\SpyHunter-Installer (2).exe
2014-06-13 00:51 - 2014-06-13 00:51 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\SupTab
2014-06-13 00:51 - 2014-06-13 00:51 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-06-13 00:51 - 2014-06-13 00:51 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-06-13 00:50 - 2014-06-13 00:50 - 00000000 ____D () C:\Program Files\003
2014-06-13 00:26 - 2009-07-14 04:34 - 00000580 _____ () C:\Windows\win.ini
2014-06-13 00:04 - 2014-06-12 22:01 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Skype
2014-06-13 00:03 - 2009-07-14 06:45 - 00016656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-13 00:03 - 2009-07-14 06:45 - 00016656 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-12 22:02 - 2014-06-12 22:02 - 00000000 ____D () C:\Users\Meriem\AppData\Local\Skype
2014-06-12 22:01 - 2014-06-12 22:01 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-12 22:01 - 2014-06-12 22:01 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-12 22:01 - 2014-06-12 22:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-12 22:01 - 2014-06-12 22:00 - 00000000 ____D () C:\ProgramData\Skype
2014-06-12 21:59 - 2014-06-12 21:59 - 00123392 _____ () C:\Windows\system32\DlProtectSvc.exe
2014-06-12 21:59 - 2014-06-12 21:59 - 00119296 _____ () C:\Windows\system32\PerfCfnterCPL.exe
2014-06-12 21:59 - 2014-06-12 21:59 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-06-12 21:57 - 2014-06-12 21:57 - 00000000 ____D () C:\Users\Meriem\AppData\Local\globalUpdate
2014-06-12 21:56 - 2014-06-12 21:56 - 00469376 _____ () C:\Users\Meriem\Downloads\skype.exe
2014-06-11 11:02 - 2014-05-28 23:34 - 00000000 ____D () C:\Program Files (x86)\Re-markit-soft
2014-06-11 03:12 - 2014-05-16 01:12 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 03:09 - 2014-05-16 01:12 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 03:09 - 2014-04-20 15:11 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 03:03 - 2014-05-07 00:59 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-10 22:34 - 2014-05-16 17:27 - 00000000 ____D () C:\Users\Meriem\Desktop\UNI
2014-06-09 12:10 - 2014-06-12 23:03 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{e63d9559-e4c3-499e-867a-a3c9d0a21400}Gw64.sys
2014-06-08 11:13 - 2014-06-11 02:03 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-11 02:03 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-06 13:56 - 2014-05-07 21:10 - 00000000 ____D () C:\Users\Meriem\Desktop\PICS
2014-06-06 13:43 - 2014-05-25 01:22 - 00000000 ____D () C:\Users\Meriem\Desktop\krims
2014-06-06 02:45 - 2014-06-06 02:44 - 00000000 ____D () C:\Users\Meriem\Desktop\Darbuka_files
2014-06-06 02:44 - 2014-06-06 02:44 - 00080355 _____ () C:\Users\Meriem\Desktop\Darbuka.htm
2014-06-05 14:39 - 2014-06-05 14:39 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Mnemosyne
2014-06-05 14:39 - 2014-06-05 14:39 - 00000000 ____D () C:\Users\Meriem\.matplotlib
2014-06-05 14:39 - 2014-04-20 00:00 - 00000000 ____D () C:\Users\Meriem
2014-06-05 14:34 - 2014-06-05 14:33 - 25784542 _____ ( ) C:\Users\Meriem\Downloads\mnemosyne-2.3-setup.exe
2014-06-05 14:27 - 2014-06-05 14:27 - 00000000 _____ () C:\Users\Meriem\Downloads\memorylifter_21362.exe
2014-06-03 21:07 - 2014-05-28 00:09 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Spotify
2014-06-03 03:03 - 2014-06-03 03:03 - 00038799 _____ () C:\Users\Meriem\Desktop\TypenTest XL Persönlichkeitstest.htm
2014-06-03 03:03 - 2014-06-03 03:03 - 00000000 ____D () C:\Users\Meriem\Desktop\TypenTest XL Persönlichkeitstest_files
2014-06-03 02:00 - 2014-06-03 01:59 - 09437951 _____ () C:\Users\Meriem\Downloads\krone-scheibenmaeher.wmv
2014-06-03 00:27 - 2014-04-20 00:01 - 00000000 ___RD () C:\Users\Meriem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-03 00:25 - 2014-05-28 23:36 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Activeris
2014-06-03 00:20 - 2014-05-15 20:45 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-03 00:16 - 2014-05-28 00:11 - 00000000 ____D () C:\Users\Meriem\AppData\Local\Spotify
2014-05-30 12:21 - 2014-06-11 02:05 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 12:02 - 2014-06-11 02:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 12:02 - 2014-06-11 02:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 11:45 - 2014-06-11 02:05 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:39 - 2014-06-11 02:05 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 11:39 - 2014-06-11 02:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 11:38 - 2014-06-11 02:05 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 11:28 - 2014-06-11 02:05 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:27 - 2014-06-11 02:05 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 11:24 - 2014-06-11 02:05 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 11:21 - 2014-06-11 02:05 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 11:21 - 2014-06-11 02:05 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 11:20 - 2014-06-11 02:05 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-11 02:05 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:11 - 2014-06-11 02:05 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 11:08 - 2014-06-11 02:05 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-11 02:05 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 11:02 - 2014-06-11 02:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-30 10:55 - 2014-06-11 02:05 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:49 - 2014-06-11 02:05 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:46 - 2014-06-11 02:05 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-11 02:05 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-30 10:44 - 2014-06-11 02:05 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-11 02:05 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:42 - 2014-06-11 02:05 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-11 02:05 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-11 02:05 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:34 - 2014-06-11 02:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-30 10:33 - 2014-06-11 02:05 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-30 10:30 - 2014-06-11 02:05 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-30 10:29 - 2014-06-11 02:05 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:28 - 2014-06-11 02:05 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-30 10:27 - 2014-06-11 02:05 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:24 - 2014-06-11 02:05 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 10:23 - 2014-06-11 02:05 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-11 02:05 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:10 - 2014-06-11 02:05 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-11 02:05 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-30 10:04 - 2014-06-11 02:05 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-11 02:05 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-11 02:05 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-11 02:05 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-11 02:05 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:50 - 2014-06-11 02:05 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-11 02:05 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-11 02:05 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-11 02:05 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-11 02:05 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-11 02:05 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-11 02:05 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-11 02:05 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-11 02:05 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-28 23:38 - 2014-05-28 23:38 - 00000000 ____D () C:\Users\Meriem\AppData\Local\com
2014-05-28 23:33 - 2014-05-28 23:33 - 00809488 _____ () C:\Users\Meriem\Downloads\Player_Setup.exe
2014-05-28 18:43 - 2014-05-28 18:43 - 00501248 _____ (Facebook Inc.) C:\Users\Meriem\Downloads\FacebookVideoCallSetup_v1.2.205.0.exe
2014-05-28 00:11 - 2014-05-28 00:11 - 00001811 _____ () C:\Users\Meriem\Desktop\Spotify.lnk
2014-05-28 00:11 - 2014-05-28 00:11 - 00001797 _____ () C:\Users\Meriem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-05-28 00:09 - 2014-05-28 00:09 - 00126112 _____ (Spotify Ltd) C:\Users\Meriem\Downloads\SpotifySetup_0.9.10.14.exe
2014-05-25 13:13 - 2014-05-25 13:13 - 00000000 ____D () C:\Program Files (x86)\ShowMyPCService
2014-05-25 13:10 - 2014-05-25 13:09 - 02146552 _____ () C:\Users\Meriem\Desktop\ShowMyPC3160.exe
2014-05-25 02:45 - 2014-05-25 02:34 - 957349888 ____R () C:\Users\Meriem\Downloads\xubuntu-14.04-desktop-amd64.iso
2014-05-25 02:45 - 2014-04-20 15:03 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\uTorrent
2014-05-25 02:36 - 2014-05-25 02:36 - 01095461 _____ (pendrivelinux.com) C:\Users\Meriem\Downloads\Universal-USB-Installer-1.9.5.2.exe
2014-05-25 02:34 - 2014-05-25 02:34 - 00036747 _____ () C:\Users\Meriem\Downloads\xubuntu-14.04-desktop-amd64.iso.torrent
2014-05-25 02:16 - 2014-05-25 02:15 - 00000000 ____D () C:\Program Files\AMD Quick Stream
2014-05-25 02:15 - 2014-05-25 02:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream
2014-05-25 02:10 - 2014-04-20 11:36 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\vlc
2014-05-25 02:07 - 2014-05-25 02:03 - 445336096 _____ (Lenovo Group Limited ) C:\Users\Meriem\Downloads\avga141w7.exe
2014-05-25 02:06 - 2014-05-25 02:06 - 00000000 ____D () C:\Windows\SysWOW64\sda
2014-05-25 02:04 - 2014-04-20 00:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-05-25 02:04 - 2014-04-19 18:34 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-05-25 02:03 - 2014-05-25 02:03 - 06450792 _____ (Lenovo Group Limited ) C:\Users\Meriem\Downloads\cr159w7.exe
2014-05-25 01:59 - 2014-05-25 01:58 - 00000000 ____D () C:\Program Files (x86)\LinuxLive USB Creator
2014-05-25 01:58 - 2014-05-25 01:58 - 04999949 _____ (LinuxLive USB Creator) C:\Users\Meriem\Downloads\LinuxLive_USB_Creator_2.8.28.exe
2014-05-25 01:58 - 2014-05-25 01:58 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator
2014-05-25 01:33 - 2014-05-25 01:33 - 00000183 _____ () C:\Users\Meriem\Downloads\130827_rockenheim_tenaciousd_fes.mov
2014-05-25 00:49 - 2014-05-25 00:49 - 00000000 ____D () C:\Users\Meriem\Downloads\The Lego Movie (2014) BLU-RAY [Heartbleed]
2014-05-25 00:33 - 2014-05-25 00:17 - 1010827264 _____ () C:\Users\Meriem\Downloads\ubuntu-14.04-desktop-amd64.iso
2014-05-25 00:02 - 2010-11-21 05:24 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-05-25 00:02 - 2010-11-21 05:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-05-25 00:02 - 2010-11-21 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2014-05-25 00:02 - 2010-11-21 05:24 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2014-05-25 00:02 - 2010-11-21 05:23 - 00013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2014-05-22 23:29 - 2014-05-22 13:48 - 00000000 ____D () C:\AdwCleaner
2014-05-22 13:48 - 2014-05-22 13:48 - 01326389 _____ () C:\Users\Meriem\Downloads\adwcleaner_3.210.exe
2014-05-22 13:17 - 2014-05-22 13:16 - 00217871 _____ () C:\Users\Meriem\Downloads\ShellExView_1.86.zip
2014-05-22 13:17 - 2014-05-22 13:16 - 00217871 _____ () C:\Users\Meriem\Downloads\ShellExView_1.86 (1).zip
2014-05-22 12:57 - 2014-04-19 22:47 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-22 12:57 - 2014-04-19 22:47 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-22 02:43 - 2014-05-22 02:43 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-05-21 15:59 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-05-20 21:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-18 14:57 - 2014-05-18 14:52 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-18 14:56 - 2014-05-18 14:50 - 00000000 ____D () C:\Users\Meriem\AppData\Local\Adobe
2014-05-18 14:56 - 2014-04-22 14:15 - 00000000 ____D () C:\Users\Meriem\AppData\Roaming\Adobe
2014-05-18 14:54 - 2014-05-18 14:54 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 14:54 - 2014-05-18 14:54 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-18 14:53 - 2014-05-18 14:53 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-18 14:45 - 2014-05-18 14:45 - 00022792 _____ () C:\Users\Meriem\Desktop\Fragen + Antworten Skript.odt
2014-05-17 23:03 - 2014-05-17 23:03 - 05597688 _____ (Uniblue Systems Ltd ) C:\Users\Meriem\Downloads\driverscanner.exe
2014-05-17 22:42 - 2014-05-17 22:42 - 01325827 _____ () C:\Users\Meriem\Downloads\adwcleaner08 (2).exe
2014-05-16 20:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-16 17:05 - 2014-04-20 00:01 - 00000000 ___RD () C:\Users\Meriem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 16:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-16 01:17 - 2014-05-16 01:17 - 409233544 _____ () C:\Windows\MEMORY.DMP
2014-05-16 01:17 - 2014-05-16 01:17 - 00276480 _____ () C:\Windows\Minidump\051614-28267-01.dmp
2014-05-16 01:17 - 2014-05-16 01:17 - 00000000 ____D () C:\Windows\Minidump
2014-05-16 01:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SchCache
Files to move or delete:
====================
C:\ProgramData\dlprotect.exe
Some content of TEMP:
====================
C:\Users\Meriem\AppData\Local\Temp\2040-2082_re-markit.exe
C:\Users\Meriem\AppData\Local\Temp\amsetup_activeris_default_010414_installer.exe
C:\Users\Meriem\AppData\Local\Temp\AutoRun.exe
C:\Users\Meriem\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Meriem\AppData\Local\Temp\avgnt.exe
C:\Users\Meriem\AppData\Local\Temp\cloud_backup_setup.exe
C:\Users\Meriem\AppData\Local\Temp\eauninstall.exe
C:\Users\Meriem\AppData\Local\Temp\FIFA 07_uninst.exe
C:\Users\Meriem\AppData\Local\Temp\lly_webssearches.exe
C:\Users\Meriem\AppData\Local\Temp\media.exe
C:\Users\Meriem\AppData\Local\Temp\NewPlayerUpdater.exe
C:\Users\Meriem\AppData\Local\Temp\newvideoplayersetup.exe
C:\Users\Meriem\AppData\Local\Temp\nsg162A.exe
C:\Users\Meriem\AppData\Local\Temp\nsl55AD.exe
C:\Users\Meriem\AppData\Local\Temp\nsq1DB9.exe
C:\Users\Meriem\AppData\Local\Temp\nsw5DD9.exe
C:\Users\Meriem\AppData\Local\Temp\ose00000.exe
C:\Users\Meriem\AppData\Local\Temp\ProductKeyFinderSetup.exe
C:\Users\Meriem\AppData\Local\Temp\pyl385F.tmp.exe
C:\Users\Meriem\AppData\Local\Temp\pyl7A6C.tmp.exe
C:\Users\Meriem\AppData\Local\Temp\Quarantine.exe
C:\Users\Meriem\AppData\Local\Temp\SHSetup.exe
C:\Users\Meriem\AppData\Local\Temp\smtnew_qone8.exe
C:\Users\Meriem\AppData\Local\Temp\speedupmypc.exe
C:\Users\Meriem\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Meriem\AppData\Local\Temp\vopackage.exe
C:\Users\Meriem\AppData\Local\Temp\_is709E.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-11 18:13
==================== End Of Log ============================
--- --- ---
FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-06-2014
Ran by Meriem at 2014-06-15 22:23:51
Running from C:\Users\Meriem\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.30768 - BitTorrent Inc.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 12.10.100.30322 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{EB7F3D3C-1729-1743-FE07-6CA87F465500}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2013.0322.413.5642 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80322.0410 - Advanced Micro Devices, Inc.) Hidden
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.2.0 - AppEx Networks)
AMD Steady Video Plug-In (Version: 2.06.0000 - AMD) Hidden
AMD VISION Engine Control Center (x32 Version: 2013.0322.413.5642 - Ihr Firmenname) Hidden
Avira (HKLM-x32\...\{70a79d1f-686d-4d5c-962b-07aa1294eae0}) (Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.12.20002 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0322.413.5642 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0322.413.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0322.0412.5642 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0322.413.5642 - Advanced Micro Devices, Inc.) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Download Protect (HKCU\...\{132401a7-2006-4342-b43c-ccf5f02c2b01}) (Version: - Download Protect)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 7.0.3.4 - Lenovo)
Energy Management (x32 Version: 7.0.3.4 - Lenovo) Hidden
EnergyCut (HKLM-x32\...\{6E127727-CE4B-40E4-9A7D-9D65CDE0A15C}) (Version: 1.00 - Lenovo)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10206 - Realtek Semiconductor Corp.)
Lenovo_Wireless_Driver (HKLM-x32\...\{36CE10BD-A076-4DE3-A8A7-2F61E3FB2E6A}) (Version: 6.20.55.14 - Lenovo)
LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.8 - Thibaut Lauziere)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
OEM Application Profile (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Realtek USB Card Reader (HKLM-x32\...\{1E496A68-4943-424E-829D-5C3C85B7B8F2}) (Version: 6.2.9200.39041 - Realtek Semiconductor Corp.)
Shockwave (HKLM-x32\...\Shockwave) (Version: - )
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.3.39 - Safer-Networking Ltd.)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.296 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B7EF38F7-1D58-4085-A9A4-0F6C69A5AA1E}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Windows-Treiberpaket - Lenovo (ACPIVPC) System (12/15/2011 7.1.0.1) (HKLM\...\99841829BE839365AA67B2AD0E50D371F59F8A1E) (Version: 12/15/2011 7.1.0.1 - Lenovo)
WinRAR 5.10 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.2 - win.rar GmbH)
==================== Restore Points =========================
25-05-2014 00:04:59 Installiert Realtek USB Card Reader
25-05-2014 20:46:14 Windows-Sicherung
28-05-2014 21:34:22 Uniblue SpeedUpMyPC installation
02-06-2014 22:26:31 Windows-Sicherung
09-06-2014 14:58:56 Windows-Sicherung
11-06-2014 01:00:21 Windows Update
13-06-2014 17:41:42 TuneUp Utilities 2014 wird installiert
15-06-2014 17:04:52 Windows-Sicherung
15-06-2014 17:14:51 Windows-Sicherung
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {32A368A6-44B3-4A2E-9466-EE7F342E072C} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {3A7D86A2-2ECC-4BD0-82F2-7256B8383DED} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-13] (Google Inc.)
Task: {84E252D5-1B05-4A99-ABA5-611C867C51FA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {8A876ABD-566D-4E33-9726-213253CA4633} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {8DFAA3AC-EC7E-498C-9C17-E0FCFF667C6F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9243095E-05F9-4A6D-B970-C7A737FC3735} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2847094928-2611277413-3262722226-1000
Task: {9F10D918-6EAC-4135-9CC4-BBEA8D83DD07} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {A512DD33-7FBB-46AE-AD56-3474A0AF52D3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {C178AFD6-56F8-4FE9-9D72-FC93189A981B} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08] (Adobe Systems Incorporated)
Task: {FC0E6EA0-3FCC-4E72-A8B1-EC0CC4C09004} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-13] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2008-12-20 03:20 - 2014-04-19 18:41 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll
2012-03-10 16:30 - 2014-04-19 18:41 - 01509936 _____ () C:\Program Files (x86)\Lenovo\Energy Management\EMWpfUI.dll
2012-03-10 16:31 - 2014-04-19 18:41 - 00012336 _____ () C:\Program Files (x86)\Lenovo\Energy Management\de-DE\EMWpfUI.resources.dll
2008-12-20 03:20 - 2014-04-19 18:40 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll
2013-03-22 04:24 - 2013-03-22 04:24 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-06-12 21:59 - 2014-06-12 21:59 - 00123392 _____ () C:\Windows\System32\DlProtectSvc.exe
2014-06-12 21:59 - 2014-06-12 21:59 - 00012800 _____ () C:\ProgramData\dlprotect.exe
2014-06-12 21:59 - 2014-06-12 21:59 - 00119296 _____ () C:\Windows\system32\PerfCfnterCPL.exe
2013-03-22 04:24 - 2013-03-22 04:24 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-04-15 15:59 - 2014-04-15 15:59 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2014-06-13 01:28 - 2014-04-25 14:11 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-06-13 01:28 - 2014-04-25 14:11 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-06-13 01:28 - 2014-04-25 14:11 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-06-13 01:28 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-06-13 01:28 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-04-19 22:48 - 2014-05-05 10:37 - 00049744 _____ () C:\Users\Meriem\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-04-21 12:36 - 2005-06-24 19:05 - 00045056 _____ () C:\Program Files (x86)\Lenovo\EnergyCut\HookLib.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-05 10:37 - 2014-05-05 10:37 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-13 18:23 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-13 18:23 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-13 18:23 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-13 18:23 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-13 18:23 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-06-13 18:23 - 2014-06-05 15:58 - 14612296 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMPCHelper => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tvnserver => ""=""
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
==================== Faulty Device Manager Devices =============
Name: BCM43142A0
Description: BCM43142A0
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/13/2014 07:01:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm hijackthis_5833.exe, Version 2.0.0.4 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 4fc
Startzeit: 01cf872918cd6595
Endzeit: 13
Anwendungspfad: C:\Users\Meriem\Downloads\hijackthis_5833.exe
Berichts-ID: 62938f2a-f31c-11e3-9600-ebe68af209c1
Error: (06/13/2014 06:20:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 06:20:20 PM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Fehler bei der Windows-Lizenzaktivierung. Fehler 0x80070005.
Error: (06/13/2014 05:30:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm HiJackThis204.exe, Version 2.0.0.4 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 13c4
Startzeit: 01cf871bea2d43e5
Endzeit: 121
Anwendungspfad: C:\Users\Meriem\Downloads\HiJackThis204.exe
Berichts-ID: 90223085-f30f-11e3-9ac4-f7397ef29ace
Error: (06/13/2014 04:57:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.17126, Zeitstempel: 0x53882e30
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.17126, Zeitstempel: 0x53883991
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00011d06
ID des fehlerhaften Prozesses: 0x8d8
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (06/13/2014 11:51:50 AM) (Source: Google Update) (EventID: 20) (User: Meriem-PC)
Description: Network Request Error.
Error: 0x80072ee7. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=IE, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee7. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80004005. Http status code 0.
Trying config: source=, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee7. Http s
Error: (06/13/2014 02:41:00 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 90080108
Error: (06/13/2014 00:26:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 00:25:43 AM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Fehler bei der Windows-Lizenzaktivierung. Fehler 0x80070005.
Error: (06/12/2014 11:17:14 PM) (Source: Software Protection Platform Service) (EventID: 8193) (User: )
Description: Fehler beim Lizenzaktivierungsplaner (sppuinotify.dll). Fehlercode:
0x80070005
System errors:
=============
Error: (06/13/2014 06:07:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Update raving reyven" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/13/2014 06:07:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Util raving reyven" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/12/2014 03:08:29 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Wlansvc erreicht.
Error: (06/12/2014 05:00:21 AM) (Source: DCOM) (EventID: 10001) (User: )
Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}
Error: (06/11/2014 06:42:05 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "JAN-SAMSUNG",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{849EE174-C504-43D0-8A37-FDC36C3A1817}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (06/11/2014 05:21:38 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (06/11/2014 04:14:15 AM) (Source: DCOM) (EventID: 10001) (User: )
Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}
Error: (06/10/2014 11:39:27 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}
Error: (06/09/2014 04:55:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/06/2014 00:09:23 AM) (Source: DCOM) (EventID: 10001) (User: )
Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}
Microsoft Office Sessions:
=========================
==================== Memory info ===========================
Percentage of memory in use: 43%
Total physical RAM: 3529.27 MB
Available physical RAM: 1980.63 MB
Total Pagefile: 7056.72 MB
Available Pagefile: 4805.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:244.83 GB) (Free:176.58 GB) NTFS
Drive e: (Ubuntu 14.04 LTS) (CDROM) (Total:0.94 GB) (Free:0 GB) CDFS
Drive g: (Daten) (Fixed) (Total:220.7 GB) (Free:219.6 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: D9FA2484)
Partition: GPT Partition Type.
==================== End Of Log ============================
--- --- --- |
So funktioniert es:
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
SecurityCheck und: