Trojaner-Board
Seite 3 von 3 12 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   ADWARE/BProtector.E (https://www.trojaner-board.de/145545-adware-bprotector-e.html)

cosinus 08.12.2013 18:17
Mach bitte ein frisches FRST-Log

Eumelinchen 08.12.2013 18:48

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 02
Ran by Jasskas (administrator) on JASSKAS-PC on 08-12-2013 18:45:47
Running from C:\Users\Jasskas\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Telefónica I+D) C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
() C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Nokia) C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Google Inc.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Java\jre7\bin\jusched.exe"
HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe [165104 2009-09-17] (Softthinks)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272640 2012-09-12] (Microsoft Corporation)
HKCU\...\Run: [IncrediMail] - C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe [367016 2013-09-14] (IncrediMail, Ltd.)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-01-13] (Google Inc.)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [17418928 2012-07-13] (Skype Technologies S.A.)
HKCU\...\Run: [Rainlendar2] - C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2498048 2012-07-02] ()
HKCU\...\Runonce: [Uninstall C:\Users\Jasskas\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jasskas\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"
MountPoints2: {184b3263-e4ca-11df-b070-002564ec1b44} - I:\NokiaPCIA_Autorun.exe
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] ()
HKLM-x32\...\Run: [PDVDDXSrv] - C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [140520 2009-06-24] (CyberLink Corp.)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-10-15] ()
HKLM-x32\...\Run: [dellsupportcenter] - "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NokiaMServer] - C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
HKLM-x32\...\Run: [NokiaMusic FastStart] - C:\Program Files (x86)\Nokia\Nokia Music Player\NokiaMusicPlayer.exe [2193000 2011-10-21] (Nokia)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1226024 2010-02-22] (Nero AG)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [spup] - C:\Users\Jasskas\AppData\Roaming\ShinyProfile\spup.exe [197664 2013-07-10] ()
AppInit_DLLs:  [ ] ()
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Jasskas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search
SearchScopes: HKCU - DefaultScope Bing URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
SearchScopes: HKCU - Backup.Old.DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
SearchScopes: HKCU - Bing URL = hxxp://www.bing.com/search?q={searchTerms}&form=OSDSRC
SearchScopes: HKCU - {9F6B9B67-C044-439A-A003-28236ADD3C2F} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: ShinyProfile Class - {C8B7D03D-30D7-493A-95E5-6547E2FAC2FE} - C:\Users\Jasskas\AppData\Roaming\ShinyProfile\shinyprofile.dll (TODO: <Company name>)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MyEmoticons Class - {DCC39ACE-709B-44EA-B062-5F6BE2774644} - C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll (GreenTree Applications)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {3860DD98-0549-4D50-AA72-5D17D200EE10} hxxp://cdn.scan.onecare.live.com/resource/download/scanner/en-us/wlscctrl2.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: HKLM-x32 {E77F23EB-E7AB-4502-8F37-247DBAF1A147} hxxp://gfx2.hotmail.com/mail/w4/m3/photouploadcontrol/VistaMSNPUpldde-de.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Homepage: hxxp://de.msn.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pack.google.com/Google Updater;version=14 - C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Jasskas\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Firebug - C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default\Extensions\firebug@software.joehewitt.com
FF Extension: DownloadHelper - C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Page Speed - C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default\Extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
FF Extension: FoxLingo - C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default\Extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
FF Extension: firebug - C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default\Extensions\firejump_1027.zip
FF Extension: defaults - C:\Users\Jasskas\AppData\Roaming\Mozilla\Firefox\Profiles\7gcy6dyr.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi
FF HKLM-x32\...\Firefox\Extensions: [myemoticons@myemoticons.com] - C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com-1.6.1
FF Extension: MyEmoticons - C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com-1.6.1

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\Jasskas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oopofgccipckckifenoicncegojimpmf\1.6.1_0
CHR Extension: (Gmail) - C:\Users\Jasskas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0
CHR HKLM-x32\...\Chrome\Extension: [ajeaeekpfakbiidigngcnelnclhnaibo] - C:\Users\Jasskas\AppData\Local\CRE\ajeaeekpfakbiidigngcnelnclhnaibo.crx
CHR HKLM-x32\...\Chrome\Extension: [oopofgccipckckifenoicncegojimpmf] - C:\Users\Jasskas\AppData\Roaming\MyEmoticons\oopofgccipckckifenoicncegojimpmf.crx

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 ServiceLayer; C:\Program Files (x86)\Nokia\PC Connectivity Solution\ServiceLayer.exe [632832 2011-03-21] (Nokia)
R2 TGCM_ImportWiFiSvc; C:\Program Files (x86)\o2\Mobile Connection Manager\ImpWiFiSvc.exe [199600 2010-11-11] (Telefónica I+D)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [12800 2009-02-03] (ZTE Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology)
S4 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [89600 2005-11-03] (Protection Technology)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-05-18] (Duplex Secure Ltd.)
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 AIDA32Driver; \??\C:\Users\Jasskas\AppData\Local\Temp\aida32.sa6 [x]
S3 cpuz132; \??\C:\Users\Jasskas\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [x]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-08 18:45 - 2013-12-08 18:45 - 00000000 ____D C:\Users\Jasskas\Desktop\FRST-OlderVersion
2013-12-06 18:24 - 2013-12-06 18:24 - 00448512 _____ (OldTimer Tools) C:\Users\Jasskas\Downloads\TFC.exe
2013-12-05 16:59 - 2013-12-05 16:59 - 00001665 _____ C:\Users\Jasskas\Downloads\85
2013-12-05 14:32 - 2013-12-05 14:32 - 02347384 _____ (ESET) C:\Users\Jasskas\Downloads\esetsmartinstaller_enu.exe
2013-12-04 23:14 - 2013-12-04 23:14 - 00028786 _____ C:\Users\Jasskas\Desktop\Addition.txt
2013-12-04 23:11 - 2013-12-08 18:45 - 00018209 _____ C:\Users\Jasskas\Desktop\FRST.txt
2013-12-04 22:52 - 2013-12-04 22:52 - 01959766 _____ (Farbar) C:\Users\Jasskas\Downloads\FRST64(2).exe
2013-12-04 22:51 - 2013-12-04 22:51 - 01959766 _____ (Farbar) C:\Users\Jasskas\Downloads\FRST64(1).exe
2013-12-04 21:13 - 2013-12-04 21:13 - 00002359 _____ C:\Users\Jasskas\Documents\fixlist.txt
2013-12-04 17:46 - 2013-12-08 18:45 - 01927772 _____ (Farbar) C:\Users\Jasskas\Desktop\FRST64.exe
2013-12-04 17:41 - 2013-12-04 17:41 - 00047590 _____ C:\Users\Jasskas\Desktop\JRT.txt
2013-12-04 17:33 - 2013-12-04 17:33 - 00000000 ____D C:\Windows\ERUNT
2013-12-04 17:32 - 2013-12-04 17:32 - 01034531 _____ (Thisisu) C:\Users\Jasskas\Downloads\JRT.exe
2013-12-04 17:11 - 2013-12-04 17:21 - 00000000 ____D C:\AdwCleaner
2013-12-04 17:11 - 2013-12-04 17:11 - 01110034 _____ C:\Users\Jasskas\Downloads\adwcleaner.exe
2013-12-03 16:50 - 2013-12-03 16:50 - 00001071 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-03 16:50 - 2013-12-03 16:50 - 00000000 ____D C:\Users\Jasskas\AppData\Roaming\Malwarebytes
2013-12-03 16:50 - 2013-12-03 16:50 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-03 16:50 - 2013-12-03 16:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-03 16:50 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-03 16:48 - 2013-12-03 16:48 - 00614784 _____ C:\Users\Jasskas\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-03 14:58 - 2013-12-03 14:59 - 00036485 _____ C:\Users\Jasskas\Downloads\Addition.txt
2013-12-03 14:53 - 2013-12-08 18:45 - 00000000 ____D C:\FRST
2013-12-03 14:53 - 2013-12-04 22:10 - 00061159 _____ C:\Users\Jasskas\Downloads\FRST.txt
2013-12-03 11:03 - 2013-12-03 11:04 - 00276768 _____ C:\Windows\Minidump\120313-25428-01.dmp
2013-12-03 10:56 - 2013-12-03 10:56 - 00276776 _____ C:\Windows\Minidump\120313-25584-01.dmp
2013-11-29 14:45 - 2013-11-29 14:45 - 00000000 ____D C:\Users\Jasskas\AppData\Roaming\ShinyProfile
2013-11-29 14:45 - 2013-11-29 14:45 - 00000000 ____D C:\Users\Jasskas\AppData\Local\C
2013-11-29 14:43 - 2013-11-29 14:43 - 00338984 _____ (Amônétízé Ltd) C:\Users\Jasskas\Downloads\Jurassic Realm__3385_il2638368.exe
2013-11-24 15:20 - 2013-11-24 15:20 - 00001088 _____ C:\Users\Public\Desktop\dm-Fotowelt.lnk
2013-11-13 10:36 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 10:36 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 10:36 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 10:36 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 10:36 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 10:36 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 10:36 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 10:36 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 10:36 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 10:35 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 10:35 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 10:35 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 10:35 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 10:35 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 10:35 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 10:35 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 10:35 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 10:35 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 10:35 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 10:35 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 10:35 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 10:35 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 10:35 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 10:35 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 10:35 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 10:35 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 10:35 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 10:35 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 10:35 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 10:35 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-12 23:01 - 2013-11-12 23:01 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-12 23:01 - 2013-11-12 23:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-12 23:01 - 2013-11-12 23:01 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-12 23:01 - 2013-11-12 23:01 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-12 23:01 - 2013-11-12 23:01 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-12 23:01 - 2013-11-12 23:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-12 23:01 - 2013-11-12 23:01 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-12 23:01 - 2013-11-12 23:01 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-12 23:01 - 2013-11-12 23:01 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-12 23:01 - 2013-11-12 23:01 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-12 23:01 - 2013-11-12 23:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-12 22:59 - 2013-11-12 23:02 - 00005684 _____ C:\Windows\IE11_main.log
2013-11-12 17:33 - 2013-11-12 17:33 - 103912569 _____ C:\Windows\SysWOW64\ಗ舣“
2013-11-10 21:21 - 2013-12-06 19:21 - 00003494 _____ C:\Windows\System32\Tasks\Jasskas NBAgent 5 4
2013-11-10 17:56 - 2013-11-10 17:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 17:55 - 2013-11-10 17:55 - 29040552 _____ (Oracle Corporation) C:\Users\Jasskas\Downloads\jre-7u45-windows-i586.exe
2013-11-10 17:54 - 2013-11-10 17:55 - 30694824 _____ (Oracle Corporation) C:\Users\Jasskas\Downloads\jre-7u45-windows-x64(1).exe
2013-11-10 17:52 - 2013-11-10 17:56 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 17:52 - 2013-11-10 17:52 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 17:50 - 2013-11-10 17:50 - 30694824 _____ (Oracle Corporation) C:\Users\Jasskas\Downloads\jre-7u45-windows-x64.exe

==================== One Month Modified Files and Folders =======

2013-12-08 18:47 - 2013-12-04 23:11 - 00018209 _____ C:\Users\Jasskas\Desktop\FRST.txt
2013-12-08 18:45 - 2013-12-08 18:45 - 00000000 ____D C:\Users\Jasskas\Desktop\FRST-OlderVersion
2013-12-08 18:45 - 2013-12-04 17:46 - 01927772 _____ (Farbar) C:\Users\Jasskas\Desktop\FRST64.exe
2013-12-08 18:45 - 2013-12-03 14:53 - 00000000 ____D C:\FRST
2013-12-08 18:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2013-12-08 17:48 - 2012-06-06 12:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-08 17:43 - 2013-10-25 22:23 - 00000000 ____D C:\Nero Autobackup
2013-12-08 17:41 - 2009-07-14 05:45 - 00014032 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-08 17:41 - 2009-07-14 05:45 - 00014032 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-08 17:34 - 2012-09-14 18:03 - 00000000 ____D C:\Users\Jasskas\.rainlendar2
2013-12-08 17:34 - 2010-01-12 21:09 - 00000000 ____D C:\Users\Jasskas\Tracing
2013-12-08 17:34 - 2010-01-12 17:17 - 00000000 ____D C:\Users\Jasskas\AppData\Local\SoftThinks
2013-12-08 17:33 - 2012-10-23 21:22 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-12-08 17:33 - 2011-03-13 11:39 - 00148446 _____ C:\Windows\setupact.log
2013-12-08 17:33 - 2010-01-08 20:02 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-08 17:33 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 13:48 - 2009-07-14 06:10 - 01731447 _____ C:\Windows\WindowsUpdate.log
2013-12-08 11:26 - 2010-01-13 11:44 - 00001034 _____ C:\Windows\Tasks\Google Software Updater.job
2013-12-08 11:17 - 2011-11-06 17:22 - 00000000 ____D C:\Users\Jasskas\AppData\Local\Windows Live
2013-12-08 11:11 - 2013-05-22 09:55 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-12-06 23:01 - 2011-05-06 15:33 - 00062464 _____ C:\Users\Jasskas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-06 19:21 - 2013-11-10 21:21 - 00003494 _____ C:\Windows\System32\Tasks\Jasskas NBAgent 5 4
2013-12-06 18:24 - 2013-12-06 18:24 - 00448512 _____ (OldTimer Tools) C:\Users\Jasskas\Downloads\TFC.exe
2013-12-06 13:46 - 2012-09-01 12:04 - 00000000 ____D C:\Users\Jasskas\AppData\Roaming\Skype
2013-12-05 16:59 - 2013-12-05 16:59 - 00001665 _____ C:\Users\Jasskas\Downloads\85
2013-12-05 14:32 - 2013-12-05 14:32 - 02347384 _____ (ESET) C:\Users\Jasskas\Downloads\esetsmartinstaller_enu.exe
2013-12-04 23:14 - 2013-12-04 23:14 - 00028786 _____ C:\Users\Jasskas\Desktop\Addition.txt
2013-12-04 22:52 - 2013-12-04 22:52 - 01959766 _____ (Farbar) C:\Users\Jasskas\Downloads\FRST64(2).exe
2013-12-04 22:51 - 2013-12-04 22:51 - 01959766 _____ (Farbar) C:\Users\Jasskas\Downloads\FRST64(1).exe
2013-12-04 22:10 - 2013-12-03 14:53 - 00061159 _____ C:\Users\Jasskas\Downloads\FRST.txt
2013-12-04 21:13 - 2013-12-04 21:13 - 00002359 _____ C:\Users\Jasskas\Documents\fixlist.txt
2013-12-04 17:41 - 2013-12-04 17:41 - 00047590 _____ C:\Users\Jasskas\Desktop\JRT.txt
2013-12-04 17:33 - 2013-12-04 17:33 - 00000000 ____D C:\Windows\ERUNT
2013-12-04 17:32 - 2013-12-04 17:32 - 01034531 _____ (Thisisu) C:\Users\Jasskas\Downloads\JRT.exe
2013-12-04 17:21 - 2013-12-04 17:11 - 00000000 ____D C:\AdwCleaner
2013-12-04 17:11 - 2013-12-04 17:11 - 01110034 _____ C:\Users\Jasskas\Downloads\adwcleaner.exe
2013-12-03 16:50 - 2013-12-03 16:50 - 00001071 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-03 16:50 - 2013-12-03 16:50 - 00000000 ____D C:\Users\Jasskas\AppData\Roaming\Malwarebytes
2013-12-03 16:50 - 2013-12-03 16:50 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-03 16:50 - 2013-12-03 16:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-03 16:48 - 2013-12-03 16:48 - 00614784 _____ C:\Users\Jasskas\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-03 14:59 - 2013-12-03 14:58 - 00036485 _____ C:\Users\Jasskas\Downloads\Addition.txt
2013-12-03 11:04 - 2013-12-03 11:03 - 00276768 _____ C:\Windows\Minidump\120313-25428-01.dmp
2013-12-03 11:03 - 2010-03-21 22:20 - 00000000 ____D C:\Windows\Minidump
2013-12-03 11:03 - 2010-03-21 22:19 - 561420990 _____ C:\Windows\MEMORY.DMP
2013-12-03 11:02 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-03 10:56 - 2013-12-03 10:56 - 00276776 _____ C:\Windows\Minidump\120313-25584-01.dmp
2013-12-03 10:06 - 2013-03-27 10:12 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-01 17:41 - 2010-01-08 20:03 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-01 17:40 - 2010-01-08 20:04 - 00000000 ____D C:\Program Files\Java
2013-11-30 15:25 - 2011-03-31 07:49 - 00161240 _____ C:\Windows\PFRO.log
2013-11-29 14:45 - 2013-11-29 14:45 - 00000000 ____D C:\Users\Jasskas\AppData\Roaming\ShinyProfile
2013-11-29 14:45 - 2013-11-29 14:45 - 00000000 ____D C:\Users\Jasskas\AppData\Local\C
2013-11-29 14:43 - 2013-11-29 14:43 - 00338984 _____ (Amônétízé Ltd) C:\Users\Jasskas\Downloads\Jurassic Realm__3385_il2638368.exe
2013-11-29 09:11 - 2012-06-06 12:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-29 09:11 - 2012-06-06 12:22 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-29 09:11 - 2011-05-17 07:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-29 09:11 - 2010-01-22 15:40 - 00000000 ____D C:\Users\Jasskas\AppData\Local\Adobe
2013-11-28 15:17 - 2013-01-10 18:14 - 00000000 ____D C:\Users\Jasskas\Documents\Bewerbungen
2013-11-24 15:36 - 2011-06-10 16:36 - 00000000 ____D C:\ProgramData\tmp
2013-11-24 15:34 - 2011-06-10 16:36 - 00000000 ____D C:\ProgramData\hps
2013-11-24 15:20 - 2013-11-24 15:20 - 00001088 _____ C:\Users\Public\Desktop\dm-Fotowelt.lnk
2013-11-17 09:51 - 2012-04-25 23:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 19:39 - 2013-06-26 10:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 17:06 - 2013-05-22 09:54 - 00000000 ____D C:\Program Files\My Dell
2013-11-15 17:06 - 2010-01-08 20:10 - 00000000 ____D C:\ProgramData\PCDr
2013-11-14 14:58 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-14 11:14 - 2013-05-06 09:49 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-14 11:14 - 2013-03-27 10:12 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-14 11:14 - 2013-03-27 10:12 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-13 23:33 - 2010-01-08 20:12 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 23:32 - 2013-08-15 23:34 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 23:30 - 2010-01-18 08:03 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 10:24 - 2010-01-12 17:22 - 00001423 _____ C:\Users\Jasskas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-13 10:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-12 23:02 - 2013-11-12 22:59 - 00005684 _____ C:\Windows\IE11_main.log
2013-11-12 23:01 - 2013-11-12 23:01 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-12 23:01 - 2013-11-12 23:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-12 23:01 - 2013-11-12 23:01 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-12 23:01 - 2013-11-12 23:01 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-12 23:01 - 2013-11-12 23:01 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-12 23:01 - 2013-11-12 23:01 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-12 23:01 - 2013-11-12 23:01 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-12 23:01 - 2013-11-12 23:01 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-12 23:01 - 2013-11-12 23:01 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-12 23:01 - 2013-11-12 23:01 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-12 23:01 - 2013-11-12 23:01 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-12 23:01 - 2013-11-12 23:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-12 23:01 - 2013-11-12 23:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-12 17:33 - 2013-11-12 17:33 - 103912569 _____ C:\Windows\SysWOW64\ಗ舣“
2013-11-10 17:56 - 2013-11-10 17:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-10 17:56 - 2013-11-10 17:52 - 00000000 ____D C:\ProgramData\Oracle
2013-11-10 17:56 - 2013-01-14 20:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-10 17:56 - 2013-01-14 20:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-10 17:56 - 2013-01-14 20:45 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-10 17:55 - 2013-11-10 17:55 - 29040552 _____ (Oracle Corporation) C:\Users\Jasskas\Downloads\jre-7u45-windows-i586.exe
2013-11-10 17:55 - 2013-11-10 17:54 - 30694824 _____ (Oracle Corporation) C:\Users\Jasskas\Downloads\jre-7u45-windows-x64(1).exe
2013-11-10 17:52 - 2013-11-10 17:52 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-10 17:52 - 2013-01-20 10:14 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-10 17:52 - 2013-01-20 10:14 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-10 17:52 - 2013-01-20 10:14 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-10 17:50 - 2013-11-10 17:50 - 30694824 _____ (Oracle Corporation) C:\Users\Jasskas\Downloads\jre-7u45-windows-x64.exe

Some content of TEMP:
====================
C:\Users\Jasskas\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-01 10:31

==================== End Of Log ============================
--- --- ---

cosinus 08.12.2013 18:52
Ich hab den Eindruck das liegt hierdran:

Zitat:
FF Extension: MyEmoticons - C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com-1.6.1
MyEmoticons - ist das gewollt? :wtf:

Eumelinchen 08.12.2013 18:57
Keine Ahnung... soll ichs löschen? Das komische Fenster kommt erst seit ein paar Tagen...

cosinus 08.12.2013 19:07
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)
  • Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
    Code:
    :filefind
    *MyEmoticons*

    :folderfind
    *MyEmoticons*

    :regfind
    MyEmoticons
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.


Eumelinchen 08.12.2013 19:15
Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 19:11 on 08/12/2013 by Jasskas
Administrator - Elevation successful

========== filefind ==========

Searching for "*MyEmoticons*"
C:\Nero Autobackup\20131025_232350_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        ------- 592304 bytes        [22:10 25/10/2013]        [22:10 25/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131025_232350_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        ------- 592304 bytes        [22:10 25/10/2013]        [22:10 25/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131101_212147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131101_212147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131108_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131108_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131115_212149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131115_212149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131122_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131122_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131129_212150_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131129_212150_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131206_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131206_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131207_232149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131207_232149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_104821_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_104821_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_112147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_112147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_132148_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_132148_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_174326_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_174326_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Users\Jasskas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyEmoticons\MyEmoticons.lnk        --a---- 1881 bytes        [20:29 16/04/2013]        [20:29 16/04/2013] D904D4A5C5B266D813FFF70D199F21E0
C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll        --a---- 214896 bytes        [06:58 28/02/2013]        [06:58 28/02/2013] E6A33D8B7E4286416AB0D6588F8A7FF9
C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons.ico        --a---- 97869 bytes        [10:47 05/02/2013]        [10:47 05/02/2013] A030834B42C7B05D67BC1F82B646052E
C:\Users\Jasskas\AppData\Roaming\MyEmoticons\MyEmoticons.url        --a---- 136 bytes        [20:28 16/04/2013]        [20:29 16/04/2013] 9F4EC05B4F9EFCC5FD8AE20B8D6B1826
C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com.xpi        --a---- 28704 bytes        [06:58 28/02/2013]        [06:58 28/02/2013] DFBBFC06188A48CA48D1BA9C6DE3F0BF
C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com-1.6.1\content\myemoticons.jar        --a---- 12077 bytes        [20:29 16/04/2013]        [20:29 16/04/2013] 6BC9880C19A046C26C806930705248FF
C:\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [20:28 16/04/2013]        [20:28 16/04/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [20:27 16/04/2013]        [20:27 16/04/2013] 1603B443E65F235D100D661CFE6C3E90

========== folderfind ==========

Searching for "*MyEmoticons*"
C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons        d------        [17:09 11/03/2013]
C:\Users\All Users\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons        d------        [17:09 11/03/2013]
C:\Users\Jasskas\AppData\Local\IM\Identities\{18178290-1BD3-41C2-86FB-EF595E480DE1}\EmoticonCenter\MyEmoticons        d------        [21:34 04/12/2011]
C:\Users\Jasskas\AppData\Roaming\MyEmoticons        d------        [20:28 16/04/2013]
C:\Users\Jasskas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyEmoticons        d------        [20:29 16/04/2013]
C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com-1.6.1        d------        [20:29 16/04/2013]

========== regfind ==========

Searching for "MyEmoticons"
[HKEY_CURRENT_USER\Software\IncrediMail\Identities\{18178290-1BD3-41C2-86FB-EF595E480DE1}\EmoticonCenter\MyEmoticons]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"DisplayName"="MyEmoticons"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"UninstallString"="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\uninst.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"URLInfoAbout"="hxxp://www.myemoticons.com"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"DisplayIcon"="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons.ico"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7970495D-2F98-45F4-B093-87E76C7B8B60}]
@="IMyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0]
@="MyEmoticons 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\0\win32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\HELPDIR]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{DCC39ACE-709B-44EA-B062-5F6BE2774644}]
@="MyEmoticons Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{DCC39ACE-709B-44EA-B062-5F6BE2774644}\InprocServer32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7970495D-2F98-45F4-B093-87E76C7B8B60}]
@="IMyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0]
@="MyEmoticons 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\0\win32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\HELPDIR]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons\QuickBar\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEE38AFC8FA67634F86968B5A6CA2F8F]
"4F8EDFE0D1960BC44B1CB06DB39070FF"="C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons\QuickBar\Order.dat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\oopofgccipckckifenoicncegojimpmf]
"path"="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\oopofgccipckckifenoicncegojimpmf.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IncrediMail\Default Identity\EmoticonCenter\MyEmoticons]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{DCC39ACE-709B-44EA-B062-5F6BE2774644}]
@="MyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions]
"myemoticons@myemoticons.com"="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons@myemoticons.com-1.6.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{DCC39ACE-709B-44EA-B062-5F6BE2774644}]
@="MyEmoticons Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{DCC39ACE-709B-44EA-B062-5F6BE2774644}\InprocServer32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{7970495D-2F98-45F4-B093-87E76C7B8B60}]
@="IMyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0]
@="MyEmoticons 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\0\win32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\HELPDIR]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons"
[HKEY_USERS\S-1-5-21-990396829-1976191800-715236640-1000\Software\IncrediMail\Identities\{18178290-1BD3-41C2-86FB-EF595E480DE1}\EmoticonCenter\MyEmoticons]
[HKEY_USERS\S-1-5-21-990396829-1976191800-715236640-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
[HKEY_USERS\S-1-5-21-990396829-1976191800-715236640-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"DisplayName"="MyEmoticons"
[HKEY_USERS\S-1-5-21-990396829-1976191800-715236640-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"UninstallString"="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\uninst.exe"
[HKEY_USERS\S-1-5-21-990396829-1976191800-715236640-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"URLInfoAbout"="hxxp://www.myemoticons.com"
[HKEY_USERS\S-1-5-21-990396829-1976191800-715236640-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyEmoticons]
"DisplayIcon"="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons.ico"

-= EOF =-

cosinus 08.12.2013 19:19
Ähm ok :wtf:

Zitat:
MyEmoticons (HKCU Version: 1.6.1.0)
Systemsteuerung => Programme und Funktionen => MyEmoticons deinstallieren.

Danach den Systemlook-Suchlauf bitte wiederholen :)

Eumelinchen 08.12.2013 19:24
Ich glaube die Emoticons waren von meinem Mailprogramm Incredimail?

Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 19:22 on 08/12/2013 by Jasskas
Administrator - Elevation successful

========== filefind ==========

Searching for "*MyEmoticons*"
C:\Nero Autobackup\20131025_232350_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        ------- 592304 bytes        [22:10 25/10/2013]        [22:10 25/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131025_232350_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        ------- 592304 bytes        [22:10 25/10/2013]        [22:10 25/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131101_212147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131101_212147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131108_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131108_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131115_212149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131115_212149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131122_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131122_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131129_212150_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131129_212150_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131206_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131206_232147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131207_232149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131207_232149_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_104821_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_104821_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_112147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_112147_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_132148_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_132148_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_174326_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Nero Autobackup\20131208_174326_Local Autobackup\C\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [08:32 27/10/2013]        [08:32 27/10/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Users\Jasskas\Downloads\myemoticons(1).exe        --a---- 592304 bytes        [20:28 16/04/2013]        [20:28 16/04/2013] 1603B443E65F235D100D661CFE6C3E90
C:\Users\Jasskas\Downloads\myemoticons.exe        --a---- 592304 bytes        [20:27 16/04/2013]        [20:27 16/04/2013] 1603B443E65F235D100D661CFE6C3E90

========== folderfind ==========

Searching for "*MyEmoticons*"
C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons        d------        [17:09 11/03/2013]
C:\Users\All Users\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons        d------        [17:09 11/03/2013]
C:\Users\Jasskas\AppData\Local\IM\Identities\{18178290-1BD3-41C2-86FB-EF595E480DE1}\EmoticonCenter\MyEmoticons        d------        [21:34 04/12/2011]

========== regfind ==========

Searching for "MyEmoticons"
[HKEY_CURRENT_USER\Software\IncrediMail\Identities\{18178290-1BD3-41C2-86FB-EF595E480DE1}\EmoticonCenter\MyEmoticons]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7970495D-2F98-45F4-B093-87E76C7B8B60}]
@="IMyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0]
@="MyEmoticons 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\0\win32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\HELPDIR]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7970495D-2F98-45F4-B093-87E76C7B8B60}]
@="IMyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0]
@="MyEmoticons 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\0\win32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\HELPDIR]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons\QuickBar\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEE38AFC8FA67634F86968B5A6CA2F8F]
"4F8EDFE0D1960BC44B1CB06DB39070FF"="C:\ProgramData\IncrediMail\Data\Default Identity\EmoticonCenter\MyEmoticons\QuickBar\Order.dat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\IncrediMail\Default Identity\EmoticonCenter\MyEmoticons]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{DCC39ACE-709B-44EA-B062-5F6BE2774644}]
@="MyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{7970495D-2F98-45F4-B093-87E76C7B8B60}]
@="IMyEmoticons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0]
@="MyEmoticons 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\0\win32]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons\myemoticons-1.6.1.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{E6CAE78A-607F-4A09-BD7E-0826A32B975B}\1.0\HELPDIR]
@="C:\Users\Jasskas\AppData\Roaming\MyEmoticons"
[HKEY_USERS\S-1-5-21-990396829-1976191800-715236640-1000\Software\IncrediMail\Identities\{18178290-1BD3-41C2-86FB-EF595E480DE1}\EmoticonCenter\MyEmoticons]

-= EOF =-

cosinus 08.12.2013 20:23
Hast du Emoticons deinstalliert? :wtf:
Incredimail...naja, ich wür von diesem Mailer abraten, warum nimmst du nicht Mozilla Thunderbird?

Eumelinchen 08.12.2013 20:27
Ja die hab ich deinstalliert.
Mozilla Thunderbird.. ist das ein Mailprogramm??

Ja klar, hab grad gegoogelt, das lad ich mir runter!! Und lösche das andere..

cosinus 08.12.2013 20:31
Joa, mach das mal. Ist das Problem mit dem "Download 86" noch offen?

Eumelinchen 08.12.2013 20:50
Ok.
Nein, momentan nicht..

Thunderbird lässt sich nicht installieren, bricht ständig ab, wenn ich mich als current user anmelden will... geht ja nichts ohne Probleme..

cosinus 08.12.2013 20:51
Bitte genauer und Fehlermeldung posten. Aus "bricht ab" wird man nicht schlau...

Eumelinchen 08.12.2013 21:23
OK sorry..

Nach dem herunterladen öffnet sich ein kleines Fenster: "You may not have the necessary permissions to use all the features of the program you are about to run. You may run this program as a different user or continue to run the program as the current user" Wenn ich mich als current user (Jasskas-PC) anmelde, bricht die Installation ab, als Administrator kann ich mich nicht anmelden, da ich kein Passwort habe.

Problem gelöst!

Hab im Windows Explorer unter Downloads das Programm als Administrator ausführen geklickt, jetzt funztz..


Alle Zeitangaben in WEZ +1. Es ist jetzt 08:25 Uhr.
Seite 3 von 3 12 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131