Trojaner-Board - Sicherheitshinweis von Avira

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Sicherheitshinweis von Avira (https://www.trojaner-board.de/149558-sicherheitshinweis-avira.html)

Chandini

10.02.2014 01:07

Sicherheitshinweis von Avira

Hi,

ich habe von Avira diesen Hinweis erhalten:
"Der Zugriff auf die Datei install_flashplayer11x32_mssa_aaa_aih.exe mit dem Virus oder dem unerwünschten TR/Kilim.B.36 wurde blockiert.

Sie können die Datei entfernen oder weitere Informationen zu diesen Problem erhalten."

Ich habe sofort entfernt. So, wie es ausschaut, habe ich einen Trojaner:(
Ich hatte gestern MyPhoneExplorer installiert. Daraufhin hatte ich eine komische Suchseite, wo ich sofort wusste, dass mit meinen Rechner etwas nicht stimmt. Aber bei der Suche kam nichts raus.

Was kann ich machen? Wie kann ich herausfinden, ob ich diesen blöden Trojaner noch habe?

Vielen Dank.

Viele Grüße

Chandini

schrauber

10.02.2014 07:15

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Chandini

10.02.2014 22:16

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014

Ran by Homr (administrator) on HOME-PC on 10-02-2014 22:11:35

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 

Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe

(AMD) C:\Windows\system32\atieclxx.exe

() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

(Lavasoft) C:\ProgramData\Search Protection\SearchProtection.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [] - [X]

HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)

HKLM-x32\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe [943016 2013-06-13] (Lavasoft)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR.exe] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDB07525E0C76CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2FE59747-90D6-4BF1-BD56-60C8F84F5571&q={searchTerms}&SSPV=

SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2FE59747-90D6-4BF1-BD56-60C8F84F5571&q={searchTerms}&SSPV=

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} MSN Games - Free Online Games

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} MSN Games - Free Online Games

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF user.js: detected! => C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\user.js

FF Homepage: hxxp://www.google.de/

FF NetworkProxy: "type", 0

FF Homepage: hxxp://start.iminent.com/?appId=51CBD309-3DC1-42BA-81E8-C3EB7070281A

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF SearchPlugin: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\searchplugins\iminent.xml

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()

R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [710976 2014-01-27] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [167936 2014-01-16] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-10 22:11 - 2014-02-10 22:12 - 00025130 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-10 22:11 - 2014-02-10 22:11 - 02150400 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-10 21:45 - 2014-02-10 21:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3A8C0EFB-9040-4306-A0C9-20FD4C28126A}

2014-02-10 21:33 - 2014-02-10 21:33 - 00000056 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 07:46 - 2014-02-10 07:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B83FAE10-A9E1-4D70-B48C-B5D985A8779D}

2014-02-09 20:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-09 20:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-09 20:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-09 20:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-09 20:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-09 20:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-09 20:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-09 20:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-09 20:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-09 20:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-09 20:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-09 20:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-09 20:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-09 20:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-09 19:46 - 2014-02-09 19:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80710625-B8F0-444E-902E-E7D6D43292AE}

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 07:45 - 2014-02-09 07:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CF8442C2-7323-4302-AFB3-C77D59773A7F}

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-10 21:34 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Search Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\blekko toolbars

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-09 01:34 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:29 - 2014-02-09 00:10 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\systweak

2014-02-08 21:29 - 2012-01-20 14:14 - 00018816 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-08 19:44 - 2014-02-08 19:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{359FAEFF-3324-414F-9526-055D0065C942}

2014-02-08 03:21 - 2014-02-08 03:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B900D6FA-D440-4466-8839-3AE90919DD36}

2014-02-07 15:20 - 2014-02-07 15:21 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82A283E7-BA6D-4B30-9EF0-A361F0447E11}

2014-02-06 02:38 - 2014-02-06 02:38 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8A865C6E-5BC9-4ABA-A2D7-A288416C37B0}

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-05 01:27 - 2014-02-05 01:27 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D3343431-31BB-473C-8CFA-5DC69369E455}

2014-02-04 02:11 - 2014-02-04 02:11 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7906501C-63E3-4A2A-9986-59AFFDC328A7}

2014-02-01 20:22 - 2014-02-01 20:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{9668622A-47A1-44B2-9D2C-0902AC7CF7D5}

2014-02-01 02:17 - 2014-02-01 02:18 - 00000000 ____D () C:\Users\Homr\AppData\Local\{58E95CF8-42B9-4894-9D1A-0874F4D76EFE}

2014-01-31 03:05 - 2014-01-31 03:06 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0CF83722-F68A-4842-AA87-F6DE7FBBB7E8}

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:58 - 2014-01-30 13:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CAB52C77-4425-49AD-90D2-B56A274607D3}

2014-01-30 13:55 - 2014-02-10 21:38 - 00448515 _____ () C:\Windows\WindowsUpdate.log

2014-01-30 03:01 - 2014-02-09 01:27 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-01-30 03:01 - 2014-01-30 03:03 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar

2014-01-30 03:01 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-30 01:34 - 2014-01-30 01:34 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7F603FF9-1045-46E9-8C34-CDFEFC0D4598}

2014-01-28 14:50 - 2014-01-28 14:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{74B86AA5-4C60-4C15-8FF3-E9DA06B03A82}

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-28 00:03 - 2014-01-28 00:04 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D09950F1-9F3E-41C5-87FF-AA3EF388D2DC}

2014-01-27 00:17 - 2014-01-27 00:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CEF6775E-68AD-43B7-AA5C-F71A34148CB8}

2014-01-26 04:47 - 2014-01-26 04:48 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE1952C7-7C9C-427D-97DC-74E022E2D01D}

2014-01-25 16:16 - 2014-01-25 16:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2434D572-E9AC-40C2-9932-E1B011D85930}

2014-01-25 03:51 - 2014-01-25 03:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2F5E6956-A673-4FB5-97DF-2D2946503577}

2014-01-24 11:19 - 2014-01-24 11:20 - 00000000 ____D () C:\Users\Homr\AppData\Local\{90649A99-825B-40C5-A243-ADA8CD7A5DC8}

2014-01-23 21:25 - 2014-01-23 21:25 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2A96C56F-053C-460F-9E73-8D3B6A942EA5}

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 22:44 - 2014-01-22 22:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C9B982C0-8878-490F-86E9-071A4479B592}

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-21 23:28 - 2014-01-21 23:28 - 00000000 ____D () C:\Users\Homr\AppData\Local\{604165F4-60CB-485C-968A-8073ACD1A887}

2014-01-20 21:03 - 2014-01-20 21:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3F77DEDB-7C51-44BD-A5AC-D84557A91201}

2014-01-19 16:22 - 2014-01-19 16:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80795F60-DC2F-4C35-8FAE-571997BFA800}

2014-01-18 17:51 - 2014-01-18 17:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A2CAB355-0970-4A63-A1A8-97C5AEEEA4BD}

2014-01-18 03:16 - 2014-01-18 03:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2E823518-C89E-413E-9F8F-E78E54365162}

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-17 15:15 - 2014-01-17 15:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C79DF6A3-0195-4E87-A431-BA8942669C11}

2014-01-17 00:46 - 2014-01-17 00:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82185989-24AE-4957-9809-1AA7C5E966B6}

2014-01-16 12:45 - 2014-01-16 12:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C997498F-14A8-4923-A836-9A9442B8B4CC}

2014-01-16 00:23 - 2014-01-16 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A1B2DE7C-4871-4933-8787-38F31681B0A1}

2014-01-16 00:15 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-16 00:15 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-16 00:15 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-14 22:12 - 2014-01-14 22:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{07C334D6-9B83-44E4-9DA4-A59A1B124CED}

2014-01-13 22:02 - 2014-01-13 22:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0A680F0A-89F0-4363-A7A5-5AAD5C0172BF}

2014-01-13 01:58 - 2014-01-13 01:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C4D80DF6-5486-4CFF-BD44-EC1161A05F17}

2014-01-12 13:57 - 2014-01-12 13:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8942DF44-CF2B-44AB-ACE4-337F351E413E}

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 01:56 - 2014-01-12 01:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{5ED44156-B703-4640-A23E-365C9808CBE0}

2014-01-12 00:34 - 2014-02-01 02:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon

2014-01-11 13:56 - 2014-01-11 13:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE6D1F2A-312C-4C72-AE51-B1CA76EBAECF}

2014-01-11 01:55 - 2014-01-11 01:55 - 00000000 ____D () C:\Users\Homr\AppData\Local\{40DBD734-9666-4814-8AB4-7B0A4107D738}
 

==================== One Month Modified Files and Folders =======
 

2014-02-10 22:12 - 2014-02-10 22:11 - 00025130 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-10 22:11 - 2014-02-10 22:11 - 02150400 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:55 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-10 21:46 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-10 21:45 - 2014-02-10 21:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3A8C0EFB-9040-4306-A0C9-20FD4C28126A}

2014-02-10 21:45 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-10 21:45 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-10 21:45 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-10 21:45 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-10 21:44 - 2012-10-12 00:37 - 00000420 _____ () C:\Windows\Tasks\Wise Care 365.job

2014-02-10 21:41 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-10 21:41 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-10 21:38 - 2014-01-30 13:55 - 00448515 _____ () C:\Windows\WindowsUpdate.log

2014-02-10 21:34 - 2014-02-09 01:47 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-10 21:33 - 2014-02-10 21:33 - 00000056 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 21:33 - 2013-11-03 13:21 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-10 21:33 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-10 07:47 - 2014-02-10 07:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B83FAE10-A9E1-4D70-B48C-B5D985A8779D}

2014-02-10 02:05 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-09 22:36 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-09 22:36 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-09 22:36 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 19:46 - 2014-02-09 19:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80710625-B8F0-444E-902E-E7D6D43292AE}

2014-02-09 19:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 07:45 - 2014-02-09 07:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CF8442C2-7323-4302-AFB3-C77D59773A7F}

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Search Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\blekko toolbars

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner

2014-02-09 01:45 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-09 01:34 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:31 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-09 01:27 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-09 00:10 - 2014-02-08 21:29 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\systweak

2014-02-08 22:15 - 2009-12-27 05:17 - 01591146 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:45 - 2014-02-08 19:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{359FAEFF-3324-414F-9526-055D0065C942}

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 03:22 - 2014-02-08 03:21 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B900D6FA-D440-4466-8839-3AE90919DD36}

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-07 15:21 - 2014-02-07 15:20 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82A283E7-BA6D-4B30-9EF0-A361F0447E11}

2014-02-06 02:38 - 2014-02-06 02:38 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8A865C6E-5BC9-4ABA-A2D7-A288416C37B0}

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-05 01:27 - 2014-02-05 01:27 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D3343431-31BB-473C-8CFA-5DC69369E455}

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-04 02:11 - 2014-02-04 02:11 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7906501C-63E3-4A2A-9986-59AFFDC328A7}

2014-02-01 20:22 - 2014-02-01 20:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{9668622A-47A1-44B2-9D2C-0902AC7CF7D5}

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-02-01 02:18 - 2014-02-01 02:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{58E95CF8-42B9-4894-9D1A-0874F4D76EFE}

2014-01-31 03:06 - 2014-01-31 03:05 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0CF83722-F68A-4842-AA87-F6DE7FBBB7E8}

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 14:20 - 2011-11-22 20:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\Facebook

2014-01-30 13:58 - 2014-01-30 13:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CAB52C77-4425-49AD-90D2-B56A274607D3}

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-30 03:03 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar

2014-01-30 03:01 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-30 03:01 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-01-30 01:34 - 2014-01-30 01:34 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7F603FF9-1045-46E9-8C34-CDFEFC0D4598}

2014-01-28 14:51 - 2014-01-28 14:50 - 00000000 ____D () C:\Users\Homr\AppData\Local\{74B86AA5-4C60-4C15-8FF3-E9DA06B03A82}

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-28 00:04 - 2014-01-28 00:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D09950F1-9F3E-41C5-87FF-AA3EF388D2DC}

2014-01-27 00:17 - 2014-01-27 00:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CEF6775E-68AD-43B7-AA5C-F71A34148CB8}

2014-01-26 04:48 - 2014-01-26 04:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE1952C7-7C9C-427D-97DC-74E022E2D01D}

2014-01-25 16:16 - 2014-01-25 16:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2434D572-E9AC-40C2-9932-E1B011D85930}

2014-01-25 03:51 - 2014-01-25 03:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2F5E6956-A673-4FB5-97DF-2D2946503577}

2014-01-24 15:00 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-01-24 11:20 - 2014-01-24 11:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\{90649A99-825B-40C5-A243-ADA8CD7A5DC8}

2014-01-23 21:25 - 2014-01-23 21:25 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2A96C56F-053C-460F-9E73-8D3B6A942EA5}

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 22:44 - 2014-01-22 22:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C9B982C0-8878-490F-86E9-071A4479B592}

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-21 23:28 - 2014-01-21 23:28 - 00000000 ____D () C:\Users\Homr\AppData\Local\{604165F4-60CB-485C-968A-8073ACD1A887}

2014-01-20 21:03 - 2014-01-20 21:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3F77DEDB-7C51-44BD-A5AC-D84557A91201}

2014-01-19 16:23 - 2014-01-19 16:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80795F60-DC2F-4C35-8FAE-571997BFA800}

2014-01-18 17:51 - 2014-01-18 17:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A2CAB355-0970-4A63-A1A8-97C5AEEEA4BD}

2014-01-18 03:16 - 2014-01-18 03:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2E823518-C89E-413E-9F8F-E78E54365162}

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-17 15:15 - 2014-01-17 15:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C79DF6A3-0195-4E87-A431-BA8942669C11}

2014-01-17 00:47 - 2014-01-17 00:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82185989-24AE-4957-9809-1AA7C5E966B6}

2014-01-16 12:46 - 2014-01-16 12:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C997498F-14A8-4923-A836-9A9442B8B4CC}

2014-01-16 12:41 - 2009-07-14 05:45 - 00544464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-16 03:24 - 2009-12-17 00:59 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-16 03:23 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-16 03:22 - 2009-12-07 21:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-16 02:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-01-16 00:23 - 2014-01-16 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A1B2DE7C-4871-4933-8787-38F31681B0A1}

2014-01-14 22:12 - 2014-01-14 22:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{07C334D6-9B83-44E4-9DA4-A59A1B124CED}

2014-01-13 22:03 - 2014-01-13 22:02 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0A680F0A-89F0-4363-A7A5-5AAD5C0172BF}

2014-01-13 01:58 - 2014-01-13 01:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C4D80DF6-5486-4CFF-BD44-EC1161A05F17}

2014-01-12 13:57 - 2014-01-12 13:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8942DF44-CF2B-44AB-ACE4-337F351E413E}

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 01:57 - 2014-01-12 01:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{5ED44156-B703-4640-A23E-365C9808CBE0}

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:34 - 2009-12-12 16:15 - 00000000 ____D () C:\Program Files (x86)\Canon

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon

2014-01-11 13:56 - 2014-01-11 13:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE6D1F2A-312C-4C72-AE51-B1CA76EBAECF}

2014-01-11 01:55 - 2014-01-11 01:55 - 00000000 ____D () C:\Users\Homr\AppData\Local\{40DBD734-9666-4814-8AB4-7B0A4107D738}
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\99e0ad50-08e2-421f-8902-6ac34165b647.exe

C:\Users\Homr\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-08 05:59
 

==================== End Of Log ============================

--- --- ---

Chandini

10.02.2014 22:17

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014

Ran by Homr (administrator) on HOME-PC on 10-02-2014 22:11:35

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 

Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe

(AMD) C:\Windows\system32\atieclxx.exe

() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

(Lavasoft) C:\ProgramData\Search Protection\SearchProtection.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [] - [X]

HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)

HKLM-x32\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe [943016 2013-06-13] (Lavasoft)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR.exe] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDB07525E0C76CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2FE59747-90D6-4BF1-BD56-60C8F84F5571&q={searchTerms}&SSPV=

SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2FE59747-90D6-4BF1-BD56-60C8F84F5571&q={searchTerms}&SSPV=

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} MSN Games - Free Online Games

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} MSN Games - Free Online Games

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF user.js: detected! => C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\user.js

FF Homepage: hxxp://www.google.de/

FF NetworkProxy: "type", 0

FF Homepage: hxxp://start.iminent.com/?appId=51CBD309-3DC1-42BA-81E8-C3EB7070281A

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF SearchPlugin: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\searchplugins\iminent.xml

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()

R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [710976 2014-01-27] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [167936 2014-01-16] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-10 22:11 - 2014-02-10 22:12 - 00025130 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-10 22:11 - 2014-02-10 22:11 - 02150400 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-10 21:45 - 2014-02-10 21:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3A8C0EFB-9040-4306-A0C9-20FD4C28126A}

2014-02-10 21:33 - 2014-02-10 21:33 - 00000056 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 07:46 - 2014-02-10 07:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B83FAE10-A9E1-4D70-B48C-B5D985A8779D}

2014-02-09 20:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-09 20:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-09 20:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-09 20:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-09 20:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-09 20:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-09 20:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-09 20:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-09 20:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-09 20:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-09 20:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-09 20:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-09 20:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-09 20:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-09 19:46 - 2014-02-09 19:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80710625-B8F0-444E-902E-E7D6D43292AE}

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 07:45 - 2014-02-09 07:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CF8442C2-7323-4302-AFB3-C77D59773A7F}

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-10 21:34 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Search Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\blekko toolbars

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-09 01:34 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:29 - 2014-02-09 00:10 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\systweak

2014-02-08 21:29 - 2012-01-20 14:14 - 00018816 _____ (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) C:\Windows\system32\roboot64.exe

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-08 19:44 - 2014-02-08 19:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{359FAEFF-3324-414F-9526-055D0065C942}

2014-02-08 03:21 - 2014-02-08 03:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B900D6FA-D440-4466-8839-3AE90919DD36}

2014-02-07 15:20 - 2014-02-07 15:21 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82A283E7-BA6D-4B30-9EF0-A361F0447E11}

2014-02-06 02:38 - 2014-02-06 02:38 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8A865C6E-5BC9-4ABA-A2D7-A288416C37B0}

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-05 01:27 - 2014-02-05 01:27 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D3343431-31BB-473C-8CFA-5DC69369E455}

2014-02-04 02:11 - 2014-02-04 02:11 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7906501C-63E3-4A2A-9986-59AFFDC328A7}

2014-02-01 20:22 - 2014-02-01 20:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{9668622A-47A1-44B2-9D2C-0902AC7CF7D5}

2014-02-01 02:17 - 2014-02-01 02:18 - 00000000 ____D () C:\Users\Homr\AppData\Local\{58E95CF8-42B9-4894-9D1A-0874F4D76EFE}

2014-01-31 03:05 - 2014-01-31 03:06 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0CF83722-F68A-4842-AA87-F6DE7FBBB7E8}

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:58 - 2014-01-30 13:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CAB52C77-4425-49AD-90D2-B56A274607D3}

2014-01-30 13:55 - 2014-02-10 21:38 - 00448515 _____ () C:\Windows\WindowsUpdate.log

2014-01-30 03:01 - 2014-02-09 01:27 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-01-30 03:01 - 2014-01-30 03:03 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar

2014-01-30 03:01 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-30 01:34 - 2014-01-30 01:34 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7F603FF9-1045-46E9-8C34-CDFEFC0D4598}

2014-01-28 14:50 - 2014-01-28 14:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{74B86AA5-4C60-4C15-8FF3-E9DA06B03A82}

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-28 00:03 - 2014-01-28 00:04 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D09950F1-9F3E-41C5-87FF-AA3EF388D2DC}

2014-01-27 00:17 - 2014-01-27 00:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CEF6775E-68AD-43B7-AA5C-F71A34148CB8}

2014-01-26 04:47 - 2014-01-26 04:48 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE1952C7-7C9C-427D-97DC-74E022E2D01D}

2014-01-25 16:16 - 2014-01-25 16:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2434D572-E9AC-40C2-9932-E1B011D85930}

2014-01-25 03:51 - 2014-01-25 03:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2F5E6956-A673-4FB5-97DF-2D2946503577}

2014-01-24 11:19 - 2014-01-24 11:20 - 00000000 ____D () C:\Users\Homr\AppData\Local\{90649A99-825B-40C5-A243-ADA8CD7A5DC8}

2014-01-23 21:25 - 2014-01-23 21:25 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2A96C56F-053C-460F-9E73-8D3B6A942EA5}

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 22:44 - 2014-01-22 22:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C9B982C0-8878-490F-86E9-071A4479B592}

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-21 23:28 - 2014-01-21 23:28 - 00000000 ____D () C:\Users\Homr\AppData\Local\{604165F4-60CB-485C-968A-8073ACD1A887}

2014-01-20 21:03 - 2014-01-20 21:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3F77DEDB-7C51-44BD-A5AC-D84557A91201}

2014-01-19 16:22 - 2014-01-19 16:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80795F60-DC2F-4C35-8FAE-571997BFA800}

2014-01-18 17:51 - 2014-01-18 17:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A2CAB355-0970-4A63-A1A8-97C5AEEEA4BD}

2014-01-18 03:16 - 2014-01-18 03:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2E823518-C89E-413E-9F8F-E78E54365162}

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-17 15:15 - 2014-01-17 15:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C79DF6A3-0195-4E87-A431-BA8942669C11}

2014-01-17 00:46 - 2014-01-17 00:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82185989-24AE-4957-9809-1AA7C5E966B6}

2014-01-16 12:45 - 2014-01-16 12:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C997498F-14A8-4923-A836-9A9442B8B4CC}

2014-01-16 00:23 - 2014-01-16 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A1B2DE7C-4871-4933-8787-38F31681B0A1}

2014-01-16 00:15 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-16 00:15 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-16 00:15 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-14 22:12 - 2014-01-14 22:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{07C334D6-9B83-44E4-9DA4-A59A1B124CED}

2014-01-13 22:02 - 2014-01-13 22:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0A680F0A-89F0-4363-A7A5-5AAD5C0172BF}

2014-01-13 01:58 - 2014-01-13 01:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C4D80DF6-5486-4CFF-BD44-EC1161A05F17}

2014-01-12 13:57 - 2014-01-12 13:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8942DF44-CF2B-44AB-ACE4-337F351E413E}

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 01:56 - 2014-01-12 01:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{5ED44156-B703-4640-A23E-365C9808CBE0}

2014-01-12 00:34 - 2014-02-01 02:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon

2014-01-11 13:56 - 2014-01-11 13:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE6D1F2A-312C-4C72-AE51-B1CA76EBAECF}

2014-01-11 01:55 - 2014-01-11 01:55 - 00000000 ____D () C:\Users\Homr\AppData\Local\{40DBD734-9666-4814-8AB4-7B0A4107D738}
 

==================== One Month Modified Files and Folders =======
 

2014-02-10 22:12 - 2014-02-10 22:11 - 00025130 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-10 22:11 - 2014-02-10 22:11 - 02150400 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:55 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-10 21:46 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-10 21:45 - 2014-02-10 21:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3A8C0EFB-9040-4306-A0C9-20FD4C28126A}

2014-02-10 21:45 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-10 21:45 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-10 21:45 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-10 21:45 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-10 21:44 - 2012-10-12 00:37 - 00000420 _____ () C:\Windows\Tasks\Wise Care 365.job

2014-02-10 21:41 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-10 21:41 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-10 21:38 - 2014-01-30 13:55 - 00448515 _____ () C:\Windows\WindowsUpdate.log

2014-02-10 21:34 - 2014-02-09 01:47 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-10 21:33 - 2014-02-10 21:33 - 00000056 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 21:33 - 2013-11-03 13:21 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-10 21:33 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-10 07:47 - 2014-02-10 07:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B83FAE10-A9E1-4D70-B48C-B5D985A8779D}

2014-02-10 02:05 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-09 22:36 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-09 22:36 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-09 22:36 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 19:46 - 2014-02-09 19:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80710625-B8F0-444E-902E-E7D6D43292AE}

2014-02-09 19:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 07:45 - 2014-02-09 07:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CF8442C2-7323-4302-AFB3-C77D59773A7F}

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Search Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\blekko toolbars

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner

2014-02-09 01:45 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-09 01:34 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:31 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-09 01:27 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-09 00:10 - 2014-02-08 21:29 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\systweak

2014-02-08 22:15 - 2009-12-27 05:17 - 01591146 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:45 - 2014-02-08 19:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{359FAEFF-3324-414F-9526-055D0065C942}

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 03:22 - 2014-02-08 03:21 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B900D6FA-D440-4466-8839-3AE90919DD36}

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-07 15:21 - 2014-02-07 15:20 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82A283E7-BA6D-4B30-9EF0-A361F0447E11}

2014-02-06 02:38 - 2014-02-06 02:38 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8A865C6E-5BC9-4ABA-A2D7-A288416C37B0}

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-05 01:27 - 2014-02-05 01:27 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D3343431-31BB-473C-8CFA-5DC69369E455}

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-04 02:11 - 2014-02-04 02:11 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7906501C-63E3-4A2A-9986-59AFFDC328A7}

2014-02-01 20:22 - 2014-02-01 20:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{9668622A-47A1-44B2-9D2C-0902AC7CF7D5}

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-02-01 02:18 - 2014-02-01 02:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{58E95CF8-42B9-4894-9D1A-0874F4D76EFE}

2014-01-31 03:06 - 2014-01-31 03:05 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0CF83722-F68A-4842-AA87-F6DE7FBBB7E8}

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 14:20 - 2011-11-22 20:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\Facebook

2014-01-30 13:58 - 2014-01-30 13:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CAB52C77-4425-49AD-90D2-B56A274607D3}

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-30 03:03 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar

2014-01-30 03:01 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-30 03:01 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-01-30 01:34 - 2014-01-30 01:34 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7F603FF9-1045-46E9-8C34-CDFEFC0D4598}

2014-01-28 14:51 - 2014-01-28 14:50 - 00000000 ____D () C:\Users\Homr\AppData\Local\{74B86AA5-4C60-4C15-8FF3-E9DA06B03A82}

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-28 00:04 - 2014-01-28 00:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D09950F1-9F3E-41C5-87FF-AA3EF388D2DC}

2014-01-27 00:17 - 2014-01-27 00:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CEF6775E-68AD-43B7-AA5C-F71A34148CB8}

2014-01-26 04:48 - 2014-01-26 04:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE1952C7-7C9C-427D-97DC-74E022E2D01D}

2014-01-25 16:16 - 2014-01-25 16:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2434D572-E9AC-40C2-9932-E1B011D85930}

2014-01-25 03:51 - 2014-01-25 03:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2F5E6956-A673-4FB5-97DF-2D2946503577}

2014-01-24 15:00 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-01-24 11:20 - 2014-01-24 11:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\{90649A99-825B-40C5-A243-ADA8CD7A5DC8}

2014-01-23 21:25 - 2014-01-23 21:25 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2A96C56F-053C-460F-9E73-8D3B6A942EA5}

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 22:44 - 2014-01-22 22:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C9B982C0-8878-490F-86E9-071A4479B592}

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(???? | ????? ???? ?????.)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-21 23:28 - 2014-01-21 23:28 - 00000000 ____D () C:\Users\Homr\AppData\Local\{604165F4-60CB-485C-968A-8073ACD1A887}

2014-01-20 21:03 - 2014-01-20 21:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3F77DEDB-7C51-44BD-A5AC-D84557A91201}

2014-01-19 16:23 - 2014-01-19 16:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80795F60-DC2F-4C35-8FAE-571997BFA800}

2014-01-18 17:51 - 2014-01-18 17:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A2CAB355-0970-4A63-A1A8-97C5AEEEA4BD}

2014-01-18 03:16 - 2014-01-18 03:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2E823518-C89E-413E-9F8F-E78E54365162}

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-17 15:15 - 2014-01-17 15:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C79DF6A3-0195-4E87-A431-BA8942669C11}

2014-01-17 00:47 - 2014-01-17 00:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82185989-24AE-4957-9809-1AA7C5E966B6}

2014-01-16 12:46 - 2014-01-16 12:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C997498F-14A8-4923-A836-9A9442B8B4CC}

2014-01-16 12:41 - 2009-07-14 05:45 - 00544464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-16 03:24 - 2009-12-17 00:59 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-16 03:23 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-16 03:22 - 2009-12-07 21:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-16 02:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-01-16 00:23 - 2014-01-16 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A1B2DE7C-4871-4933-8787-38F31681B0A1}

2014-01-14 22:12 - 2014-01-14 22:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{07C334D6-9B83-44E4-9DA4-A59A1B124CED}

2014-01-13 22:03 - 2014-01-13 22:02 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0A680F0A-89F0-4363-A7A5-5AAD5C0172BF}

2014-01-13 01:58 - 2014-01-13 01:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C4D80DF6-5486-4CFF-BD44-EC1161A05F17}

2014-01-12 13:57 - 2014-01-12 13:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8942DF44-CF2B-44AB-ACE4-337F351E413E}

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 01:57 - 2014-01-12 01:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{5ED44156-B703-4640-A23E-365C9808CBE0}

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:34 - 2009-12-12 16:15 - 00000000 ____D () C:\Program Files (x86)\Canon

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon

2014-01-11 13:56 - 2014-01-11 13:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE6D1F2A-312C-4C72-AE51-B1CA76EBAECF}

2014-01-11 01:55 - 2014-01-11 01:55 - 00000000 ____D () C:\Users\Homr\AppData\Local\{40DBD734-9666-4814-8AB4-7B0A4107D738}
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\99e0ad50-08e2-421f-8902-6ac34165b647.exe

C:\Users\Homr\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-08 05:59
 

==================== End Of Log ============================

--- --- ---

Chandini

10.02.2014 22:20

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014

Ran by Homr (administrator) on HOME-PC on 10-02-2014 22:11:35

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe

(AMD) C:\Windows\system32\atieclxx.exe

() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

(Lavasoft) C:\ProgramData\Search Protection\SearchProtection.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [] - [X]

HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)

HKLM-x32\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe [943016 2013-06-13] (Lavasoft)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR.exe] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDB07525E0C76CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2FE59747-90D6-4BF1-BD56-60C8F84F5571&q={searchTerms}&SSPV=

SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2FE59747-90D6-4BF1-BD56-60C8F84F5571&q={searchTerms}&SSPV=

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF user.js: detected! => C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\user.js

FF Homepage: hxxp://www.google.de/

FF NetworkProxy: "type", 0

FF Homepage: hxxp://start.iminent.com/?appId=51CBD309-3DC1-42BA-81E8-C3EB7070281A

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF SearchPlugin: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\searchplugins\iminent.xml

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()

R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [710976 2014-01-27] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S2 SavingsbullFilterService64; c:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe [167936 2014-01-16] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-10 22:11 - 2014-02-10 22:12 - 00025130 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-10 22:11 - 2014-02-10 22:11 - 02150400 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-10 21:45 - 2014-02-10 21:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3A8C0EFB-9040-4306-A0C9-20FD4C28126A}

2014-02-10 21:33 - 2014-02-10 21:33 - 00000056 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 07:46 - 2014-02-10 07:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B83FAE10-A9E1-4D70-B48C-B5D985A8779D}

2014-02-09 20:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-09 20:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-09 20:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-09 20:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-09 20:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-09 20:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-09 20:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-09 20:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-09 20:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-09 20:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-09 20:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-09 20:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-09 20:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-09 20:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-09 19:46 - 2014-02-09 19:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80710625-B8F0-444E-902E-E7D6D43292AE}

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 07:45 - 2014-02-09 07:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CF8442C2-7323-4302-AFB3-C77D59773A7F}

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-10 21:34 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Search Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\blekko toolbars

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-09 01:34 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:29 - 2014-02-09 00:10 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\systweak

2014-02-08 21:29 - 2012-01-20 14:14 - 00018816 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-08 19:44 - 2014-02-08 19:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{359FAEFF-3324-414F-9526-055D0065C942}

2014-02-08 03:21 - 2014-02-08 03:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B900D6FA-D440-4466-8839-3AE90919DD36}

2014-02-07 15:20 - 2014-02-07 15:21 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82A283E7-BA6D-4B30-9EF0-A361F0447E11}

2014-02-06 02:38 - 2014-02-06 02:38 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8A865C6E-5BC9-4ABA-A2D7-A288416C37B0}

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-05 01:27 - 2014-02-05 01:27 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D3343431-31BB-473C-8CFA-5DC69369E455}

2014-02-04 02:11 - 2014-02-04 02:11 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7906501C-63E3-4A2A-9986-59AFFDC328A7}

2014-02-01 20:22 - 2014-02-01 20:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{9668622A-47A1-44B2-9D2C-0902AC7CF7D5}

2014-02-01 02:17 - 2014-02-01 02:18 - 00000000 ____D () C:\Users\Homr\AppData\Local\{58E95CF8-42B9-4894-9D1A-0874F4D76EFE}

2014-01-31 03:05 - 2014-01-31 03:06 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0CF83722-F68A-4842-AA87-F6DE7FBBB7E8}

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:58 - 2014-01-30 13:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CAB52C77-4425-49AD-90D2-B56A274607D3}

2014-01-30 13:55 - 2014-02-10 21:38 - 00448515 _____ () C:\Windows\WindowsUpdate.log

2014-01-30 03:01 - 2014-02-09 01:27 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-01-30 03:01 - 2014-01-30 03:03 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar

2014-01-30 03:01 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-30 01:34 - 2014-01-30 01:34 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7F603FF9-1045-46E9-8C34-CDFEFC0D4598}

2014-01-28 14:50 - 2014-01-28 14:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{74B86AA5-4C60-4C15-8FF3-E9DA06B03A82}

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-28 00:03 - 2014-01-28 00:04 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D09950F1-9F3E-41C5-87FF-AA3EF388D2DC}

2014-01-27 00:17 - 2014-01-27 00:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CEF6775E-68AD-43B7-AA5C-F71A34148CB8}

2014-01-26 04:47 - 2014-01-26 04:48 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE1952C7-7C9C-427D-97DC-74E022E2D01D}

2014-01-25 16:16 - 2014-01-25 16:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2434D572-E9AC-40C2-9932-E1B011D85930}

2014-01-25 03:51 - 2014-01-25 03:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2F5E6956-A673-4FB5-97DF-2D2946503577}

2014-01-24 11:19 - 2014-01-24 11:20 - 00000000 ____D () C:\Users\Homr\AppData\Local\{90649A99-825B-40C5-A243-ADA8CD7A5DC8}

2014-01-23 21:25 - 2014-01-23 21:25 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2A96C56F-053C-460F-9E73-8D3B6A942EA5}

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 22:44 - 2014-01-22 22:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C9B982C0-8878-490F-86E9-071A4479B592}

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-21 23:28 - 2014-01-21 23:28 - 00000000 ____D () C:\Users\Homr\AppData\Local\{604165F4-60CB-485C-968A-8073ACD1A887}

2014-01-20 21:03 - 2014-01-20 21:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3F77DEDB-7C51-44BD-A5AC-D84557A91201}

2014-01-19 16:22 - 2014-01-19 16:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80795F60-DC2F-4C35-8FAE-571997BFA800}

2014-01-18 17:51 - 2014-01-18 17:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A2CAB355-0970-4A63-A1A8-97C5AEEEA4BD}

2014-01-18 03:16 - 2014-01-18 03:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2E823518-C89E-413E-9F8F-E78E54365162}

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-17 15:15 - 2014-01-17 15:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C79DF6A3-0195-4E87-A431-BA8942669C11}

2014-01-17 00:46 - 2014-01-17 00:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82185989-24AE-4957-9809-1AA7C5E966B6}

2014-01-16 12:45 - 2014-01-16 12:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C997498F-14A8-4923-A836-9A9442B8B4CC}

2014-01-16 00:23 - 2014-01-16 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A1B2DE7C-4871-4933-8787-38F31681B0A1}

2014-01-16 00:15 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-16 00:15 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-16 00:15 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-14 22:12 - 2014-01-14 22:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{07C334D6-9B83-44E4-9DA4-A59A1B124CED}

2014-01-13 22:02 - 2014-01-13 22:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0A680F0A-89F0-4363-A7A5-5AAD5C0172BF}

2014-01-13 01:58 - 2014-01-13 01:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C4D80DF6-5486-4CFF-BD44-EC1161A05F17}

2014-01-12 13:57 - 2014-01-12 13:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8942DF44-CF2B-44AB-ACE4-337F351E413E}

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 01:56 - 2014-01-12 01:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{5ED44156-B703-4640-A23E-365C9808CBE0}

2014-01-12 00:34 - 2014-02-01 02:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon

2014-01-11 13:56 - 2014-01-11 13:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE6D1F2A-312C-4C72-AE51-B1CA76EBAECF}

2014-01-11 01:55 - 2014-01-11 01:55 - 00000000 ____D () C:\Users\Homr\AppData\Local\{40DBD734-9666-4814-8AB4-7B0A4107D738}
 

==================== One Month Modified Files and Folders =======
 

2014-02-10 22:12 - 2014-02-10 22:11 - 00025130 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-10 22:11 - 2014-02-10 22:11 - 02150400 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:55 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-10 21:46 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-10 21:45 - 2014-02-10 21:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3A8C0EFB-9040-4306-A0C9-20FD4C28126A}

2014-02-10 21:45 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-10 21:45 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-10 21:45 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-10 21:45 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-10 21:44 - 2012-10-12 00:37 - 00000420 _____ () C:\Windows\Tasks\Wise Care 365.job

2014-02-10 21:41 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-10 21:41 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-10 21:38 - 2014-01-30 13:55 - 00448515 _____ () C:\Windows\WindowsUpdate.log

2014-02-10 21:34 - 2014-02-09 01:47 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-10 21:33 - 2014-02-10 21:33 - 00000056 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 21:33 - 2013-11-03 13:21 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-10 21:33 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-10 07:47 - 2014-02-10 07:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B83FAE10-A9E1-4D70-B48C-B5D985A8779D}

2014-02-10 02:05 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-09 22:36 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-09 22:36 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-09 22:36 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 19:46 - 2014-02-09 19:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80710625-B8F0-444E-902E-E7D6D43292AE}

2014-02-09 19:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 07:45 - 2014-02-09 07:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CF8442C2-7323-4302-AFB3-C77D59773A7F}

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Search Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\blekko toolbars

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files (x86)\Toolbar Cleaner

2014-02-09 01:45 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-09 01:34 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:31 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-09 01:27 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\SavingsbullFilter

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-09 00:10 - 2014-02-08 21:29 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\systweak

2014-02-08 22:15 - 2009-12-27 05:17 - 01591146 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:45 - 2014-02-08 19:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{359FAEFF-3324-414F-9526-055D0065C942}

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 03:22 - 2014-02-08 03:21 - 00000000 ____D () C:\Users\Homr\AppData\Local\{B900D6FA-D440-4466-8839-3AE90919DD36}

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-07 15:21 - 2014-02-07 15:20 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82A283E7-BA6D-4B30-9EF0-A361F0447E11}

2014-02-06 02:38 - 2014-02-06 02:38 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8A865C6E-5BC9-4ABA-A2D7-A288416C37B0}

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-05 01:27 - 2014-02-05 01:27 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D3343431-31BB-473C-8CFA-5DC69369E455}

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-04 02:11 - 2014-02-04 02:11 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7906501C-63E3-4A2A-9986-59AFFDC328A7}

2014-02-01 20:22 - 2014-02-01 20:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{9668622A-47A1-44B2-9D2C-0902AC7CF7D5}

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-02-01 02:18 - 2014-02-01 02:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{58E95CF8-42B9-4894-9D1A-0874F4D76EFE}

2014-01-31 03:06 - 2014-01-31 03:05 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0CF83722-F68A-4842-AA87-F6DE7FBBB7E8}

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 14:20 - 2011-11-22 20:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\Facebook

2014-01-30 13:58 - 2014-01-30 13:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CAB52C77-4425-49AD-90D2-B56A274607D3}

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-30 03:03 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar

2014-01-30 03:01 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-30 03:01 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-01-30 01:34 - 2014-01-30 01:34 - 00000000 ____D () C:\Users\Homr\AppData\Local\{7F603FF9-1045-46E9-8C34-CDFEFC0D4598}

2014-01-28 14:51 - 2014-01-28 14:50 - 00000000 ____D () C:\Users\Homr\AppData\Local\{74B86AA5-4C60-4C15-8FF3-E9DA06B03A82}

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-28 00:04 - 2014-01-28 00:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{D09950F1-9F3E-41C5-87FF-AA3EF388D2DC}

2014-01-27 00:17 - 2014-01-27 00:17 - 00000000 ____D () C:\Users\Homr\AppData\Local\{CEF6775E-68AD-43B7-AA5C-F71A34148CB8}

2014-01-26 04:48 - 2014-01-26 04:47 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE1952C7-7C9C-427D-97DC-74E022E2D01D}

2014-01-25 16:16 - 2014-01-25 16:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2434D572-E9AC-40C2-9932-E1B011D85930}

2014-01-25 03:51 - 2014-01-25 03:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2F5E6956-A673-4FB5-97DF-2D2946503577}

2014-01-24 15:00 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-01-24 11:20 - 2014-01-24 11:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\{90649A99-825B-40C5-A243-ADA8CD7A5DC8}

2014-01-23 21:25 - 2014-01-23 21:25 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2A96C56F-053C-460F-9E73-8D3B6A942EA5}

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 22:44 - 2014-01-22 22:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C9B982C0-8878-490F-86E9-071A4479B592}

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-21 23:28 - 2014-01-21 23:28 - 00000000 ____D () C:\Users\Homr\AppData\Local\{604165F4-60CB-485C-968A-8073ACD1A887}

2014-01-20 21:03 - 2014-01-20 21:03 - 00000000 ____D () C:\Users\Homr\AppData\Local\{3F77DEDB-7C51-44BD-A5AC-D84557A91201}

2014-01-19 16:23 - 2014-01-19 16:22 - 00000000 ____D () C:\Users\Homr\AppData\Local\{80795F60-DC2F-4C35-8FAE-571997BFA800}

2014-01-18 17:51 - 2014-01-18 17:51 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A2CAB355-0970-4A63-A1A8-97C5AEEEA4BD}

2014-01-18 03:16 - 2014-01-18 03:16 - 00000000 ____D () C:\Users\Homr\AppData\Local\{2E823518-C89E-413E-9F8F-E78E54365162}

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-17 15:15 - 2014-01-17 15:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C79DF6A3-0195-4E87-A431-BA8942669C11}

2014-01-17 00:47 - 2014-01-17 00:46 - 00000000 ____D () C:\Users\Homr\AppData\Local\{82185989-24AE-4957-9809-1AA7C5E966B6}

2014-01-16 12:46 - 2014-01-16 12:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C997498F-14A8-4923-A836-9A9442B8B4CC}

2014-01-16 12:41 - 2009-07-14 05:45 - 00544464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-16 03:24 - 2009-12-17 00:59 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-16 03:23 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-16 03:22 - 2009-12-07 21:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-16 02:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-01-16 00:23 - 2014-01-16 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Local\{A1B2DE7C-4871-4933-8787-38F31681B0A1}

2014-01-14 22:12 - 2014-01-14 22:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{07C334D6-9B83-44E4-9DA4-A59A1B124CED}

2014-01-13 22:03 - 2014-01-13 22:02 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0A680F0A-89F0-4363-A7A5-5AAD5C0172BF}

2014-01-13 01:58 - 2014-01-13 01:58 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C4D80DF6-5486-4CFF-BD44-EC1161A05F17}

2014-01-12 13:57 - 2014-01-12 13:57 - 00000000 ____D () C:\Users\Homr\AppData\Local\{8942DF44-CF2B-44AB-ACE4-337F351E413E}

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 01:57 - 2014-01-12 01:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{5ED44156-B703-4640-A23E-365C9808CBE0}

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:34 - 2009-12-12 16:15 - 00000000 ____D () C:\Program Files (x86)\Canon

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon

2014-01-11 13:56 - 2014-01-11 13:56 - 00000000 ____D () C:\Users\Homr\AppData\Local\{FE6D1F2A-312C-4C72-AE51-B1CA76EBAECF}

2014-01-11 01:55 - 2014-01-11 01:55 - 00000000 ____D () C:\Users\Homr\AppData\Local\{40DBD734-9666-4814-8AB4-7B0A4107D738}
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\99e0ad50-08e2-421f-8902-6ac34165b647.exe

C:\Users\Homr\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-08 05:59
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Sorry, mein IE spinnte und postete mehrfach den Logfile!

Chandini

10.02.2014 22:24

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-02-2014

Ran by Homr at 2014-02-10 22:12:44

Running from C:\Users\Homr\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Ad-Aware Antivirus (Disabled - Out of date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Ad-Aware Antivirus (Disabled - Out of date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)

Ad-Aware Antivirus (Version: 11.1.5354.0 - Lavasoft)

Ad-Aware Browsing Protection (x32 Version: 1.0.1.124 - Lavasoft)

AdAwareInstaller (Version: 11.1.5354.0 - Lavasoft) Hidden

AdAwareUpdater (Version: 11.1.5354.0 - Lavasoft) Hidden

Adobe AIR (x32 Version: 3.5.0.1060 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 3.5.0.1060 - Adobe Systems Incorporated) Hidden

Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden

Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden

Adobe Creative Suite 2 (x32 Version:  - )

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)

Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden

Adobe Illustrator CS2 (x32 Version: 12.000.000 - Adobe Systems Inc.) Hidden

Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated) Hidden

Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden

Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)

Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden

Adobe SVG Viewer 3.0 (x32 Version:  3.0 - Adobe Systems, Inc.)

Adobe Version Cue CS2 (x32 Version: 2.0 - Adobe Systems, Inc.) Hidden

Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden

AllDup 3.4.12 (x32 Version: 3.4.12 - Michael Thummerer Software Design)

AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden

Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)

Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)

Ashampoo Photo Optimizer 4 v.4.0.3 (x32 Version: 4.0.3 - Ashampoo GmbH & Co. KG)

ATI AVIVO64 Codecs (Version: 10.10.0.40918 - ATI Technologies Inc.) Hidden

ATI Catalyst Install Manager (Version: 3.0.745.0 - ATI Technologies, Inc.)

ATI Problem Report Wizard (Version: 3.0.745.0 - ATI Technologies) Hidden

Audacity 2.0.5 (x32 Version: 2.0.5 - Audacity Team)

Auslogics Disk Defrag (x32 Version: version 3.1 - Auslogics Software Pty Ltd)

Avidemux 2.6 (32-bit) (x32 Version: 2.6.0.8179 - )

Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)

AVS Screen Capture version 1.1.2 (x32 Version:  - Online Media Technologies Ltd.)

AVS Video Editor 5 (x32 Version:  - Online Media Technologies Ltd.)

AVS Video Recorder 2.4 (x32 Version:  - Online Media Technologies Ltd.)

AVS Video ReMaker 3.1.2.102 (x32 Version:  - Online Media Technologies Ltd.)

AVS4YOU Software Navigator 1.4 (x32 Version:  - Online Media Technologies Ltd.)

BEETmobile (x32 Version: 1.0.16.0 - BEETmobile AG)

Bluesoleil2.7.0.13 VoIP Release 071227 (x32 Version: 2.7.0.13 VoIP Release 071227 - IVT Corporation)

Boilsoft Video Splitter 5.21 (x32 Version:  - Boilsoft, Inc.)

CameraHelperMsi (x32 Version: 13.31.1038.0 - Logitech) Hidden

Canon Easy-WebPrint EX (x32 Version: 1.3.5.0 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32 Version:  - )

Canon MP Navigator EX 3.0 (x32 Version:  - )

Canon MP550 series Benutzerregistrierung (x32 Version:  - )

Canon MP550 series MP Drivers (Version:  - Canon Inc.)

Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )

Canon Utilities My Printer (x32 Version:  - )

Canon Utilities Solution Menu (x32 Version:  - )

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden

Catalyst Control Center Core Implementation (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

Catalyst Control Center Graphics Full New (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

Catalyst Control Center Graphics Light (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

Catalyst Control Center HydraVision Full (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2009.0918.2132.36825 - ATI Technologies, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2009.0918.2132.36825 - ATI) Hidden

CCC Help Chinese Standard (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Chinese Traditional (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Czech (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Danish (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Dutch (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help English (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Finnish (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help French (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help German (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Greek (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Hungarian (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Italian (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Japanese (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Korean (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Norwegian (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Polish (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Portuguese (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Russian (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Spanish (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Swedish (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Thai (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

CCC Help Turkish (x32 Version: 2009.0918.2131.36825 - ATI) Hidden

ccc-core-static (x32 Version: 2009.0918.2132.36825 - Ihr Firmenname) Hidden

ccc-utility64 (Version: 2009.0918.2132.36825 - ATI) Hidden

CCleaner (Version: 4.09 - Piriform)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Defraggler (Version: 1.17 - Piriform)

Die Sims™ 3 (x32 Version: 1.17.60 - Electronic Arts)

DivX Plus DirectShow Filters (x32 Version:  - DivX, Inc.)

DivX-Setup (x32 Version: 2.6.1.90 - DivX, LLC)

DVDFab 7.0.7.0 (08/06/2010) (x32 Version:  - Fengtao Software Inc.)

EA Installer (x32 Version: 2.3.0.74 - Electronic Arts, Inc.)

ElsterFormular (x32 Version: 15.0.20140114 - Landesfinanzdirektion Thüringen)

erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden

Exact Audio Copy 0.99pb5 (x32 Version: 0.99pb5 - Andre Wiethoff)

Falk Navi-Manager (x32 Version: 2.1.0.0 - Falk Marcopolo Interactive GmbH) Hidden

Falk Navi-Manager (x32 Version: 2.10.0 - United Navigation GmbH)

Falk Navi-Manager (x32 Version: 2.10.0 - United Navigation GmbH) Hidden

Falk Navi-Manager (x32 Version: 2.2.2 - Falk Navigation GmbH) Hidden

Falk Navi-Manager (x32 Version: 2.5.0 - Falk Navigation GmbH) Hidden

Falk Navi-Manager (x32 Version: 2.7.0 - Falk Navigation GmbH) Hidden

FM-Soundeditor (HKCU Version: 1.0.0.14 - Soccer-Zone-Tools)

FormatFactory 3.2.1.0 (x32 Version: 3.2.1.0 - Free Time)

Free FLV Converter V 7.5.0 (x32 Version: 7.5.0.0 - Koyote Soft)

FUSSBALL MANAGER 11 (x32 Version: 1.0.0.2 - Electronic Arts)

HydraVision (x32 Version: 4.2.114.0 - ATI Technologies Inc.) Hidden

ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden

Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)

Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Java SE Development Kit 7 Update 5 (64-bit) (Version: 1.7.0.50 - Oracle)

Java SE Development Kit 7 Update 7 (64-bit) (Version: 1.7.0.70 - Oracle)

Java SE Development Kit 7 Update 9 (64-bit) (Version: 1.7.0.90 - Oracle)

JavaFX 2.1.1 (64-bit) (Version: 2.1.1 - Oracle Corporation)

JavaFX 2.1.1 (x32 Version: 2.1.1 - Oracle Corporation)

JavaFX 2.1.1 SDK (64-bit) (Version: 2.1.1 - Oracle Corporation)

JMicron JMB36X Driver (x32 Version: 1.00.0000 - JMICRON Technology Corp.)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

KeyMan V4.0 Build 5 (x32 Version: 4.0.0.5 - ZF Electronics GmbH)

K-Lite Codec Pack 9.3.0 (Full) (x32 Version: 9.3.0 - )

LAME v3.99.3 (for Windows) (x32 Version:  - )

Logitech Vid HD (x32 Version: 7.2 (7240) - Logitech Inc..)

Logitech Webcam Software (x32 Version: 2.0 - Logitech Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.130 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.130 - LogMeIn, Inc.) Hidden

LWS Facebook (x32 Version: 13.31.1038.0 - Logitech) Hidden

LWS Gallery (x32 Version: 13.31.1038.0 - Logitech) Hidden

LWS Help_main (x32 Version: 13.31.1044.0 - Logitech) Hidden

LWS Launcher (x32 Version: 13.31.1038.0 - Logitech) Hidden

LWS Motion Detection (x32 Version: 13.30.1395.0 - Logitech) Hidden

LWS Pictures And Video (x32 Version: 13.31.1038.0 - Logitech) Hidden

LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden

LWS Video Mask Maker (x32 Version: 13.30.1379.0 - Logitech) Hidden

LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden

LWS Webcam Software (x32 Version: 13.31.1038.0 - Logitech) Hidden

LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden

LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden

Menu Templates - Starter Kit (x32 Version: 9.4.1.0 - Nero AG) Hidden

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)

Mobile Partner (x32 Version: 11.300.05.13.40 - Huawei Technologies Co.,Ltd)

Move Media Player (HKCU Version:  - Move Networks)

Movie Templates - Starter Kit (x32 Version: 9.4.1.0 - Nero AG) Hidden

MP4 To MP3 Converter V3.0 (x32 Version:  - hxxp://www.MP4ToMP3Converter.net)

MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden

MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden

MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden

MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)

MyFreeCodec (HKCU Version:  - )

Nero 9 Essentials (x32 Version:  - Nero AG)

Nero BurnRights (x32 Version: 2.99.6.100 - Nero AG) Hidden

Nero BurnRights (x32 Version: 3.4.7.100 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.0.21800 - Nero AG) Hidden

Nero CoverDesigner (x32 Version: 4.4.7.100 - Nero AG) Hidden

Nero CoverDesigner Help (x32 Version: 4.4.2.100 - Nero AG) Hidden

Nero DiscSpeed (x32 Version: 4.99.5.105 - Nero AG) Hidden

Nero DiscSpeed (x32 Version: 5.4.7.100 - Nero AG) Hidden

Nero DriveSpeed (x32 Version: 3.99.5.105 - Nero AG) Hidden

Nero DriveSpeed (x32 Version: 4.4.7.100 - Nero AG) Hidden

Nero Express Help (x32 Version: 9.2.2.100 - Nero AG) Hidden

Nero InfoTool (x32 Version: 5.99.5.105 - Nero AG) Hidden

Nero InfoTool (x32 Version: 6.4.7.100 - Nero AG) Hidden

Nero Installer (x32 Version: 2.0.0.1 - Nero AG) Hidden

Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG) Hidden

Nero Prerequisite Installer 2.0 (x32 Version: 12.0.01000 - Nero AG)

Nero Rescue Agent (x32 Version: 2.4.4.100 - Nero AG) Hidden

Nero RescueAgent Help (x32 Version: 1.99.0.1 - Nero AG) Hidden

Nero ShowTime (x32 Version: 4.99.0.0 - Nero AG) Hidden

Nero ShowTime (x32 Version: 5.4.12.100 - Nero AG) Hidden

Nero SoundTrax (x32 Version: 12.0.00500 - Nero AG)

Nero SoundTrax (x32 Version: 12.0.4000 - Nero AG) Hidden

Nero SoundTrax Help (CHM) (x32 Version: 12.0.5000 - Nero AG) Hidden

Nero StartSmart (x32 Version: 9.4.9.100 - Nero AG) Hidden

Nero StartSmart Help (x32 Version: 9.4.8.100 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden

Nero Vision (x32 Version: 0.0.0.1 - Nero AG) Hidden

Nero Vision (x32 Version: 6.4.7.100 - Nero AG) Hidden

Nero WaveEditor (x32 Version: 12.0.01100 - Nero AG)

Nero WaveEditor (x32 Version: 12.0.8000 - Nero AG) Hidden

Nero WaveEditor Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden

NeroExpress (x32 Version: 9.4.9.100 - Nero AG) Hidden

neroxml (x32 Version: 1.0.0 - Nero AG) Hidden

Octoshape Streaming Services (HKCU Version:  - )

Paint.NET v3.5.11 (Version: 3.61.0 - dotPDN LLC)

PC Connectivity Solution (x32 Version: 11.5.13.0 - Nokia)

Picasa 3 (x32 Version: 3.9 - Google, Inc.)

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

PS3 Media Server (x32 Version: 1.52.1 - PS3 Media Server)

QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)

RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

RealPlayer (x32 Version: 16.0.3 - RealNetworks)

Realtek 8136 8168 8169 Ethernet Driver (x32 Version: 1.00.0005 - Realtek)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

Samsung AllShare (x32 Version: 2.1.0.11123_8 - Samsung Electronics Co., Ltd.)

Samsung AllShare (x32 Version: 2.1.0.11123_8 - Samsung Electronics Co., Ltd.) Hidden

Samsung Kies (x32 Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.)

Samsung Kies (x32 Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)

Samsung_MonSetup (x32 Version: 1.00.0000 - Samsung)

SavingsbullFilter (Version: 1.0.0.0 - SavingsBull Filter) <==== ATTENTION

Secunia PSI (3.0.0.2004) (x32 Version: 3.0.0.2004 - Secunia)

Serif PanoramaPlus 3 (x32 Version: 3.0.1.013 - Serif (Europe) Ltd)

Serif PhotoPlus X3 (x32 Version: 13.0.2.012 - Serif (Europe) Ltd)

Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)

SoftwareClub Audio Converter Extractor Max 1.0.0.0 (x32 Version:  - SoftwareClub.ws)

SopCast 3.5.0 (x32 Version: 3.5.0 - www.sopcast.com)

Suite Specific (x32 Version: 2.0.0 - Adobe Systems, Incorporated) Hidden

Unity Web Player (HKCU Version: 2.6.1f3_31223 - Unity Technologies ApS)

Unlocker 1.9.1-x64 (Version: 1.9.1 - Cedrick Collomb)

Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Visual C++ 2008 x86 Runtime - (v9.0.30729) (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden

Visual C++ 2008 x86 Runtime - v9.0.30729.01 (x32 Version: 9.0.30729.01 - Microsoft Corporation)

VLC media player 2.0.8 (x32 Version: 2.0.8 - VideoLAN)

Winamp (x32 Version: 5.63  - Nullsoft, Inc)

Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden

Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live OneCare safety scanner (x32 Version:  - Microsoft Corporation)

Windows Live OneCare safety scanner (x32 Version: 1.0.0.0 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation)

WinRAR (Version:  - )

Wise Care 365 version 2.03 (x32 Version: 2.03 - WiseCleaner.com, Inc.)
 

==================== Restore Points  =========================
 

08-02-2014 21:11:36 Windows Update

08-02-2014 23:00:18 RegClean Pro So, Feb 09, 14  00:00

08-02-2014 23:34:22 Installed SpyHunter

09-02-2014 00:26:35 Removed SavingsbullFilter

09-02-2014 00:27:06 Removed SpyHunter

09-02-2014 00:45:24 AA11

09-02-2014 15:44:09 Windows Modules Installer

09-02-2014 18:59:53 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2010-11-11 00:55 - 00000825 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {01B351F3-06E8-4B79-A284-683A89D592E1} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3139214333-3526821646-799605520-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {10489C6D-EB8A-49DE-8D9A-4CFC580A66B9} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3139214333-3526821646-799605520-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {1D75A380-9214-4552-BA3D-76B9F4BB8EF3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {32D201FC-69A3-40AC-95AE-9B6F30775D71} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3139214333-3526821646-799605520-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {3805FFB8-088F-4E68-B05B-E6EAED99D762} - System32\Tasks\BEETmobile => C:\Program Files (x86)\BEETmobile\BEETmobile.exe [2012-10-30] (BEETmobile)

Task: {3A4A79D1-7A6F-4CE9-9841-7ED18BB80B16} - System32\Tasks\Wise Care 365 => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe [2012-09-24] (WiseCleaner.com)

Task: {65613E74-BA01-40DB-A68A-10FE8FAD6F1A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)

Task: {6A0B9E3B-9C31-4CCC-A4E2-67D3CB4DD4C2} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe

Task: {6C629775-3A7C-4674-9A9F-9F3902A26F5D} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3139214333-3526821646-799605520-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)

Task: {748E0438-C1F2-48BC-958E-5B4C2315CDAE} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe

Task: {96F96287-06E3-4FD1-B322-C9F8DE62E3FA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3139214333-3526821646-799605520-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {E709F8AF-3878-46BD-998D-8BB8A8D0764B} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3139214333-3526821646-799605520-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {E771C167-F23B-464E-A4AE-55A8300B1C83} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3139214333-3526821646-799605520-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {F4AD6A1B-754A-4BDE-B695-CB699A3295B0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-08] (Adobe Systems Incorporated)

Task: C:\Windows\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\Wise Care 365.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-01-23 16:29 - 2014-01-23 16:29 - 04114264 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe

2014-01-23 16:30 - 2014-01-23 16:30 - 00158032 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\pugixml.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 02595144 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\RCF.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00123776 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_filesystem-vc100-mt-1_55.dll

2014-01-23 16:30 - 2014-01-23 16:30 - 00024440 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_system-vc100-mt-1_55.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00055680 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_date_time-vc100-mt-1_55.dll

2014-01-23 16:30 - 2014-01-23 16:30 - 00103800 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_thread-vc100-mt-1_55.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00033656 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_chrono-vc100-mt-1_55.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00500088 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\boost_locale-vc100-mt-1_55.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00361824 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\HtmlFramework.dll

2014-01-23 16:30 - 2014-01-23 16:30 - 00149840 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\libssh2.dll

2014-01-23 16:30 - 2014-01-23 16:30 - 00106824 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\zlib.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00066904 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\DllStorage.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00788848 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTrayDefaultSkin.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00139608 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\Localization.dll

2014-01-23 16:29 - 2014-01-23 16:29 - 00685904 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\SQLite.dll

2012-12-02 20:19 - 2012-12-02 20:19 - 06239727 _____ () C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

2011-12-16 04:45 - 2011-12-16 04:45 - 02745870 _____ () C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

2013-11-15 01:48 - 2013-11-15 01:48 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2009-08-28 16:08 - 2009-08-28 16:08 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2009-12-05 18:05 - 2009-12-05 18:05 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2012-11-04 02:29 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2005-04-06 16:52 - 2005-04-06 16:52 - 00028791 _____ () c:\Creative Suite CS2\Adobe Version Cue CS2\jre\bin\hpi.dll

2005-04-06 16:53 - 2005-04-06 16:53 - 00057453 _____ () c:\Creative Suite CS2\Adobe Version Cue CS2\jre\bin\verify.dll

2005-04-06 16:53 - 2005-04-06 16:53 - 00102515 _____ () c:\Creative Suite CS2\Adobe Version Cue CS2\jre\bin\java.dll

2005-04-06 16:53 - 2005-04-06 16:53 - 00053364 _____ () c:\Creative Suite CS2\Adobe Version Cue CS2\jre\bin\zip.dll

2005-04-06 16:53 - 2005-04-06 16:53 - 00057455 _____ () C:\Creative Suite CS2\Adobe Version Cue CS2\jre\bin\net.dll

2005-04-06 16:53 - 2005-04-06 16:53 - 00032880 _____ () C:\Creative Suite CS2\Adobe Version Cue CS2\jre\bin\nio.dll

2005-04-06 16:53 - 2005-04-06 16:53 - 00434255 _____ () c:\Creative Suite CS2\Adobe Version Cue CS2\bin\ps-rw-vc-v8_58.dll

2005-04-06 16:53 - 2005-04-06 16:53 - 01019904 _____ () c:\Creative Suite CS2\Adobe Version Cue CS2\bin\ps-vc-v8_58.dll

2007-12-27 15:39 - 2007-12-27 15:39 - 00166520 _____ () C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

2014-01-12 00:34 - 2009-02-10 17:01 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2005-04-06 16:53 - 2005-04-06 16:53 - 03502080 _____ () c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

2007-12-27 15:39 - 2007-12-27 15:39 - 00051816 _____ () C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

2012-04-24 13:21 - 2012-04-24 13:21 - 00014848 ____N () C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

2009-06-23 03:42 - 2009-06-23 03:42 - 00043008 _____ () C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\libgcc_s_dw2-1.dll

2011-08-23 23:59 - 2011-08-23 23:59 - 00047972 _____ () C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\mingwm10.dll

2006-02-22 14:47 - 2006-02-22 14:47 - 00073728 ____R () C:\Program Files (x86)\Cherry\KeyMan\zlib1.dll

2006-02-22 14:47 - 2006-02-22 14:47 - 00114688 ____R () C:\Program Files (x86)\Cherry\KeyMan\libpng13.dll

2013-11-15 01:49 - 2013-11-15 01:49 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== Faulty Device Manager Devices =============
 

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/10/2014 09:45:14 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: SavingsbullFilterService64.exe, Version: 0.0.0.0, Zeitstempel: 0x52d849c2

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000053290

ID des fehlerhaften Prozesses: 0x6bc

Startzeit der fehlerhaften Anwendung: 0xSavingsbullFilterService64.exe0

Pfad der fehlerhaften Anwendung: SavingsbullFilterService64.exe1

Pfad des fehlerhaften Moduls: SavingsbullFilterService64.exe2

Berichtskennung: SavingsbullFilterService64.exe3
 

Error: (02/10/2014 09:37:31 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: AllShareDMS.exe, Version: 2.1.0.0, Zeitstempel: 0x4eeae3c3

Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722

Ausnahmecode: 0x40000015

Fehleroffset: 0x0006680c

ID des fehlerhaften Prozesses: 0x8ac

Startzeit der fehlerhaften Anwendung: 0xAllShareDMS.exe0

Pfad der fehlerhaften Anwendung: AllShareDMS.exe1

Pfad des fehlerhaften Moduls: AllShareDMS.exe2

Berichtskennung: AllShareDMS.exe3
 

Error: (02/10/2014 09:37:09 PM) (Source: Windows Search Service) (User: )

Description: Der Index kann nicht initialisiert werden.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (02/10/2014 09:37:09 PM) (Source: Windows Search Service) (User: )

Description: Die Anwendung kann nicht initialisiert werden.
 

Kontext: Windows Anwendung
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (02/10/2014 09:37:09 PM) (Source: Windows Search Service) (User: )

Description: Das Gatherer-Objekt kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (02/10/2014 09:37:09 PM) (Source: Windows Search Service) (User: )

Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
 

Error: (02/10/2014 09:36:55 PM) (Source: Windows Search Service) (User: )

Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (02/10/2014 09:36:54 PM) (Source: Windows Search Service) (User: )

Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (02/10/2014 09:36:54 PM) (Source: Windows Search Service) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (02/10/2014 09:36:53 PM) (Source: Windows Search Service) (User: )

Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 
 

System errors:

=============

Error: (02/10/2014 10:08:40 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 10:06:44 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 10:06:35 PM) (Source: DCOM) (User: )

Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}
 

Error: (02/10/2014 10:05:16 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 09:56:32 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 09:55:16 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 09:50:16 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 09:47:44 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 09:46:16 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (02/10/2014 09:45:24 PM) (Source: Service Control Manager) (User: )

Description: Dienst "SavingsbullFilterService64" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (12/28/2011 11:07:32 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/28/2011 11:07:27 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 30 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/18/2011 10:48:44 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/18/2011 03:42:10 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/22/2011 02:26:17 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/22/2011 02:12:37 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/22/2011 04:04:44 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/22/2011 04:04:42 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/22/2011 03:24:32 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (04/22/2011 03:23:42 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-02-16 17:29:21.714

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:21.632

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:18.815

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:18.737

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:14.134

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:14.053

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:11.541

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:11.463

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:08.736

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-02-16 17:29:08.657

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\FsUsbExDisk.Sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 28%

Total physical RAM: 8183.05 MB

Available physical RAM: 5826.88 MB

Total Pagefile: 16364.29 MB

Available Pagefile: 13480.84 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:146.39 GB) (Free:67.48 GB) NTFS

Drive d: () (Fixed) (Total:625 GB) (Free:351.11 GB) NTFS

Drive e: () (Fixed) (Total:625.78 GB) (Free:625.64 GB) NTFS

Drive f: (Sims3) (CDROM) (Total:5.56 GB) (Free:0 GB) UDF
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 263E9D55)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=146 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=625 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=626 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

schrauber

11.02.2014 18:01

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Chandini

11.02.2014 22:36

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.02.11.08
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

Homr :: HOME-PC [Administrator]
 

11.02.2014 21:23:36

mbam-log-2014-02-11 (21-23-36).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: Registrierung | P2P

Durchsuchte Objekte: 220297

Laufzeit: 6 Minute(n), 11 Sekunde(n)
 

Infizierte Speicherprozesse: 2

C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (PUP.Optional.Savingsbull) -> 2012 -> Löschen bei Neustart.

C:\ProgramData\Search Protection\SearchProtection.exe (PUP.Optional.SearchProtection.A) -> 5276 -> Löschen bei Neustart.
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 5

HKLM\SYSTEM\CurrentControlSet\Services\Level Quality Watcher (PUP.Optional.Savingsbull) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SYSTEM\CurrentControlSet\Services\SavingsbullFilterService64 (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\AppDataLow\Software\Savings Bull (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Registrierungswerte: 1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Search Protection (PUP.Optional.SearchProtection.A) -> Daten: C:\ProgramData\Search Protection\SearchProtection.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 3

C:\Program Files\SavingsbullFilter (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\IminentToolbar (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\Level Quality Watcher\v1.01 (PUP.Optional.Adpeak) -> Löschen bei Neustart.
 

Infizierte Dateien: 17

C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (PUP.Optional.Savingsbull) -> Löschen bei Neustart.

C:\Program Files\SavingsbullFilter\sample.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\Installbat64.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\Microsoft.Deployment.WindowsInstaller.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\Microsoft.Deployment.WindowsInstaller.xml (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\netfilter64.sys (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\nfapi.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\nfregdrv.exe (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\ProtocolFilters.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\SavingsbullFilterService64.exe (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\SavingsbullFilter\SvcConfig64.exe (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\ProgramData\Search Protection\SearchProtection.exe (PUP.Optional.SearchProtection.A) -> Löschen bei Neustart.

C:\ProgramData\Wincert\win32cert.dll (PUP.Optional.Datamngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\ProgramData\Wincert\win64cert.dll (PUP.Optional.Datamngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\ProgramData\Wincert\win32prop.dll (PUP.Optional.Datamngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\ProgramData\Wincert\win64prop.dll (PUP.Optional.Datamngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher32.exe (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Code:

# AdwCleaner v3.018 - Bericht erstellt am 11/02/2014 um 22:14:15

# Updated 28/01/2014 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : Homr - HOME-PC

# Gestartet von : C:\Users\Homr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K6TNPAI7\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\blekko toolbars

Ordner Gelöscht : C:\ProgramData\Search Protection

Ordner Gelöscht : C:\ProgramData\Uniblue\DriverScanner

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

Ordner Gelöscht : C:\Program Files (x86)\myfree codec

Ordner Gelöscht : C:\Program Files (x86)\Toolbar Cleaner

Ordner Gelöscht : C:\Users\Homr\AppData\Local\PackageAware

Ordner Gelöscht : C:\Users\Homr\AppData\LocalLow\adawaretb

Ordner Gelöscht : C:\Users\Homr\AppData\LocalLow\boost_interprocess

Ordner Gelöscht : C:\Users\Homr\AppData\LocalLow\IminentToolbar

Ordner Gelöscht : C:\Users\Homr\AppData\Roaming\Systweak

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\searchplugins\iminent.xml

Datei Gelöscht : C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\user.js
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tvuplayer[1]_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_tvuplayer[1]_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\Myfree Codec

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKLM\Software\adawaretb

Schlüssel Gelöscht : HKLM\Software\Myfree Codec

Schlüssel Gelöscht : HKLM\Software\Toolbar Cleaner

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v
 

[ Datei : C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default\prefs.js ]
 
 

*************************
 

AdwCleaner[R0].txt - [5292 octets] - [11/02/2014 22:09:10]

AdwCleaner[S0].txt - [4874 octets] - [11/02/2014 22:14:15]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4934 octets] ##########

Ich wollte gerade den JRT.TXT posten, aber dann kommt die Meldung

"Der Text, den Sie eingegeben haben, besteht aus 181370 Zeichen und ist damit zu lang. Bitte kürzen Sie den Text auf die maximale Länge von 120000 Zeichen."

Wie kann ich es posten?Getrennt?

Ok, ich weiß,wie ich es zu posten habe. Ich mach das eben mal:)

Chandini

11.02.2014 22:40

Hier ist der JRT.txt in Zip eingepackt

Chandini

11.02.2014 22:43

Hier ist der JRT.txt

Chandini

11.02.2014 23:26

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01

Ran by Homr (administrator) on HOME-PC on 11-02-2014 23:24:00

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [] - [X]

HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR.exe] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDB07525E0C76CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF Homepage: hxxp://www.google.de/

FF NetworkProxy: "type", 0

FF Homepage: hxxp://start.iminent.com/?appId=51CBD309-3DC1-42BA-81E8-C3EB7070281A

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-11 23:24 - 2014-02-11 23:24 - 00024379 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-11 22:09 - 2014-02-11 22:14 - 00000000 ____D () C:\AdwCleaner

2014-02-11 21:32 - 2014-02-11 21:32 - 00004206 _____ () C:\Windows\PFRO.log

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-11 21:19 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-02-10 22:11 - 2014-02-11 23:24 - 00000000 ____D () C:\FRST

2014-02-10 22:11 - 2014-02-11 23:23 - 02151424 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 21:33 - 2014-02-11 22:15 - 00000224 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-09 20:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-09 20:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-09 20:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-09 20:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-09 20:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-09 20:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-09 20:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-09 20:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-09 20:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-09 20:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-09 20:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-09 20:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-09 20:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-09 20:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-11 22:18 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-09 01:34 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:55 - 2014-02-11 22:14 - 00596252 _____ () C:\Windows\WindowsUpdate.log

2014-01-30 03:01 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-16 00:15 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-16 00:15 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-16 00:15 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 00:34 - 2014-02-01 02:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon
 

==================== One Month Modified Files and Folders =======
 

2014-02-11 23:24 - 2014-02-11 23:24 - 00024379 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-11 23:24 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-11 23:23 - 2014-02-10 22:11 - 02151424 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-11 23:23 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-11 22:25 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-11 22:25 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-11 22:22 - 2013-07-15 20:40 - 00000000 ____D () C:\Windows\ERUNT

2014-02-11 22:21 - 2014-01-30 13:55 - 00596252 _____ () C:\Windows\WindowsUpdate.log

2014-02-11 22:18 - 2014-02-09 01:47 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-11 22:18 - 2013-11-03 13:21 - 00000433 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-11 22:16 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-11 22:16 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-11 22:15 - 2014-02-10 21:33 - 00000224 _____ () C:\Windows\setupact.log

2014-02-11 22:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-11 22:14 - 2014-02-11 22:09 - 00000000 ____D () C:\AdwCleaner

2014-02-11 22:14 - 2012-10-14 16:29 - 00000000 ____D () C:\ProgramData\Uniblue

2014-02-11 21:34 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-11 21:32 - 2014-02-11 21:32 - 00004206 _____ () C:\Windows\PFRO.log

2014-02-11 21:32 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-11 21:17 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-11 21:16 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-10 02:05 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-09 22:36 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-09 22:36 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-09 22:36 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 19:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:45 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-09 01:34 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:31 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-08 22:15 - 2009-12-27 05:17 - 01591146 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 14:20 - 2011-11-22 20:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\Facebook

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-30 03:01 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-24 15:00 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-16 12:41 - 2009-07-14 05:45 - 00544464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-16 03:24 - 2009-12-17 00:59 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-16 03:23 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-16 03:22 - 2009-12-07 21:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-16 02:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-01-12 13:18 - 2014-01-12 13:18 - 00000000 ___HD () C:\ProgramData\CanonIJMyPrinter

2014-01-12 00:34 - 2014-01-12 00:34 - 00000000 ___HD () C:\ProgramData\CanonIJSolutionMenu

2014-01-12 00:34 - 2009-12-12 16:15 - 00000000 ____D () C:\Program Files (x86)\Canon

2014-01-12 00:23 - 2014-01-12 00:23 - 00000000 ____D () C:\Program Files\Canon
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\99e0ad50-08e2-421f-8902-6ac34165b647.exe

C:\Users\Homr\AppData\Local\Temp\avgnt.exe

C:\Users\Homr\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-08 05:59
 

==================== End Of Log ============================

--- --- ---

schrauber

12.02.2014 18:33

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Chandini

12.02.2014 21:23

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2014

Ran by Homr (administrator) on HOME-PC on 12-02-2014 21:16:57

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\ipmGui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [] - [X]

HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR.exe] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDB07525E0C76CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF Homepage: hxxp://www.google.de/

FF NetworkProxy: "type", 0

FF Homepage: hxxp://start.iminent.com/?appId=51CBD309-3DC1-42BA-81E8-C3EB7070281A

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-12 21:16 - 2014-02-12 21:16 - 00024030 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-12 21:15 - 2014-02-12 21:16 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-12 21:10 - 2014-02-12 21:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0FB2E7E7-E4F1-4A86-AA4F-14AE5363AA70}

2014-02-12 21:09 - 2014-02-12 21:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-11 22:09 - 2014-02-11 22:14 - 00000000 ____D () C:\AdwCleaner

2014-02-11 21:32 - 2014-02-11 21:32 - 00004206 _____ () C:\Windows\PFRO.log

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-11 21:19 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-02-10 22:11 - 2014-02-12 21:16 - 02152448 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-12 21:16 - 00000000 ____D () C:\FRST

2014-02-10 21:33 - 2014-02-12 21:08 - 00000280 _____ () C:\Windows\setupact.log

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-09 20:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-09 20:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-09 20:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-09 20:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-09 20:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-09 20:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-09 20:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-09 20:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-09 20:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-09 20:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-09 20:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-09 20:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-09 20:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-09 20:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-12 21:13 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-09 01:34 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:55 - 2014-02-11 23:59 - 00634120 _____ () C:\Windows\WindowsUpdate.log

2014-01-30 03:01 - 2014-02-11 21:32 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-16 00:15 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-16 00:15 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-16 00:15 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

==================== One Month Modified Files and Folders =======
 

2014-02-12 21:17 - 2014-02-12 21:16 - 00024030 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-12 21:17 - 2014-01-30 13:55 - 00634120 _____ () C:\Windows\WindowsUpdate.log

2014-02-12 21:16 - 2014-02-12 21:15 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-12 21:16 - 2014-02-10 22:11 - 02152448 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-12 21:16 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-12 21:13 - 2014-02-09 01:47 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-12 21:13 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-12 21:12 - 2014-02-12 21:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0FB2E7E7-E4F1-4A86-AA4F-14AE5363AA70}

2014-02-12 21:12 - 2013-11-03 13:21 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-12 21:12 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-12 21:11 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-12 21:10 - 2014-02-12 21:09 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-12 21:10 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-12 21:09 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-12 21:09 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-12 21:08 - 2014-02-10 21:33 - 00000280 _____ () C:\Windows\setupact.log

2014-02-12 21:08 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-11 22:25 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-11 22:25 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-11 22:22 - 2013-07-15 20:40 - 00000000 ____D () C:\Windows\ERUNT

2014-02-11 22:14 - 2014-02-11 22:09 - 00000000 ____D () C:\AdwCleaner

2014-02-11 22:14 - 2012-10-14 16:29 - 00000000 ____D () C:\ProgramData\Uniblue

2014-02-11 21:32 - 2014-02-11 21:32 - 00004206 _____ () C:\Windows\PFRO.log

2014-02-11 21:32 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:33 - 2014-02-10 21:33 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-10 02:05 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-09 22:36 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-09 22:36 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-09 22:36 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 19:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:45 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-09 01:34 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:31 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-08 22:15 - 2009-12-27 05:17 - 01591146 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 14:20 - 2011-11-22 20:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\Facebook

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-30 03:01 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-24 15:00 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-16 12:41 - 2009-07-14 05:45 - 00544464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-16 03:24 - 2009-12-17 00:59 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-16 03:23 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-16 03:22 - 2009-12-07 21:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-16 02:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\99e0ad50-08e2-421f-8902-6ac34165b647.exe

C:\Users\Homr\AppData\Local\Temp\avgnt.exe

C:\Users\Homr\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-08 05:59
 

==================== End Of Log ============================

--- --- ---

schrauber

13.02.2014 21:44

Restliche Logfiles?

Chandini

14.02.2014 13:22

Code:

 Results of screen317's Security Check version 0.99.79  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Ad-Aware Antivirus   

Avira Desktop        

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 Ad-Aware 

 Secunia PSI (3.0.0.2004)   

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 JavaFX 2.1.1    

 Java 7 Update 51  

 Adobe Reader XI  
 ````````Process Check: objlist.exe by Laurent````````  

 Ad-Aware AAWService.exe is disabled! 

 Ad-Aware AAWTray.exe is disabled! 

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbamgui.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Lavasoft Ad-Aware Antivirus Ad-Aware Antivirus 11.1.5354.0\AdAwareService.exe 

 Lavasoft Ad-Aware Antivirus Ad-Aware Antivirus 11.1.5354.0\AdAwareTray.exe 

 Malwarebytes' Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Ich versuche hier immer die Files zu posten,aber wird gar nicht gepostet.Jetzt bin ich über Android hier online und sehe,dass ein Logfile gepostet wurde.Aber auf dem Rechner sehe ich das gar nicht.Ich logg mich aus und melde mich wieder an.Sogar,wenn ich auslogge und einen anderen Reiter auf dieser Website anklicke bin ich plötzlich wieder angemeldet.Das Problem hab ich hier nicht zum ersten Mal.Woran liegt es?Es ist mühselig hier was zu posten.....Woran liegt es?

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=d38689325f6d104f8cf4eb5d3ba740c0

# engine=17066

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-02-14 04:14:52

# local_time=2014-02-14 05:14:52 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1799 16775165 100 96 20594 257770982 13382 0

# compatibility_mode=5893 16776574 100 94 18940666 143981142 0 0

# scanned=264423

# found=0

# cleaned=0

# scan_time=14799

schrauber

15.02.2014 15:23

In welchem Browser hast Du das Problem?

Chandini

15.02.2014 15:42

Ie 11

schrauber

16.02.2014 07:32

Setze folgendermassen den Internet Explorer zurück:

Öffne den Internet Explorer und gehe zu Extras -> Internetoptionen.
Klicke in der Registerkarte Erweitert unter "Internet Explorer-Einstellungen zurücksetzen" auf Zurücksetzen...
Klicke im Dialogfeld "Internet Explorer-Einstellungen zurücksetzen" zum Bestätigen auf Zurücksetzen.

(Hier findest du die bebilderte Anleitung.)

Frisches FRST log bitte. Sonst noch Probleme?

Chandini

17.02.2014 01:21

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01

Ran by Homr (administrator) on HOME-PC on 14-02-2014 12:51:34

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [] - [X]

HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4280184 2012-03-08] (Microsoft Corporation)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [KiesPDLR.exe] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-03] (Samsung)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDB07525E0C76CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

URLSearchHook: HKCU - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF Homepage: hxxp://www.google.de/

FF NetworkProxy: "type", 0

FF Homepage: hxxp://start.iminent.com/?appId=51CBD309-3DC1-42BA-81E8-C3EB7070281A

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

S2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-14 12:51 - 2014-02-14 12:51 - 00024085 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-14 12:51 - 2014-02-14 12:51 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-14 12:50 - 2014-02-14 12:50 - 00001263 _____ () C:\Users\Homr\Desktop\checkup.txt

2014-02-14 12:49 - 2014-02-14 12:49 - 00987425 _____ () C:\Users\Homr\Desktop\SecurityCheck.exe

2014-02-14 00:29 - 2014-02-14 12:31 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0D607781-9ECF-4262-BB24-B3C3973243AC}

2014-02-12 21:10 - 2014-02-12 21:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0FB2E7E7-E4F1-4A86-AA4F-14AE5363AA70}

2014-02-12 21:09 - 2014-02-12 21:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-11 22:09 - 2014-02-11 22:14 - 00000000 ____D () C:\AdwCleaner

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-11 21:19 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-02-10 22:11 - 2014-02-14 12:51 - 02152960 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-14 12:51 - 00000000 ____D () C:\FRST

2014-02-09 20:00 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-09 20:00 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-09 20:00 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-09 20:00 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-09 20:00 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-09 20:00 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-09 20:00 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-09 20:00 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-09 20:00 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-09 20:00 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-09 20:00 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-09 20:00 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-09 20:00 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-09 20:00 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-09 20:00 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-09 20:00 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-09 20:00 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-09 20:00 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-09 20:00 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-09 20:00 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-09 20:00 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-09 20:00 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-14 00:29 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-09 01:34 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:55 - 2014-02-14 11:34 - 00801470 ____N () C:\Windows\WindowsUpdate.log

2014-01-30 03:01 - 2014-02-11 21:32 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-16 00:15 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-16 00:15 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-16 00:15 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-16 00:15 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

==================== One Month Modified Files and Folders =======
 

2014-02-14 12:52 - 2014-02-14 12:51 - 00024085 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-14 12:51 - 2014-02-14 12:51 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-14 12:51 - 2014-02-10 22:11 - 02152960 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-14 12:51 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-14 12:50 - 2014-02-14 12:50 - 00001263 _____ () C:\Users\Homr\Desktop\checkup.txt

2014-02-14 12:49 - 2014-02-14 12:49 - 00987425 _____ () C:\Users\Homr\Desktop\SecurityCheck.exe

2014-02-14 12:48 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-14 12:48 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-02-14 12:31 - 2014-02-14 00:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0D607781-9ECF-4262-BB24-B3C3973243AC}

2014-02-14 12:31 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-14 11:34 - 2014-01-30 13:55 - 00801470 ____N () C:\Windows\WindowsUpdate.log

2014-02-14 11:29 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-14 00:38 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-14 00:38 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-14 00:30 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-14 00:29 - 2014-02-09 01:47 - 00002305 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-02-14 00:29 - 2013-11-03 13:21 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-14 00:29 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-14 00:26 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-14 00:26 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-12 21:12 - 2014-02-12 21:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0FB2E7E7-E4F1-4A86-AA4F-14AE5363AA70}

2014-02-12 21:10 - 2014-02-12 21:09 - 00000000 ____D () C:\Users\Homr\AppData\Local\adawarebp

2014-02-11 22:22 - 2013-07-15 20:40 - 00000000 ____D () C:\Windows\ERUNT

2014-02-11 22:14 - 2014-02-11 22:09 - 00000000 ____D () C:\AdwCleaner

2014-02-11 22:14 - 2012-10-14 16:29 - 00000000 ____D () C:\ProgramData\Uniblue

2014-02-11 21:32 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-10 02:05 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-09 22:36 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-09 22:36 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-09 22:36 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-09 19:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-09 18:09 - 2014-02-09 18:09 - 00001409 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 18:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-09 16:45 - 2014-02-09 16:45 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-09 16:45 - 2014-02-09 16:45 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-09 16:45 - 2014-02-09 16:45 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-09 16:45 - 2014-02-09 16:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-09 16:45 - 2014-02-09 16:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-09 16:45 - 2014-02-09 16:45 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\ProgramData\Ad-Aware Browsing Protection

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files\Lavasoft

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:46 - 2014-02-09 01:46 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-02-09 01:45 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-09 01:34 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:31 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-08 22:15 - 2009-12-27 05:17 - 01591146 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 14:20 - 2011-11-22 20:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\Facebook

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-30 03:01 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2014-01-18 01:11 - 2014-01-18 01:11 - 00001229 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\ProgramData\elsterformular

2014-01-18 01:11 - 2014-01-18 01:11 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular

2014-01-16 12:41 - 2009-07-14 05:45 - 00544464 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-16 03:24 - 2009-12-17 00:59 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-16 03:23 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-16 03:22 - 2009-12-07 21:08 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-16 02:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\99e0ad50-08e2-421f-8902-6ac34165b647.exe

C:\Users\Homr\AppData\Local\Temp\avgnt.exe

C:\Users\Homr\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-08 05:59
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Ich habe den Logfile von mein Netbook gepostet. Die Einstellung von IE11 werde ich mir gleich vornehmen :) Danke für den Tipp!

Danke für den Tipp mit IE11 :)

schrauber

17.02.2014 14:37

Also Probleme weg?

Chandini

17.02.2014 23:04

Liste der Anhänge anzeigen (Anzahl: 2)

Wie kann ich erkennen, ob es noch Probleme gibt? Ich habe ja alle Logfiles gepostet und du müsstest mir ja sagen, ob mein Rechner irgendwas noch hat.

Seitdem ich auf deine Anweisung mit IE 11 befolgt habe, ist es leider so, dass auf alle Websites viele Wörter hellgrün und unterstrichen sind. Sobald ich mit der Maus über die Wörter hingehe, kommt so ein komisches Fenster. Auf dem Bild kann man das gut erkennen.

Außerdem bekomme ich komische Popups. Wo ich den Verdacht habe, dass mein Rechner was haben könnte. Meistens immer dasselbe, egal, auch welche Website ich bin.

Chandini

17.02.2014 23:13

Liste der Anhänge anzeigen (Anzahl: 2)

Jetzt war ich auf einer Seite, habe auf eine Nachricht angeklickt und auf war ich auf der gleichen Register auf einer Seite gelandet mit so einer komischen Warnung.

Dann tauchte erneut ein Popup und um ehrlich zu sein, habe ich den Eindruck, dass da auf keinen Fall was nicht stimmt.

Dazu muss ich sagen, dass mein Rechner gar nicht langsam ist, sondern ganz normal, wie immer verläuft.

Das ist so, seitdem ich IE11 zurückgesetzt habe.

schrauber

18.02.2014 16:36

Du setzt den IE 11 zurück und hast dann erst die Adware im Browser? :wtf:

is ja auch irgendwie geil :D

IE11 bitte komplett deinstallieren, dann bitte ein frisches FRST log

Chandini

19.02.2014 01:17

Du hattest mir ja gesagt, dass ich IE11 zurücksetzen soll. Und anhand der Logfiles konnte man doch sehen, dass Ad-Aware installiert ist.

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014

Ran by Homr (administrator) on HOME-PC on 19-02-2014 01:15:15

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

() C:\Program Files (x86)\View-Password\ViewPassword153.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

() C:\Program Files (x86)\View-Password\ViewPassword_wd.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2014-02-18] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

ProxyServer: http=127.0.0.1:13828

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF Homepage: hxxp://www.google.de/

FF Homepage: hxxp://start.iminent.com/?appId=51CBD309-3DC1-42BA-81E8-C3EB7070281A

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2014-02-18] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2014-02-18] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

R2 ViewPassword; C:\Program Files (x86)\View-Password\ViewPassword153.exe [181248 2014-02-16] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-19 01:15 - 2014-02-19 01:15 - 00022235 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-19 01:15 - 2014-02-19 01:15 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-19 01:08 - 2014-02-19 01:08 - 00001417 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

2014-02-17 22:45 - 2014-02-17 22:45 - 00000000 ____D () C:\Users\Homr\Desktop\Tor Browser

2014-02-16 03:39 - 2014-02-16 03:39 - 00000000 ____D () C:\Users\Homr\Desktop\Datev Sap

2014-02-16 02:54 - 2014-02-19 01:08 - 00000402 _____ () C:\Windows\Tasks\View Password Update.job

2014-02-16 02:54 - 2014-02-19 01:08 - 00000390 _____ () C:\Windows\Tasks\View Password_wd.job

2014-02-16 02:54 - 2014-02-16 02:54 - 00003048 _____ () C:\Windows\System32\Tasks\View Password Update

2014-02-16 02:54 - 2014-02-16 02:54 - 00002976 _____ () C:\Windows\System32\Tasks\View Password_wd

2014-02-16 02:54 - 2014-02-16 02:54 - 00000000 ____D () C:\Program Files (x86)\View-Password

2014-02-15 16:45 - 2014-02-15 16:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C77393BC-9729-4E15-8B7E-83BDD239B724}

2014-02-15 01:44 - 2014-02-15 01:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0067F53F-7919-468F-9324-5E9195D1A308}

2014-02-14 12:49 - 2014-02-14 12:49 - 00987425 _____ () C:\Users\Homr\Desktop\SecurityCheck.exe

2014-02-14 00:37 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-02-14 00:37 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-14 00:37 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-14 00:37 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-14 00:37 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-02-14 00:37 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-02-14 00:36 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-02-14 00:36 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-14 00:36 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-14 00:36 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-14 00:36 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-14 00:36 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-02-14 00:36 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-14 00:36 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-02-14 00:36 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-14 00:29 - 2014-02-14 12:31 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0D607781-9ECF-4262-BB24-B3C3973243AC}

2014-02-12 21:10 - 2014-02-12 21:12 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0FB2E7E7-E4F1-4A86-AA4F-14AE5363AA70}

2014-02-11 22:09 - 2014-02-11 22:14 - 00000000 ____D () C:\AdwCleaner

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-11 21:19 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-02-10 22:11 - 2014-02-19 01:15 - 02153472 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-19 01:15 - 00000000 ____D () C:\FRST

2014-02-09 18:09 - 2014-02-19 01:08 - 00001451 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-09 01:34 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:55 - 2014-02-19 01:05 - 01130134 _____ () C:\Windows\WindowsUpdate.log

2014-01-30 03:01 - 2014-02-11 21:32 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
 

==================== One Month Modified Files and Folders =======
 

2014-02-19 01:15 - 2014-02-19 01:15 - 00022235 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-19 01:15 - 2014-02-19 01:15 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-19 01:15 - 2014-02-10 22:11 - 02153472 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-19 01:15 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-19 01:15 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-19 01:15 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-19 01:12 - 2014-01-30 13:55 - 01130134 _____ () C:\Windows\WindowsUpdate.log

2014-02-19 01:11 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-19 01:11 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-19 01:09 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-19 01:09 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-19 01:09 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-19 01:08 - 2014-02-19 01:08 - 00001417 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

2014-02-19 01:08 - 2014-02-16 02:54 - 00000402 _____ () C:\Windows\Tasks\View Password Update.job

2014-02-19 01:08 - 2014-02-16 02:54 - 00000390 _____ () C:\Windows\Tasks\View Password_wd.job

2014-02-19 01:08 - 2014-02-09 18:09 - 00001451 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-19 01:07 - 2013-11-03 13:21 - 00000431 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-19 01:07 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-19 01:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-19 00:59 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-19 00:35 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-17 23:10 - 2010-03-18 19:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\Paint.NET

2014-02-17 22:45 - 2014-02-17 22:45 - 00000000 ____D () C:\Users\Homr\Desktop\Tor Browser

2014-02-17 01:23 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-02-17 01:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-16 15:25 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-02-16 15:24 - 2009-12-07 21:08 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-02-16 15:21 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-16 15:21 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-16 15:21 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-16 03:39 - 2014-02-16 03:39 - 00000000 ____D () C:\Users\Homr\Desktop\Datev Sap

2014-02-16 02:55 - 2009-12-06 01:52 - 00000000 ____D () C:\Program Files (x86)\CCleaner

2014-02-16 02:54 - 2014-02-16 02:54 - 00003048 _____ () C:\Windows\System32\Tasks\View Password Update

2014-02-16 02:54 - 2014-02-16 02:54 - 00002976 _____ () C:\Windows\System32\Tasks\View Password_wd

2014-02-16 02:54 - 2014-02-16 02:54 - 00000000 ____D () C:\Program Files (x86)\View-Password

2014-02-16 02:54 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-02-15 16:45 - 2014-02-15 16:45 - 00000000 ____D () C:\Users\Homr\AppData\Local\{C77393BC-9729-4E15-8B7E-83BDD239B724}

2014-02-15 16:45 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-15 01:44 - 2014-02-15 01:44 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0067F53F-7919-468F-9324-5E9195D1A308}

2014-02-14 14:22 - 2009-12-27 05:17 - 01605256 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-14 12:49 - 2014-02-14 12:49 - 00987425 _____ () C:\Users\Homr\Desktop\SecurityCheck.exe

2014-02-14 12:31 - 2014-02-14 00:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0D607781-9ECF-4262-BB24-B3C3973243AC}

2014-02-12 21:12 - 2014-02-12 21:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\{0FB2E7E7-E4F1-4A86-AA4F-14AE5363AA70}

2014-02-11 22:22 - 2013-07-15 20:40 - 00000000 ____D () C:\Windows\ERUNT

2014-02-11 22:14 - 2014-02-11 22:09 - 00000000 ____D () C:\AdwCleaner

2014-02-11 22:14 - 2012-10-14 16:29 - 00000000 ____D () C:\ProgramData\Uniblue

2014-02-11 21:32 - 2014-01-30 03:01 - 00000000 ____D () C:\Program Files\Level Quality Watcher

2014-02-11 21:19 - 2014-02-11 21:19 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-11 21:19 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:34 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 01:33 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:31 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003320 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 14:20 - 2011-11-22 20:10 - 00000000 ____D () C:\Users\Homr\AppData\Local\Facebook

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-18 23:22
 

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber

19.02.2014 16:38

Ich meine nicht das Tool Ad Aware, sondern Adware, nervige Werbung. Aktuell noch Probleme?

Chandini

20.02.2014 18:17

Ach, das meintest du! Mit viel Mühe konnte ich den Adware loswerden. Wie kann ich herausfinden, ob mein Rechner jetzt endgültig in Ordnung ist?

Kann ich jetzt den Explorer jetzt auf IE11 updaten? Ich bin da immer vorsichtig, weil ich wichtige Sachen erledigen muss, aber wegen der Sache nicht erledigen kann. Ich will halt auf Nummer sicher gehen, eher ich noch größere Probleme bekomme.

Chandini

20.02.2014 19:25

Liste der Anhänge anzeigen (Anzahl: 1)

Ich habe mit SpyBot gescannt. Die Bezeichnung mit HK.. ist immer mit Malware verbunden, óder?

schrauber

21.02.2014 15:02

Nein, das ist ein Teil der Registry, alles gut. Update den IE und poste ein frisches FRST log. Teste den Rechner und teile mir mit ob du noch Probleme hast.

Chandini

21.02.2014 19:33

Ich habe IE upgedatet und habe frisches FRST Log:) Probleme habe ich zum Glück nicht. Ich hoffe, dass alles sauber ist und ich endlich meine Sachen erledigen kann, ohne Befürchtungen zu haben:)

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-02-2014

Ran by Homr (administrator) on HOME-PC on 21-02-2014 19:30:16

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF Homepage: hxxp://www.google.de/

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-21 19:30 - 2014-02-21 19:30 - 00021381 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-21 19:24 - 2014-02-21 19:24 - 00001421 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-21 17:47 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-02-21 17:47 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-02-21 17:47 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-02-21 17:47 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-02-21 17:47 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-02-21 17:47 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-02-21 17:47 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-02-21 17:47 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-02-21 17:47 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-02-21 17:47 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-02-21 17:47 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-02-21 17:47 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-02-21 17:47 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-02-21 17:47 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-02-21 17:47 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-02-21 17:47 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-02-21 17:47 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-02-21 17:47 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-21 17:44 - 2014-02-21 17:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-21 17:44 - 2014-02-21 17:44 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-21 17:44 - 2014-02-21 17:44 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-21 17:44 - 2014-02-21 17:44 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-21 17:41 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-02-21 17:41 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-02-21 17:41 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-02-21 17:41 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-02-21 17:41 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-02-21 17:41 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-02-21 17:40 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-02-21 17:40 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-02-19 01:15 - 2014-02-21 19:30 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-17 22:45 - 2014-02-17 22:45 - 00000000 ____D () C:\Tor Browser

2014-02-16 03:39 - 2014-02-16 03:39 - 00000000 ____D () C:\Users\Homr\Desktop\Datev Sap

2014-02-14 00:37 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-02-14 00:37 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-14 00:37 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-14 00:37 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-14 00:37 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-02-14 00:37 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-02-14 00:36 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-02-14 00:36 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-14 00:36 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-14 00:36 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-14 00:36 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-14 00:36 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-02-14 00:36 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-14 00:36 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-02-14 00:36 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-11 21:19 - 2014-02-21 19:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-10 22:11 - 2014-02-21 19:30 - 02153984 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-21 19:30 - 00000000 ____D () C:\FRST

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:33 - 2014-02-21 19:27 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-21 19:27 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:55 - 2014-02-21 19:25 - 01281031 ____N () C:\Windows\WindowsUpdate.log

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-23 01:01 - 2014-01-23 01:02 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:26 - 2014-01-22 23:28 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
 

==================== One Month Modified Files and Folders =======
 

2014-02-21 19:31 - 2014-02-21 19:30 - 00021381 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-21 19:30 - 2014-02-19 01:15 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-21 19:30 - 2014-02-10 22:11 - 02153984 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-21 19:30 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-21 19:29 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-21 19:29 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-21 19:28 - 2014-02-11 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-21 19:27 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-21 19:27 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-21 19:25 - 2014-01-30 13:55 - 01281031 ____N () C:\Windows\WindowsUpdate.log

2014-02-21 19:25 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-21 19:24 - 2014-02-21 19:24 - 00001421 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-21 19:24 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-21 19:24 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-21 18:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-21 18:10 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-21 18:10 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-21 18:05 - 2013-11-03 13:21 - 00000432 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-21 18:04 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-21 18:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-21 17:44 - 2014-02-21 17:44 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-21 17:44 - 2014-02-21 17:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-21 17:44 - 2014-02-21 17:44 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-21 17:44 - 2014-02-21 17:44 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-21 17:44 - 2014-02-21 17:44 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-21 01:21 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-20 19:22 - 2010-03-18 19:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\Paint.NET

2014-02-20 03:37 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-02-20 02:58 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-19 00:59 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-17 22:45 - 2014-02-17 22:45 - 00000000 ____D () C:\Tor Browser

2014-02-17 01:23 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-02-16 15:25 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-02-16 15:24 - 2009-12-07 21:08 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-02-16 15:21 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-16 15:21 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-16 15:21 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-16 03:39 - 2014-02-16 03:39 - 00000000 ____D () C:\Users\Homr\Desktop\Datev Sap

2014-02-16 02:55 - 2009-12-06 01:52 - 00000000 ____D () C:\Program Files (x86)\CCleaner

2014-02-15 16:45 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-14 14:22 - 2009-12-27 05:17 - 01605256 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-11 22:22 - 2013-07-15 20:40 - 00000000 ____D () C:\Windows\ERUNT

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-08 19:41 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 00:56 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-08 00:56 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-08 00:56 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe

2014-01-23 01:02 - 2014-01-23 01:01 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (2).exe

2014-01-22 23:43 - 2014-01-22 23:43 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64 (1).exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-22 23:29 - 2014-01-22 23:29 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-22 23:29 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-01-22 23:28 - 2014-01-22 23:26 - 30796712 _____ (Oracle Corporation) C:\Users\Homr\Downloads\jre-7u51-windows-x64.exe

2014-01-22 08:52 - 2014-01-22 08:52 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2014-01-22 08:52 - 2014-01-22 08:52 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-18 23:22
 

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber

22.02.2014 17:07

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Chandini

23.02.2014 01:40

Jetzt meldet Windows, dass mein Defender deaktiviert ist.
Als ich aktivieren wollte, kam diese Meldung:
Diese Programm wurde durch eine Gruppenrichtlinie blockiert. Weitere Informationen erhalten Sie vom Systemadministrator.(Fehlercode 0x800704ec)

Außerdem kam bei mir die Meldung, dass ich online nach Antivirusprogramm suchen soll, obwohl ich schon AntiVir habe und der Echtzeitscanner ist aktiviert.

Also ist der Registry Cleaner von CCleaner nicht optimal und schadet eher das System?

Danke für deine Tipps:)

schrauber

23.02.2014 17:07

Poste bitte nochmal ein frisches FRST log. Ccleaner kannste nutzen, aber nicht für die Registry.

Chandini

23.02.2014 17:15

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-02-2014 01

Ran by Homr (administrator) on HOME-PC on 23-02-2014 17:14:32

Running from C:\Users\Homr\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\system32\atiesrxx.exe

(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Adobe Systems Incorporated) c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

() C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

() C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe

() c:\Creative Suite CS2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Octoshape ApS) C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe

() C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Adobe Sytems Incorporated) C:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

() C:\Program Files (x86)\Vidalia Bundle\Tor\tor.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe

(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe

(BEETmobile) C:\Program Files (x86)\BEETmobile\BEETmobile.exe

(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_70_ActiveX.exe

(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.)

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-18] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [258100 2009-07-29] (ZF Electronics GmbH)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Creative Suite CS2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-12-23] (DivX, LLC)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-09-01] (RealNetworks, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-11-15] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3813712 2014-02-04] (LogMeIn Inc.)

HKU\.DEFAULT\...\RunOnce: [Ad-Watch Live!] - C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe

HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Octoshape Streaming Services] - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [70936 2009-01-08] (Octoshape ApS)

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Run: [Vidalia] - C:\Program Files (x86)\Vidalia Relay Bundle\Vidalia\vidalia.exe [6239727 2012-12-02] ()

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {21170f26-e1b9-11de-a9e4-806e6f6e6963} - F:\Autorun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a329-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe

HKU\S-1-5-21-3139214333-3526821646-799605520-1000\...\MountPoints2: {e6c2a330-4653-11e3-97fc-001fcf4024e6} - G:\AutoRun.exe
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

SearchScopes: HKCU - {42D9F59E-60EC-45C4-B848-3362870D229A} URL = hxxp://www.google.de/search?q={searchTerms}&rlz=1I7PRFA_de

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: SparweltGutscheinAlarm.Sparwelt_Gutschein_Tool - {10945114-b19f-4614-8450-b25e444a1020} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} -  No File

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: HKLM-x32 {59136DB4-6CA3-4B40-8F2F-BBF84B6F1E91} https://stream.web.de/mail/activex/mail_upload_11213.cab

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: HKLM-x32 {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

DPF: HKLM-x32 {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444552440000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Homr\AppData\Roaming\Mozilla\Firefox\Profiles\ips5ydjp.default

FF Homepage: hxxp://www.google.de/

FF SelectedSearchEngine: StartWeb

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Homr\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)

FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Homr\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Homr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\Homr\AppData\Roaming\mozilla\plugins\npoctoshape.dll (Octoshape ApS)

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-01]

FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-10-26]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Creative Suite CS2\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)

R2 BlueSoleil Hid Service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BTNtService.exe [166520 2007-12-27] ()

R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [585774 2009-05-28] (ZF Electronics GmbH)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-02-04] (LogMeIn, Inc.)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1326176 2012-06-27] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [681056 2012-06-27] (Secunia)

R2 Start BT in service; C:\Program Files (x86)\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [51816 2007-12-27] ()

R2 SystemStore; C:\Program Files (x86)\Freemium\SystemStore\Freemium.SystemStore.WindowsService.exe [14848 2012-04-24] ()

S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580648 2012-07-17] (WiseCleaner.com)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)

R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletAudio; C:\Windows\SysWOW64\DRIVERS\blueletaudio.sys [37896 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BlueletSCOAudio; C:\Windows\SysWOW64\DRIVERS\BlueletSCOAudio.sys [37384 2007-06-24] (IVT Corporation.)

R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

R3 BT; C:\Windows\SysWOW64\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

S3 Btcsrusb; C:\Windows\SysWOW64\Drivers\btcusb.sys [47368 2007-06-24] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidEnum; C:\Windows\SysWOW64\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

R0 BTHidMgr; C:\Windows\SysWOW64\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()

R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-08-12] (Lavasoft AB)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [61592 2013-12-17] (NetFilterSDK.com)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)

R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VComm; C:\Windows\SysWOW64\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

R3 VcommMgr; C:\Windows\SysWOW64\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)

S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-23 17:14 - 2014-02-23 17:14 - 00022244 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-23 17:14 - 2014-02-23 17:14 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-23 01:43 - 2014-02-23 01:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-23 01:43 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-02-23 01:18 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-23 01:18 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-23 01:18 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-23 01:18 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-23 01:18 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-23 01:18 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-23 01:18 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-23 01:18 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-23 01:18 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-23 01:18 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-23 01:18 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-23 01:18 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-23 01:18 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-23 01:18 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-23 01:18 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-23 01:18 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-23 01:18 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-23 01:18 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-23 01:18 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-23 01:18 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-23 01:18 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-23 01:18 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-23 01:18 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-23 01:18 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-23 01:18 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-23 01:18 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-23 01:18 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-23 01:18 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-23 01:18 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-23 01:18 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-23 01:18 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-23 01:18 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-23 01:18 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-23 01:18 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-23 01:18 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-23 01:18 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-23 01:18 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-23 01:18 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-23 01:18 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-23 01:18 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-02-23 01:18 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-02-23 00:56 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-02-23 00:56 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-02-23 00:48 - 2014-02-23 12:43 - 00002646 _____ () C:\Windows\PFRO.log

2014-02-23 00:48 - 2014-02-23 12:43 - 00000168 _____ () C:\Windows\setupact.log

2014-02-23 00:48 - 2014-02-23 00:48 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-21 19:24 - 2014-02-21 19:24 - 00001421 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-21 17:47 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-02-21 17:47 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-02-21 17:47 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-02-21 17:47 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-02-21 17:47 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-02-21 17:47 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-02-21 17:47 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-02-21 17:47 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-02-21 17:47 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-02-21 17:47 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-02-21 17:47 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-02-21 17:47 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-02-21 17:47 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-02-21 17:47 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-02-21 17:47 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-02-21 17:47 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-21 17:41 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-02-21 17:41 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-02-21 17:41 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-02-21 17:41 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-02-21 17:41 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-02-21 17:41 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-02-21 17:40 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-02-21 17:40 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-02-17 22:45 - 2014-02-17 22:45 - 00000000 ____D () C:\Tor Browser

2014-02-16 03:39 - 2014-02-16 03:39 - 00000000 ____D () C:\Users\Homr\Desktop\Datev Sap

2014-02-14 00:37 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls

2014-02-14 00:37 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls

2014-02-14 00:37 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-02-14 00:37 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-02-14 00:37 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-02-14 00:37 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-02-14 00:36 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-02-14 00:36 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2014-02-14 00:36 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2014-02-14 00:36 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-02-14 00:36 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2014-02-14 00:36 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-14 00:36 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-14 00:36 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-14 00:36 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-02-14 00:36 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-14 00:36 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-14 00:36 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-02-14 00:36 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-02-10 22:11 - 2014-02-23 17:14 - 02155520 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-10 22:11 - 2014-02-23 17:14 - 00000000 ____D () C:\FRST

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:33 - 2014-02-21 19:27 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 01:25 - 2014-02-23 00:48 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 20:54 - 2014-02-10 21:58 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 13:55 - 2014-02-23 12:48 - 01382198 _____ () C:\Windows\WindowsUpdate.log

2014-01-28 00:27 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-28 00:26 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-28 00:26 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
 

==================== One Month Modified Files and Folders =======
 

2014-02-23 17:15 - 2014-02-23 17:14 - 00022244 _____ () C:\Users\Homr\Desktop\FRST.txt

2014-02-23 17:14 - 2014-02-23 17:14 - 00000000 ____D () C:\Users\Homr\Desktop\FRST-OlderVersion

2014-02-23 17:14 - 2014-02-10 22:11 - 02155520 _____ (Farbar) C:\Users\Homr\Desktop\FRST64.exe

2014-02-23 17:14 - 2014-02-10 22:11 - 00000000 ____D () C:\FRST

2014-02-23 17:10 - 2011-12-24 02:06 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Tor

2014-02-23 16:40 - 2009-12-11 02:41 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Winamp

2014-02-23 14:44 - 2012-12-30 03:08 - 00000000 ____D () C:\Users\Homr\AppData\Local\LogMeIn Hamachi

2014-02-23 13:07 - 2012-10-12 00:36 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Wise Care 365

2014-02-23 13:06 - 2013-03-05 04:26 - 00000000 ____D () C:\Users\Homr\AppData\Local\Vidalia

2014-02-23 12:51 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-23 12:51 - 2009-07-14 05:45 - 00015376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-23 12:48 - 2014-01-30 13:55 - 01382198 _____ () C:\Windows\WindowsUpdate.log

2014-02-23 12:43 - 2014-02-23 00:48 - 00002646 _____ () C:\Windows\PFRO.log

2014-02-23 12:43 - 2014-02-23 00:48 - 00000168 _____ () C:\Windows\setupact.log

2014-02-23 12:43 - 2013-11-03 13:21 - 00000433 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-02-23 12:43 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-23 01:43 - 2014-02-23 01:43 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-23 01:30 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-02-23 01:21 - 2012-06-21 23:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-23 01:14 - 2012-07-22 12:45 - 00000000 ____D () C:\Program Files\Java

2014-02-23 01:02 - 2012-06-21 23:56 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-23 01:02 - 2012-06-21 23:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-23 01:02 - 2012-06-21 23:56 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-23 00:51 - 2012-07-30 23:42 - 00000000 ____D () C:\Users\Homr\AppData\Local\BEETmobile

2014-02-23 00:48 - 2014-02-23 00:48 - 00000000 _____ () C:\Windows\setuperr.log

2014-02-23 00:48 - 2014-02-09 01:25 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-02-21 19:29 - 2009-12-05 17:12 - 00000000 ____D () C:\Windows\PANTHER

2014-02-21 19:27 - 2014-02-09 01:33 - 00000085 _____ () C:\Windows\wininit.ini

2014-02-21 19:27 - 2010-12-16 02:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-02-21 19:24 - 2014-02-21 19:24 - 00001421 _____ () C:\Users\Homr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-02-21 18:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

2014-02-21 18:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-02-21 17:44 - 2014-02-21 17:44 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2014-02-21 17:44 - 2014-02-21 17:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2014-02-21 17:44 - 2014-02-21 17:44 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2014-02-21 17:44 - 2014-02-21 17:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2014-02-21 17:44 - 2014-02-21 17:44 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2014-02-21 17:44 - 2014-02-21 17:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2014-02-20 19:22 - 2010-03-18 19:15 - 00000000 ____D () C:\Users\Homr\AppData\Local\Paint.NET

2014-02-19 00:59 - 2009-12-13 16:13 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-02-17 22:45 - 2014-02-17 22:45 - 00000000 ____D () C:\Tor Browser

2014-02-17 01:23 - 2013-07-08 15:19 - 00000000 ____D () C:\Users\Homr\AppData\Local\CrashDumps

2014-02-16 15:25 - 2013-08-15 23:01 - 00000000 ____D () C:\Windows\system32\MRT

2014-02-16 15:24 - 2009-12-07 21:08 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-02-16 15:21 - 2009-07-14 18:58 - 00703802 _____ () C:\Windows\system32\perfh007.dat

2014-02-16 15:21 - 2009-07-14 18:58 - 00151442 _____ () C:\Windows\system32\perfc007.dat

2014-02-16 15:21 - 2009-07-14 06:13 - 01632144 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-16 03:39 - 2014-02-16 03:39 - 00000000 ____D () C:\Users\Homr\Desktop\Datev Sap

2014-02-16 02:55 - 2009-12-06 01:52 - 00000000 ____D () C:\Program Files (x86)\CCleaner

2014-02-15 16:45 - 2010-10-05 15:59 - 00000000 ____D () C:\Users\Homr\AppData\Local\Windows Live

2014-02-14 14:22 - 2009-12-27 05:17 - 01605256 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-02-11 22:22 - 2013-07-15 20:40 - 00000000 ____D () C:\Windows\ERUNT

2014-02-10 21:58 - 2014-02-08 20:54 - 00000000 ____D () C:\Users\Homr\Desktop\Auf SD

2014-02-10 21:33 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-09 02:08 - 2014-02-09 02:08 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\LavasoftStatistics

2014-02-09 01:47 - 2014-02-09 01:47 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-02-09 01:26 - 2014-02-09 01:26 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking

2014-02-09 00:35 - 2014-02-09 00:35 - 00000000 _____ () C:\autoexec.bat

2014-02-09 00:34 - 2014-02-09 00:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP

2014-02-09 00:34 - 2014-02-09 00:34 - 00000000 ____D () C:\Program Files\Enigma Software Group

2014-02-09 00:34 - 2013-04-27 00:23 - 00000000 ____D () C:\Users\Homr\AppData\Roaming\Skype

2014-02-08 21:35 - 2014-02-08 21:35 - 00000000 ____D () C:\Users\Homr\.android

2014-02-08 21:35 - 2009-12-05 17:20 - 00000000 ____D () C:\Users\Homr

2014-02-06 13:16 - 2014-02-23 01:18 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-02-06 12:30 - 2014-02-23 01:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-02-06 12:30 - 2014-02-23 01:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-02-06 12:12 - 2014-02-23 01:18 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-02-06 12:07 - 2014-02-23 01:18 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-02-06 12:06 - 2014-02-23 01:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-02-06 11:57 - 2014-02-23 01:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-02-06 11:56 - 2014-02-23 01:18 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-02-06 11:52 - 2014-02-23 01:18 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-02-06 11:49 - 2014-02-23 01:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-02-06 11:48 - 2014-02-23 01:18 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-02-06 11:48 - 2014-02-23 01:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-02-06 11:38 - 2014-02-23 01:18 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-02-06 11:32 - 2014-02-23 01:18 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-02-06 11:20 - 2014-02-23 01:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-02-06 11:17 - 2014-02-23 01:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-02-06 11:11 - 2014-02-23 01:18 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-02-06 11:01 - 2014-02-23 01:18 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-02-06 11:00 - 2014-02-23 01:18 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-02-06 10:57 - 2014-02-23 01:18 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-02-06 10:57 - 2014-02-23 01:18 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-02-06 10:52 - 2014-02-23 01:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-02-06 10:52 - 2014-02-23 01:18 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-02-06 10:50 - 2014-02-23 01:18 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-02-06 10:49 - 2014-02-23 01:18 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-02-06 10:47 - 2014-02-23 01:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-02-06 10:46 - 2014-02-23 01:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-02-06 10:25 - 2014-02-23 01:18 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-02-06 10:25 - 2014-02-23 01:18 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-02-06 10:24 - 2014-02-23 01:18 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-02-06 10:22 - 2014-02-23 01:18 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-02-06 10:13 - 2014-02-23 01:18 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-02-06 10:09 - 2014-02-23 01:18 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-02-06 10:03 - 2014-02-23 01:18 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-02-06 09:55 - 2014-02-23 01:18 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-02-06 09:41 - 2014-02-23 01:18 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-02-06 09:40 - 2014-02-23 01:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-02-06 09:36 - 2014-02-23 01:18 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-02-06 09:34 - 2014-02-23 01:18 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-02-06 02:25 - 2014-02-06 02:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-02-04 02:16 - 2013-07-28 14:29 - 00000000 ____D () C:\Program Files (x86)\DivX

2014-02-04 02:16 - 2010-09-05 01:52 - 00000000 ____D () C:\ProgramData\DivX

2014-02-01 02:40 - 2014-01-12 00:34 - 00000000 ____D () C:\ProgramData\CanonIJPLM

2014-01-30 15:14 - 2014-01-30 15:14 - 00001106 _____ () C:\Users\Public\Desktop\Picasa 3.lnk

2014-01-30 15:14 - 2009-12-06 01:53 - 00000000 ____D () C:\Users\Homr\AppData\Local\Google

2014-01-30 15:13 - 2009-12-06 01:53 - 00000000 ____D () C:\Program Files (x86)\Google

2014-01-30 03:05 - 2011-08-07 19:44 - 00000000 ____D () C:\Program Files (x86)\Samsung

2014-01-30 03:05 - 2009-12-05 17:57 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-01-28 00:27 - 2013-10-29 01:22 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-28 00:26 - 2014-01-28 00:26 - 00006008 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log

2014-01-28 00:26 - 2012-11-09 19:00 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-28 00:20 - 2009-12-11 03:29 - 00000000 ____D () C:\Users\Homr\AppData\Local\Adobe
 

Some content of TEMP:

====================

C:\Users\Homr\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-18 23:22
 

==================== End Of Log ============================

--- --- ---

schrauber

24.02.2014 17:03

Hm, sieht gut aus. Immer noch so meldungen?

Chandini

24.02.2014 23:53

Das Problem mit den Defender habe ich leider immer noch. Das andere mit online nach Antivirusprogramm suchen zeigt nicht mehr an.

schrauber

25.02.2014 19:55

ok.

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Chandini

25.02.2014 23:29

Leider kann ich das nicht runterladen. Da kommt eine Warnung, dass FSS.exe nicht häufig verwendet wird und dass auf dem Computer Schaden anrichten kann.

schrauber

26.02.2014 16:35

Klick auf Mehr Informationen udn dann auf Trotzdem Ausführen.

Chandini

26.02.2014 23:03

Das geht trotzdem nicht. Da ist ja diese Warnung. Ich kann das Programm nur löschen. Dann gibt es Aktionen. Da klicke ich an und da steht nur Programm nicht ausführen oder löschen.

schrauber

27.02.2014 18:31

Bitte mal nen Screenshot davon.

Alle Zeitangaben in WEZ +1. Es ist jetzt 23:12 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131