Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Google Chrome öffnet Pop-Up Fenster (Werbung) ohne das ich im Browser etwas mache (https://www.trojaner-board.de/163888-google-chrome-oeffnet-pop-up-fenster-werbung-ohne-browser-etwas-mache.html)

FlyingEagle 11.02.2015 21:55
Google Chrome öffnet Pop-Up Fenster (Werbung) ohne das ich im Browser etwas mache
 
Guten Abend,

seid einer Woche öffnen sich in Google Chrome Pop-up Fenster ohne das ich im Browser aktiv bin, oder wenn ich nach einiger Zeit im Browser auf etwas Klicke öffnet sich ein anderes Fenster mit Werbung.
Ich habe bei Chrome den AdBlock aktiv. Auch nach neu runterladen von Chrome stellte sich keine Besserung des Problems ein.

Ich hoffe mir kann jemand bei diesem Problem helfen :D

MfG,
FlyingEagle :killpc:

Edward12 11.02.2015 22:05
Hallo FlyingEagle und
:hallo:

Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst.

Ich bedanke mich für deine Geduld :)

FlyingEagle 11.02.2015 22:25
Servus,
die Geduld bringe ich gerne auf, wenn ich danach nicht mehr von dieser Werbung genervt werde nach der Arbeit :D

Und jetzt warte ich auf die Anweisungen.

Edward12 12.02.2015 10:32
Hallo FlyingEagle,
ehe wir mit der Bereinigung beginnen möchte ich dir vorher noch folgende
Hinweise geben:

Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte
    stoppen und hier so gut es geht beschreiben.
  • Nur Scanns durchführen zu denen Du von einem Helfer aufgefordert
    wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder Deinstalliere während der Bereinigung keine
    Software ausser Du wurdest dazu aufgefordert.
  • Lese Dir die Anleitung zuerst vollständig
    durch. Sollte etwas unklar sein, frage bevor Du beginnst.
  • Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser
    ich fordere Dich dazu auf. Erschwert mir nämlich das auswerten.


Hinweis: Ich kann Dir niemals eine Garantie
geben, dass ich auch alles finde. Eine Formatierung ist meist der
Schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit,
bis dir jemand vom Team sagt, dass Du clean bist.

Windows Vista, Windows 7 und
Windows 8 User
Alle Tools mit Rechtsklick "als Administrator
ausführen" starten.


Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Scan.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Verhält sich dein PC sonst noch irgendwie ungewöhnlich (hohe Auslastung, Virenfunde etc)?

FlyingEagle 12.02.2015 19:11
Hier ist die FRST.txt:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by Chaos (administrator) on CHAOS-PC on 12-02-2015 18:58:09
Running from C:\Users\Chaos\Desktop
Loaded Profiles: Chaos (Available profiles: Chaos)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(hxxp://lucky-tab.com/) C:\Program Files (x86)\LuckyTab\LuckyTab.exe
(Spotify Ltd) C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(TeamSpeak Systems GmbH) C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
(Ymir Entertainment) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Metin2\metin2client.bin
(Ymir Entertainment) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Metin2\metin2client.bin
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-12-17] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mbot_de_483] => [X]
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify] => C:\Users\Chaos\AppData\Roaming\Spotify\Spotify.exe [6737976 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify Web Helper] => C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\MountPoints2: {1e7b1d52-7644-11e4-bebd-8f82a67bff64} - E:\pushinst.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3907120464-2962894331-2469926676-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://istart.webssearches.com/web/?utm_source=b&utm_medium=exp&utm_campaign=install_ie&utm_content=ds&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&ts=1422798128&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3907120464-2962894331-2469926676-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://istart.webssearches.com/web/?utm_source=b&utm_medium=exp&utm_campaign=install_ie&utm_content=ds&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&ts=1422798128&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3907120464-2962894331-2469926676-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://istart.webssearches.com/web/?utm_source=b&utm_medium=exp&utm_campaign=install_ie&utm_content=ds&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&ts=1422798128&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3907120464-2962894331-2469926676-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?utm_source=b&utm_medium=exp&utm_campaign=install_ie&utm_content=ds&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&ts=1422798128&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3907120464-2962894331-2469926676-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://istart.webssearches.com/web/?utm_source=b&utm_medium=exp&utm_campaign=install_ie&utm_content=ds&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&ts=1422798128&type=default&q={searchTerms}
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3907120464-2962894331-2469926676-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Chaos\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF HKLM\...\Firefox\Extensions: [{5081D2D4-1637-404c-B74F-50526718257D}] - C:\Program Files\shopperz\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{5081D2D4-1637-404c-B74F-50526718257D}] - C:\Program Files\shopperz\Firefox

Chrome:
=======
CHR HomePage: Default -> hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX", "hxxp://www.google.com", "hxxp://myhome.vi-view.com/?type=hp&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hp&ts=1422798055&from=exp&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-27]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-27]
CHR Extension: (YouTube) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-27]
CHR Extension: (Google-Suche) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-27]
CHR Extension: (AdBlock) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-01]
CHR Extension: (Stylish Facebook Themes) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\haomkemhnjlojfjklokcbkjkdanghlic [2014-11-27]
CHR Extension: (Google Wallet) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-27]
CHR Extension: (Google Mail) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R1 {df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64; C:\Windows\System32\drivers\{df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64.sys [48784 2015-01-31] (StdLib)
S1 cherimoya; system32\drivers\cherimoya.sys [X]
R3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 pfnfd_1_10_0_8; system32\drivers\pfnfd_1_10_0_8.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-12 18:58 - 2015-02-12 18:58 - 00014684 _____ () C:\Users\Chaos\Desktop\FRST.txt
2015-02-12 18:58 - 2015-02-12 18:58 - 00000000 ____D () C:\FRST
2015-02-12 18:56 - 2015-02-12 18:56 - 02134016 _____ (Farbar) C:\Users\Chaos\Desktop\FRST64.exe
2015-02-12 17:46 - 2015-02-12 17:46 - 529320485 _____ () C:\Windows\MEMORY.DMP
2015-02-11 16:32 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 16:32 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 16:32 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 16:32 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-11 16:32 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-11 16:31 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 16:31 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 16:31 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 16:31 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 16:31 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 16:31 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 16:31 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 16:31 - 2015-01-12 03:33 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-11 16:31 - 2015-01-12 03:32 - 06041088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-11 16:31 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 16:31 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 16:31 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 16:31 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 16:31 - 2015-01-12 02:55 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-11 16:31 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 16:31 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 16:31 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 02:29 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 16:31 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 16:31 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 16:31 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 16:31 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 16:31 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 16:31 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 16:27 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 16:27 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 16:27 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 16:27 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 16:27 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 16:27 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 16:27 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 16:27 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 16:27 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 16:27 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 16:27 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 16:27 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 16:27 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 16:27 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 16:27 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 16:27 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 16:27 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 16:27 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 16:27 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 16:27 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 16:27 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 16:27 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 16:27 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 16:27 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 16:27 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-10 14:52 - 2015-02-12 17:46 - 00002197 _____ () C:\Windows\setupact.log
2015-02-10 14:52 - 2015-02-10 14:52 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 14:51 - 2015-02-12 15:33 - 00024800 _____ () C:\Windows\PFRO.log
2015-02-09 21:53 - 2015-02-09 21:53 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-09 21:53 - 2015-02-09 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-09 21:52 - 2015-02-12 18:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-09 21:52 - 2015-02-12 17:46 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-09 21:52 - 2015-02-09 21:52 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 21:52 - 2015-02-09 21:52 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 22:00 - 2015-02-03 22:05 - 00165592 _____ () C:\Users\Chaos\Desktop\Two Steps from Hell - Heart of Courage.mp3.sfk
2015-02-03 10:55 - 2015-02-09 21:51 - 00000000 ____D () C:\Users\Chaos\AppData\Local\CrashDumps
2015-02-02 20:20 - 2015-02-02 20:27 - 00174016 _____ () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4.sfk
2015-02-02 20:19 - 2015-02-02 20:18 - 18563197 ____N () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4
2015-02-01 17:02 - 2015-02-08 18:13 - 00000000 ____D () C:\Users\Chaos\Desktop\Abschlussfeier aus der Ausbildung
2015-02-01 16:27 - 2015-02-01 16:45 - 263830833 _____ () C:\Users\Chaos\Downloads\Fotos_Freistellungsfeier.zip
2015-02-01 16:18 - 2015-02-01 16:18 - 00000000 ____D () C:\NPE
2015-02-01 16:14 - 2015-02-01 16:26 - 00000000 ____D () C:\Users\Chaos\AppData\Local\NPE
2015-02-01 16:14 - 2015-02-01 16:14 - 03077776 ____N (Symantec Corporation) C:\Users\Chaos\Downloads\NPE.exe
2015-02-01 16:14 - 2015-02-01 16:14 - 00000000 ____D () C:\ProgramData\Norton
2015-02-01 15:54 - 2015-02-01 15:54 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-01 15:54 - 2015-02-01 15:54 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-01 15:51 - 2015-02-01 15:51 - 00000000 ____D () C:\ProgramData\1873e8000000640e
2015-02-01 15:48 - 2015-02-01 15:48 - 04188536 _____ (Piriform Ltd) C:\Users\Chaos\Downloads\ccsetup501_slim.exe
2015-02-01 15:32 - 2015-02-01 15:32 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\QuickScan
2015-02-01 15:31 - 2015-02-01 15:31 - 00003150 _____ () C:\Windows\System32\Tasks\{B03DD839-A0AA-48C8-9D0B-8E4910D1094C}
2015-02-01 15:25 - 2015-02-01 15:27 - 00273880 _____ () C:\Users\Chaos\Desktop\Five Finger Death Punch  - Cradle To The Grave.mp3.sfk
2015-02-01 15:20 - 2015-02-01 15:20 - 00001805 _____ () C:\Users\Chaos\Desktop\MovieStudioPlatinum130 - Verknüpfung.lnk
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Publish Providers
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\AMD
2015-02-01 15:13 - 2015-02-08 19:10 - 00000000 ____D () C:\Users\Chaos\Documents\Movie Studio Platinum 13.0 Projekte
2015-02-01 15:00 - 2015-02-01 15:00 - 00000000 ____D () C:\Program Files\Sony
2015-02-01 14:55 - 2015-02-01 14:57 - 484367128 _____ (Sony Creative Software Inc.) C:\Users\Chaos\Downloads\moviestudiope13.0.943_64bit.exe
2015-02-01 14:50 - 2015-02-01 14:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 02060888 _____ () C:\Users\Chaos\Downloads\winrar-x64-520d.exe
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-01 14:41 - 2015-02-01 15:30 - 00001855 _____ () C:\Windows\patsearch.bin
2015-02-01 14:41 - 2015-02-01 14:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNHKT_01009.Wdf
2015-02-01 14:40 - 2015-02-01 14:40 - 00003400 _____ () C:\Windows\System32\Tasks\LuckyTab
2015-02-01 14:40 - 2015-02-01 14:40 - 00000045 _____ () C:\user.js
2015-02-01 14:40 - 2015-02-01 14:40 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\SimpleFiles
2015-02-01 14:40 - 2015-02-01 14:40 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab
2015-02-01 14:40 - 2015-02-01 14:40 - 00000000 ____D () C:\Program Files (x86)\LuckyTab
2015-02-01 14:35 - 2015-01-31 19:25 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64.sys
2015-02-01 14:32 - 2015-02-01 14:32 - 00003140 _____ () C:\Windows\System32\Tasks\{F2EF4D33-E414-4F49-BD02-84CFF53440B0}
2015-02-01 14:31 - 2015-02-01 14:31 - 00000000 ____D () C:\Users\Chaos\Documents\PC Speed Maximizer
2015-02-01 14:27 - 2015-02-01 14:27 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-02-01 14:26 - 2015-02-01 14:40 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Gameo
2015-02-01 14:26 - 2015-02-01 14:33 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\vi-view
2015-02-01 14:26 - 2015-02-01 14:32 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Gameo
2015-02-01 14:26 - 2015-02-01 14:26 - 00003734 _____ () C:\Windows\System32\Tasks\gameo_update
2015-02-01 14:26 - 2015-02-01 14:26 - 00000171 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url
2015-02-01 14:26 - 2015-02-01 14:26 - 00000000 ___HD () C:\Users\Chaos\AppData\Roaming\GoldenGate
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Sony
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-01 14:21 - 2015-02-01 14:21 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-02-01 14:12 - 2015-02-01 15:13 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Sony
2015-02-01 14:12 - 2015-02-01 15:08 - 00000000 ____D () C:\Users\Chaos\Documents\Vegas Movie Studio HD Platinum 10.0 Projekte
2015-02-01 14:11 - 2015-02-03 22:22 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Sony
2015-01-25 14:20 - 2015-01-25 14:20 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Microsoft Games
2015-01-24 12:49 - 2015-02-12 17:46 - 00000000 ____D () C:\Windows\Minidump
2015-01-20 23:48 - 2015-01-20 23:48 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\library_dir
2015-01-20 23:47 - 2015-01-20 23:47 - 00053736 _____ () C:\Windows\SysWOW64\CCCInstall_201501202347516231.log
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\ATI
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-20 23:46 - 2015-02-11 17:17 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-20 23:46 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files\AMD
2015-01-18 20:43 - 2015-01-18 20:43 - 00003842 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421610199
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Opera Software
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Opera Software
2015-01-15 09:34 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 12:32 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 12:32 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 12:32 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 12:32 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 12:32 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-12 18:11 - 2014-11-27 16:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-12 17:59 - 2014-11-27 16:08 - 01357553 _____ () C:\Windows\WindowsUpdate.log
2015-02-12 17:53 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-12 17:53 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-12 17:51 - 2014-11-28 00:42 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2015-02-12 17:51 - 2014-11-28 00:42 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2015-02-12 17:51 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-12 17:49 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Spotify
2015-02-12 17:49 - 2014-11-27 20:13 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\TS3Client
2015-02-12 17:46 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-11 17:39 - 2014-12-11 17:17 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 17:39 - 2014-11-27 20:10 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 17:39 - 2009-07-14 05:45 - 00294640 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 17:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-11 17:16 - 2014-11-27 18:05 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-11 17:16 - 2014-11-27 18:05 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-11 17:15 - 2014-11-27 18:52 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 17:13 - 2014-11-27 18:52 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-09 21:52 - 2014-11-27 16:30 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-09 21:52 - 2014-11-27 16:29 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Deployment
2015-02-04 22:11 - 2014-11-27 16:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 22:11 - 2014-11-27 16:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 22:11 - 2014-11-27 16:17 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-03 10:55 - 2014-12-01 12:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\vlc
2015-02-02 21:01 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-02-02 14:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-01 16:03 - 2014-11-27 19:49 - 01592628 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-01 15:56 - 2014-11-28 00:43 - 00000000 ____D () C:\Windows\Panther
2015-02-01 15:44 - 2014-11-27 16:08 - 00001425 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-01 15:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-01 14:35 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\ProgramData\AMD
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-20 23:44 - 2014-11-27 16:26 - 00000000 ____D () C:\AMD
2015-01-18 01:23 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Spotify

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-05 10:18
und die Addition.txt
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-02-2015 02
Ran by Chaos at 2015-02-12 18:58:33
Running from C:\Users\Chaos\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version:  - AVM Berlin)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Metin2 (HKLM-x32\...\Metin2_is1) (Version:  - Gameforge 4D GmbH)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Movie Studio Platinum 13.0 (64-bit) (HKLM\...\{F4721C9E-74D6-11E4-9122-F04DA23A5C58}) (Version: 13.0.943 - Sony)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14123.5 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.14123.5 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14113.3 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14113.3 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Spotify (HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
TeamSpeak 3 Client (HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH)
Unity Web Player (HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\UnityWebPlayer) (Version: 4.6.0f3 - Unity Technologies ApS)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version:  - )
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

01-02-2015 14:11:28 Microsoft Visual C++ 2005 Redistributable wird installiert
01-02-2015 14:11:36 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
01-02-2015 14:19:41 Removed Vegas Movie Studio HD Platinum 10.0
01-02-2015 15:49:56 Microsoft Visual C++ 2005 Redistributable wird entfernt
01-02-2015 15:50:14 Removed Vegas Movie Studio HD Platinum 10.0
01-02-2015 15:50:31 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
01-02-2015 16:03:00 Windows Update
01-02-2015 16:20:33 Norton_Power_Eraser_20150201162032162
05-02-2015 10:11:06 Windows Update
08-02-2015 17:42:27 Windows Update
10-02-2015 22:00:04 Windows-Sicherung
11-02-2015 17:13:23 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {01282130-80D8-4314-8B86-125021AD7692} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {1B7E7293-FBEB-4171-834E-CF72DDF507B3} - System32\Tasks\{B03DD839-A0AA-48C8-9D0B-8E4910D1094C} => pcalua.exe -a C:\Users\Chaos\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=exp <==== ATTENTION
Task: {300E9ED2-FF29-4D0D-8712-5F430A1F28B4} - System32\Tasks\LuckyTab => C:\Program Files (x86)\LuckyTab\LuckyTab.exe [2015-02-01] (hxxp://lucky-tab.com/) <==== ATTENTION
Task: {4A21E8E7-A2FA-40F4-8B12-7205FEB8B00D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)
Task: {8EFEFE10-F60E-44E4-BAA2-518936907590} - System32\Tasks\Opera scheduled Autoupdate 1421610199 => C:\Program Files (x86)\Opera\launcher.exe
Task: {9211DDA7-99A0-43B5-8D6D-6FD45C5D2669} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-09] (Google Inc.)
Task: {97E8A5D0-C0B7-4269-B2F9-292F91975D5A} - System32\Tasks\{F2EF4D33-E414-4F49-BD02-84CFF53440B0} => pcalua.exe -a C:\Users\Chaos\AppData\Roaming\vi-view\UninstallManager.exe -c  -ptid=cor
Task: {E5CFE11A-6EA6-48E4-8BCE-62B39E74F981} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-09] (Google Inc.)
Task: {F9659A7C-FEED-4617-B341-07B385CB5B1D} - System32\Tasks\gameo_update => C:\Users\Chaos\AppData\Roaming\Gameo\gameo.exe [2015-01-18] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-12-12 23:24 - 2014-12-12 23:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-02-28 10:14 - 2014-02-28 10:14 - 00173568 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\quazip.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 01080832 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00833024 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-08-04 14:43 - 2014-08-04 14:43 - 00102344 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 14:43 - 2014-08-04 14:43 - 00108488 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00030208 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00233984 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-08-04 14:46 - 2014-08-04 14:46 - 00563656 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 14:46 - 2014-08-04 14:46 - 00579016 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 15:51 - 2014-02-27 15:51 - 00159232 _____ () C:\Users\Chaos\AppData\Local\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2015-02-09 21:53 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll
2015-02-09 21:53 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll
2015-02-09 21:53 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll
2015-02-09 21:53 - 2015-02-04 10:02 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1 - 192.168.0.2

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-3907120464-2962894331-2469926676-500 - Administrator - Disabled)
Chaos (S-1-5-21-3907120464-2962894331-2469926676-1000 - Administrator - Enabled) => C:\Users\Chaos
Gast (S-1-5-21-3907120464-2962894331-2469926676-501 - Limited - Disabled)

==================== Faulty Device Manager Devices =============

Name: cherimoya
Description: cherimoya
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: cherimoya
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: pfnfd_1_10_0_8
Description: pfnfd_1_10_0_8
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: pfnfd_1_10_0_8
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/12/2015 05:48:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2015 03:47:05 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/12/2015 03:35:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2015 05:41:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2015 04:24:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 02:53:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2015 04:16:36 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (02/09/2015 03:54:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2015 05:32:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2015 10:10:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (02/12/2015 05:46:13 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cherimoya
pfnfd_1_10_0_8

Error: (02/12/2015 05:46:12 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000116 (0xfffffa800693c010, 0xfffff88003b16848, 0x0000000000000000, 0x0000000000000002)C:\Windows\MEMORY.DMP

Error: (02/12/2015 05:46:12 PM) (Source: BugCheck) (EventID: 1005) (User: )
Description:

Error: (02/12/2015 05:46:11 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎12.‎02.‎2015 um 17:44:44 unerwartet heruntergefahren.

Error: (02/12/2015 03:43:52 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (02/12/2015 03:43:51 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (02/12/2015 03:33:50 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cherimoya
pfnfd_1_10_0_8

Error: (02/11/2015 05:49:48 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (02/11/2015 05:49:46 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (02/11/2015 05:39:45 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cherimoya
pfnfd_1_10_0_8


Microsoft Office Sessions:
=========================
Error: (02/12/2015 05:48:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2015 03:47:05 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files\ccleaner\CCleaner.exe

Error: (02/12/2015 03:35:40 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2015 05:41:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/11/2015 04:24:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 02:53:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/09/2015 04:16:36 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files\CCleaner\CCleaner.exe

Error: (02/09/2015 03:54:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/08/2015 05:32:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/07/2015 10:10:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
Percentage of memory in use: 34%
Total physical RAM: 8155.71 MB
Available physical RAM: 5302.25 MB
Total Pagefile: 16309.6 MB
Available Pagefile: 12908.29 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:223.47 GB) (Free:131.98 GB) NTFS
Drive d: (UNTITLED) (CDROM) (Total:0.14 GB) (Free:0 GB) UDF
Drive x: (Volume) (Fixed) (Total:931.51 GB) (Free:663.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: D5DCFB0D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A521DBB8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---


Mein PC läuft ansonsten stabil ohne hohe Auslastung.
Als Virenprogramm habe ich Microsoft Security Essential und das zeigt mir derzeit keine Bedrohungen an.

Edward12 13.02.2015 10:41
Du hast einiges an Adware aufgesammelt daher die vielen Werbeeinblendungen. Es ist aber nichts was wir nicht wieder hinkriegen sollten :)

Bitte nacheinander u. g. Programme ausführen:


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




Nachdem alle Tools ausgeführt wurden, bitte noch ein neues FRST-Log erstellen und mit allen anderen Logs hier Posten.

FlyingEagle 13.02.2015 16:47
Alles ausgeführt:

FRST-Log:


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by Chaos (administrator) on CHAOS-PC on 13-02-2015 16:44:03
Running from C:\Users\Chaos\Desktop
Loaded Profiles: Chaos (Available profiles: Chaos)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Spotify Ltd) C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-12-17] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify] => C:\Users\Chaos\AppData\Roaming\Spotify\Spotify.exe [6737976 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify Web Helper] => C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\MountPoints2: {1e7b1d52-7644-11e4-bebd-8f82a67bff64} - E:\pushinst.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3907120464-2962894331-2469926676-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Chaos\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX", "hxxp://www.google.com", "hxxp://myhome.vi-view.com/?type=hp&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hp&ts=1422798055&from=exp&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-27]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-27]
CHR Extension: (YouTube) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-27]
CHR Extension: (Google-Suche) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-27]
CHR Extension: (AdBlock) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-01]
CHR Extension: (Stylish Facebook Themes) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\haomkemhnjlojfjklokcbkjkdanghlic [2014-11-27]
CHR Extension: (Google Wallet) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-27]
CHR Extension: (Google Mail) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 16:43 - 2015-02-13 16:43 - 00000625 _____ () C:\Users\Chaos\Desktop\JRT.txt
2015-02-13 16:41 - 2015-02-13 16:41 - 01388274 _____ (Thisisu) C:\Users\Chaos\Desktop\JRT.exe
2015-02-13 16:36 - 2015-02-13 16:38 - 00000000 ____D () C:\AdwCleaner
2015-02-13 16:36 - 2015-02-13 16:36 - 02112512 _____ () C:\Users\Chaos\Desktop\AdwCleaner_4.110.exe
2015-02-13 16:32 - 2015-02-13 16:32 - 00042446 _____ () C:\Users\Chaos\Desktop\mbam.txt
2015-02-13 15:52 - 2015-02-13 15:52 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-13 15:52 - 2015-02-13 15:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-13 15:51 - 2015-02-13 15:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Chaos\Desktop\mbam-setup-2.0.4.1028.exe
2015-02-12 18:58 - 2015-02-13 16:44 - 00009838 _____ () C:\Users\Chaos\Desktop\FRST.txt
2015-02-12 18:58 - 2015-02-13 16:44 - 00000000 ____D () C:\FRST
2015-02-12 18:58 - 2015-02-12 18:58 - 00024920 _____ () C:\Users\Chaos\Desktop\Addition.txt
2015-02-12 18:56 - 2015-02-12 18:56 - 02134016 _____ (Farbar) C:\Users\Chaos\Desktop\FRST64.exe
2015-02-12 17:46 - 2015-02-12 17:46 - 529320485 _____ () C:\Windows\MEMORY.DMP
2015-02-12 15:38 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 15:38 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 16:32 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 16:32 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 16:32 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-11 16:32 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-11 16:31 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 16:31 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 16:31 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 16:31 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 16:31 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 16:31 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 16:31 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 16:31 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 16:31 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 16:31 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 16:31 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 16:31 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 16:31 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 16:31 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 16:31 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 16:31 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 16:31 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 16:31 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 16:31 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 16:27 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 16:27 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 16:27 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 16:27 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 16:27 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 16:27 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 16:27 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 16:27 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 16:27 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 16:27 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 16:27 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 16:27 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 16:27 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 16:27 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 16:27 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 16:27 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 16:27 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 16:27 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 16:27 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 16:27 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 16:27 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 16:27 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 16:27 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 16:27 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 16:27 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-10 14:52 - 2015-02-13 16:38 - 00002365 _____ () C:\Windows\setupact.log
2015-02-10 14:52 - 2015-02-10 14:52 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 14:51 - 2015-02-13 16:38 - 00091994 _____ () C:\Windows\PFRO.log
2015-02-09 21:53 - 2015-02-09 21:53 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-09 21:53 - 2015-02-09 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-09 21:52 - 2015-02-13 16:38 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-09 21:52 - 2015-02-13 15:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-09 21:52 - 2015-02-09 21:52 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 21:52 - 2015-02-09 21:52 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 22:00 - 2015-02-03 22:05 - 00165592 _____ () C:\Users\Chaos\Desktop\Two Steps from Hell - Heart of Courage.mp3.sfk
2015-02-03 10:55 - 2015-02-09 21:51 - 00000000 ____D () C:\Users\Chaos\AppData\Local\CrashDumps
2015-02-02 20:20 - 2015-02-02 20:27 - 00174016 _____ () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4.sfk
2015-02-02 20:19 - 2015-02-02 20:18 - 18563197 ____N () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4
2015-02-01 17:02 - 2015-02-08 18:13 - 00000000 ____D () C:\Users\Chaos\Desktop\Abschlussfeier aus der Ausbildung
2015-02-01 16:27 - 2015-02-01 16:45 - 263830833 _____ () C:\Users\Chaos\Downloads\Fotos_Freistellungsfeier.zip
2015-02-01 16:18 - 2015-02-01 16:18 - 00000000 ____D () C:\NPE
2015-02-01 16:14 - 2015-02-01 16:26 - 00000000 ____D () C:\Users\Chaos\AppData\Local\NPE
2015-02-01 16:14 - 2015-02-01 16:14 - 03077776 ____N (Symantec Corporation) C:\Users\Chaos\Downloads\NPE.exe
2015-02-01 16:14 - 2015-02-01 16:14 - 00000000 ____D () C:\ProgramData\Norton
2015-02-01 15:54 - 2015-02-01 15:54 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-01 15:54 - 2015-02-01 15:54 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-01 15:48 - 2015-02-01 15:48 - 04188536 _____ (Piriform Ltd) C:\Users\Chaos\Downloads\ccsetup501_slim.exe
2015-02-01 15:32 - 2015-02-01 15:32 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\QuickScan
2015-02-01 15:31 - 2015-02-01 15:31 - 00003150 _____ () C:\Windows\System32\Tasks\{B03DD839-A0AA-48C8-9D0B-8E4910D1094C}
2015-02-01 15:25 - 2015-02-01 15:27 - 00273880 _____ () C:\Users\Chaos\Desktop\Five Finger Death Punch  - Cradle To The Grave.mp3.sfk
2015-02-01 15:20 - 2015-02-01 15:20 - 00001805 _____ () C:\Users\Chaos\Desktop\MovieStudioPlatinum130 - Verknüpfung.lnk
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Publish Providers
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\AMD
2015-02-01 15:13 - 2015-02-12 20:54 - 00000000 ____D () C:\Users\Chaos\Documents\Movie Studio Platinum 13.0 Projekte
2015-02-01 15:00 - 2015-02-01 15:00 - 00000000 ____D () C:\Program Files\Sony
2015-02-01 14:55 - 2015-02-01 14:57 - 484367128 _____ (Sony Creative Software Inc.) C:\Users\Chaos\Downloads\moviestudiope13.0.943_64bit.exe
2015-02-01 14:50 - 2015-02-01 14:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 02060888 _____ () C:\Users\Chaos\Downloads\winrar-x64-520d.exe
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-01 14:40 - 2015-02-01 14:40 - 00000045 _____ () C:\user.js
2015-02-01 14:32 - 2015-02-01 14:32 - 00003140 _____ () C:\Windows\System32\Tasks\{F2EF4D33-E414-4F49-BD02-84CFF53440B0}
2015-02-01 14:26 - 2015-02-01 14:26 - 00000171 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url
2015-02-01 14:26 - 2015-02-01 14:26 - 00000000 ___HD () C:\Users\Chaos\AppData\Roaming\GoldenGate
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Sony
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-01 14:21 - 2015-02-01 14:21 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-02-01 14:12 - 2015-02-01 15:13 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Sony
2015-02-01 14:12 - 2015-02-01 15:08 - 00000000 ____D () C:\Users\Chaos\Documents\Vegas Movie Studio HD Platinum 10.0 Projekte
2015-02-01 14:11 - 2015-02-03 22:22 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Sony
2015-01-25 14:20 - 2015-01-25 14:20 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Microsoft Games
2015-01-24 12:49 - 2015-02-13 16:32 - 00000000 ____D () C:\Windows\Minidump
2015-01-20 23:48 - 2015-01-20 23:48 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\library_dir
2015-01-20 23:47 - 2015-01-20 23:47 - 00053736 _____ () C:\Windows\SysWOW64\CCCInstall_201501202347516231.log
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\ATI
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-20 23:46 - 2015-02-11 17:17 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-20 23:46 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files\AMD
2015-01-18 20:43 - 2015-01-18 20:43 - 00003842 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421610199
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Opera Software
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Opera Software
2015-01-15 09:34 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 12:32 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 12:32 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 12:32 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 12:32 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 12:32 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 16:43 - 2014-11-28 00:42 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2015-02-13 16:43 - 2014-11-28 00:42 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2015-02-13 16:43 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-13 16:39 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Spotify
2015-02-13 16:39 - 2014-12-06 11:28 - 00005609 _____ () C:\Users\Chaos\Desktop\AdwCleaner.txt
2015-02-13 16:38 - 2014-11-27 16:08 - 01404768 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 16:38 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 16:38 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-13 16:38 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-13 16:11 - 2014-11-27 16:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-12 22:08 - 2014-11-27 20:13 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\TS3Client
2015-02-11 17:39 - 2014-12-11 17:17 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 17:39 - 2014-11-27 20:10 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 17:39 - 2009-07-14 05:45 - 00294640 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 17:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-11 17:16 - 2014-11-27 18:05 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-11 17:16 - 2014-11-27 18:05 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-11 17:15 - 2014-11-27 18:52 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 17:13 - 2014-11-27 18:52 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-09 21:52 - 2014-11-27 16:30 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-09 21:52 - 2014-11-27 16:29 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Deployment
2015-02-04 22:11 - 2014-11-27 16:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 22:11 - 2014-11-27 16:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 22:11 - 2014-11-27 16:17 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-03 10:55 - 2014-12-01 12:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\vlc
2015-02-02 21:01 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-02-02 14:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-01 16:03 - 2014-11-27 19:49 - 01592628 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-01 15:56 - 2014-11-28 00:43 - 00000000 ____D () C:\Windows\Panther
2015-02-01 15:44 - 2014-11-27 16:08 - 00001425 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-01 15:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-01 14:35 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\ProgramData\AMD
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-20 23:44 - 2014-11-27 16:26 - 00000000 ____D () C:\AMD
2015-01-18 01:23 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Spotify

Some content of TEMP:
====================
C:\Users\Chaos\AppData\Local\Temp\Quarantine.exe
C:\Users\Chaos\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-05 10:18

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---


AdwCleaner:

Code:
# AdwCleaner v4.110 - Bericht erstellt 13/02/2015 um 16:38:13
# Aktualisiert 05/02/2015 von Xplode
# Datenbank : 2015-02-13.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Chaos - CHAOS-PC
# Gestarted von : C:\Users\Chaos\Desktop\AdwCleaner_4.110.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\1873e8000000640e
Ordner Gelöscht : C:\Users\Chaos\AppData\Roaming\Gameo
Ordner Gelöscht : C:\Users\Chaos\AppData\Roaming\SimpleFiles
Ordner Gelöscht : C:\Users\Chaos\Documents\PC Speed Maximizer

***** [ Geplante Tasks ] *****

Task Gelöscht : LuckyTab
Task Gelöscht : gameo_update

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iLivid.torrent
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Schlüssel Gelöscht : HKCU\Software\Bitberry Software
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\SimpleFiles
Schlüssel Gelöscht : HKCU\Software\gameo
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\SOFTWARE\SimpleFiles
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\Tutorials
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17631

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]

-\\ Google Chrome v40.0.2214.111

[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.sweet-page.com/web/?type=ds&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX&q={searchTerms}
[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}
[C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}

-\\ Opera v0.0.0.0
JRT:

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 7 Home Premium x64
Ran by Chaos on 13.02.2015 at 16:41:59,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.02.2015 at 16:43:22,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
mbam:

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 13.02.2015
Suchlauf-Zeit: 16:27:46
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.02.13.04
Rootkit Datenbank: v2015.02.03.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Chaos

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 322589
Verstrichene Zeit: 3 Min, 47 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\LuckyTab\LuckyTab.exe, 2968, , [5b9d4bd28802f640ea93995ab3522ed2]

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 28
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.SupTab.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.SupTab.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [55a3ca53f7930c2a42fe13f77192b64a],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64, , [728687962a600234e501ac0155aeb050],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [81778c91d2b8142215252cccc1436d93],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, , [8c6c5cc1286290a678cd850d32d18977],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\LuckyTab, , [65937aa38ffb77bf125520f50afb6997],
PUP.Optional.MBot.A, HKLM\SOFTWARE\WOW6432NODE\MYBESTOFFERSTODAY, , [c03838e5becc340295e13b6e996a0cf4],
PUP.Optional.PhraseFinder.A, HKLM\SOFTWARE\WOW6432NODE\PhraseFinder_1.10.0.8, , [01f746d79ded0b2bb173fd91649f9967],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [d4248e8f27638fa796deb755a0651ae6],
PUP.Optional.ViView.A, HKLM\SOFTWARE\WOW6432NODE\vi-viewSoftware, , [5d9bf62796f4d75f5c9bf79cee157d83],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, , [995f1c011575b383e0a13d8d8b7820e0],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [30c8bc61fc8e68ce5edcb048ad575fa1],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, , [e11768b5dfaba09680846c47b74ca957],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [01f7b06d107a5cda050a693f0cf7c040],
PUP.Optional.cherimoya.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\cherimoya, , [e018ca539cee38fea2e9fc94c14238c8],
PUP.Optional.PhraseFinder.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pfnfd_1_10_0_8, , [10e836e70f7b2f074cd6a4ea51b2e11f],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [0eea9984424868ceda6bb6e7946ff30d],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, , [9167a27bcbbfef47d294818e58ad37c9],
PUP.Optional.BlockAndSurf.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\BlockAndSurf, , [9662a776a9e147ef1dfa961724df52ae],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [ef09a479d3b7979f497b874fee155ea2],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [e216c6570882c571307f5b9124e0f20e],
PUP.Optional.Qone8, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [f206b9645832af87ff3ab345e91b649c],

Registrierungswerte: 5
PUP.Optional.Shopperz.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{5081D2D4-1637-404c-B74F-50526718257D}, C:\Program Files\shopperz\Firefox, , [50a88f8e0f7b75c19936d4bf778ca65a]
PUP.Optional.MBot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|mbot_de_483, , [c335dc416129a69012639910ba49c23e],
PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{5081D2D4-1637-404c-B74F-50526718257D}, C:\Program Files\shopperz\Firefox, , [16e253caacded85e5976a4efc43f53ad]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, cor, , [01f7b06d107a5cda050a693f0cf7c040]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0R1F2W1N1D1S0C1F1I1R, , [e216c6570882c571307f5b9124e0f20e]

Registrierungsdaten: 12
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}),,[c8302af3a7e31f17541dcee6788dec14]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997),,[9464e439404afc3ac3added60ef75ca4]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997),,[7286d54866245adcd89aa70dc04556aa]
PUP.Optional.WebsSearches, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}),,[e216918c2d5d979f2ebcfab7fb0a37c9]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[a157160766240c2a1f2fd9e584813ac6]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}),,[b3457aa36228ee48fc75cee6c045669a]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997),,[42b6ee2f5337af87c5abbcf8778e6e92]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997),,[47b195888307102698da951f679e9c64]
PUP.Optional.WebsSearches, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}),,[718738e5becc9e986387575a6d989a66]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[61974ad3c2c8d3630747b707b94cdc24]
PUP.Optional.WebsSearches, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}),,[3dbba27b236704326685931ea4610df3]
PUP.Optional.WebsSearches.A, HKU\S-1-5-21-3907120464-2962894331-2469926676-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=dspp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997&q={searchTerms}),,[6098b9647e0cd36302ea7938aa5b37c9]

Ordner: 16
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\index-dir, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\databases, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\GPUCache, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\IndexedDB, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Local Storage, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.WebsSearches.A, C:\Users\Chaos\AppData\Roaming\webssearches, , [63959489f991bc7a863833264cb732ce],
PUP.Optional.WebsSearches.A, C:\Users\Chaos\AppData\Roaming\webssearches\log, , [63959489f991bc7a863833264cb732ce],
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\LuckyTab, , [1eda07162e5c5dd925fa2a579f643fc1],
PUP.Optional.LuckyTab.A, C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab, , [3ebae5384c3ed5614ac4a8da2fd49f61],
PUP.Optional.ViView.A, C:\Users\Chaos\AppData\Roaming\vi-view, , [46b257c61872e74f3df9bec85fa45aa6],
PUP.Optional.ViView.A, C:\Users\Chaos\AppData\Roaming\vi-view\log, , [46b257c61872e74f3df9bec85fa45aa6],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [3fb933ea92f8c07673a5e7a04db64db3],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [3fb933ea92f8c07673a5e7a04db64db3],

Dateien: 241
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\LuckyTab\LuckyTab.exe, , [5b9d4bd28802f640ea93995ab3522ed2],
PUP.Optional.Patsearch.A, C:\Windows\patsearch.bin, , [09ef56c75d2da492ea884a4636cd5fa1],
PUP.Optional.WebInstr.A, C:\Windows\System32\drivers\Msft_Kernel_webinstrNHKT_01009.Wdf, , [7b7d3de0632768ce5a40ccc590737a86],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64.sys, , [728687962a600234e501ac0155aeb050],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\QuotaManager-journal, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\cookies, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\cookies-journal, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\QuotaManager, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Web Data, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Web Data-journal, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\website.ico, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\0318f5facf88fdc7_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\037e0fc548e24fa0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\046d446f1ec215e9_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\0497acb6f2d9e3a1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\0583de904afa0998_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\07464c0edcbd4914_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\082a3bda0fc07ed1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\0cede62fda79ce83_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\0d932de50ee4830e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\0f39e8e95c157b91_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1041015f9233625e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7e7564d3256bb666_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7e7e062474d04fdc_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7eecb3c3d338d822_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7f96617b47350c0e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\80902c0666a0dc37_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\811ebb5d8b6e4f59_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\83de7a6a6bb9dbe1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\841ad6f36f6ce94f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\84421d18c241be32_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\84a81dc9ccb122b0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\854ccd03c0da2ce1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\8560fad321e7a68a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\8a2abd4eed83e9d6_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\8a65f1a44fcdbf15_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\8e2b7ae754f55bb1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\90ae4ec2dbb0196a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\94615c9a6099d7d2_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\db13d0ef4e13bebc_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\db7a5ca83ed8cf96_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\dd2b26197bd067e5_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\de3ec9ddc2b44a14_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e05069db983682ba_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e0ea107913adae0a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e21b078bc43b1dd0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e2d2ab69851d3385_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e5799b872b3627cb_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\342b17e7321f58a0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\363b727b9e106804_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\36a939fb2af3c946_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\378fad86cbadebaa_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\38628010c0fdbeaf_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\3ae4a765fdc802d5_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\3aea68aae2c43b83_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\3bca633146a10082_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\3f44ef4184540b3b_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\3f8aff4e7360a5a1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\4112d6d96874729b_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\4192a20d93c859f3_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c1aad3e247c8b661_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c2430e166f099803_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c4012c386409799f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c42158dcde803780_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c63d8bbef1db0b75_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c7664ac15d87ec8a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c8202c1d54439562_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c850463407472a22_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c89f38f36e14b01c_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c92674b77dd9f578_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c97e1c023a3691fd_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5d637941bc60a57d_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5e3037f02b1df4fb_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5e30c87efd056e92_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5ed920938b16b38d_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\633ed391d1e267b6_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\64586a2a3943a62b_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\646e5edac5982999_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\66e8f33bf747677e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\67b8233399ef3c0a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\69077fe8690b8ab2_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\69b09e5764379532_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\da753152fd03d751_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e79f097507df98b7_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ec765a9a141ea97a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\f77432149b8808bd_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1ef99e4a6d6978d8_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\20d08ebe23d790a4_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\22889ee3c4440867_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2385d6bca304945e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2395b1b270e38291_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\257b3aca0a04aa87_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\272e096687951257_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2787c2d0e0d594d2_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2790e72d2c55a064_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2808bf21658ea820_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\28a57d8d64216190_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\29019e64f1c64105_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ecfb11388b7aa485_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ee368c55bdf4deb0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\eeded3fb0ea4e232_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ef15f0cff551357c_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\f0a7ffd9299ee15f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\f1c9fea3090a638c_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\f2cf7f751346e7fe_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\f3418edc49e42b97_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\f60e0e8cbd4b3f28_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\94c6c8336ea0cea4_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\94f648b2cd20364f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\97feb3751d73aca6_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\9870f9f1fcac4158_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\9873f2673c3d8526_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\991fb917b1b36a80_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\9c3fde340c97823d_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\9f83b183fc917111_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a0a19aa71b61e1e7_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a1d1dfca292f8552_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a1e24eeb9746ff5a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a263d12bdefc1042_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a67a7318862561a7_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a682a844981d4e40_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a71585516c44740f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a91ae8724de1eb0e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\436a9161544a3066_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\44a9a6960cdb7630_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\45dd9072392168a0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\47cff2ba15008159_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\47f935214443bc31_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\4d1512da79b58e27_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\4e4bff99d47b434e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\4edf30de429dcfbe_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\4fc1d6c2f5c967dd_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c9cb8acd634baecc_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\cb8247808048cf9e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\cb83286a7f819410_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\cc9af08102830f10_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\d0366b73f7b2ed1e_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\d071ed00600f048f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\d1b1f81e540caa49_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\d71ebf43ce50c9a1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\d764e5ddca7868e9_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\d9a56f39095d6987_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\6a938d1cb41cf0b4_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\6d14bf08f42aaa70_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\6ef06d1e2f888e7c_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\6f8ba04f8c351cc4_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\70b7b3fb919ae398_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\74c26861be5b91fe_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7524ac7e1e158775_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\76dddbb58cb7031b_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7785da8077bdabc4_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7825f56dac8a7b86_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7a932dd1eca99ad2_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7b089576007b1a2d_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7ba20378b78b6abc_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\7c68b76f6abc17cc_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\29446abecf0ded5b_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2a64484b9ce8dfd1_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2cb9771dbd6e9ca3_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2e2023b6af83f38b_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2ea879434b8670b8_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\2f202314122f1979_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\315a39b606bc4359_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\324be0cc7dcb3e93_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\327e2f346370c855_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\a9ed86e03716328d_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\aa8bbc37287750f0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\aaeefa4ab6eecc50_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ad6be9b6a8385bdf_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ae23160810f66168_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\afa9294d84295e3f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\b32de173c326c9c0_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\b623ba0620cef8c9_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\be9515bfe50f0a06_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\be9b923e978ce1cc_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c018febc0564a205_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\c0617435c761f03a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1060e0af5d434705_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\112cbbdaf998834d_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\143cc5fd46615bfe_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\16c7515e175faf2f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\19d73c80b04f2ba9_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1a2304cd08ef4d26_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1c8b9c6fb09b945f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1ced1fd94af05101_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1db2d19ba02a933a_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1de640883f7c1b93_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1e503f512c070f72_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\1edf8115c5dbf9e3_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5131ae1c6fa47598_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\51cd78d7aa1b771f_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\52759a4237a4f471_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\53c5a100cb05882c_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\55c143eb1607a904_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5932b8618ffa0565_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5940b736145dba34_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\59f8199c46c0ac72_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5aaca692952efec2_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\5cc87711088fc9ad_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e869739d2a5304a4_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e8775addd4e30327_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e8f87a1048dc57b8_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\e9321d018fe18130_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ea3f7af40099d544_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ea9d8e099ea1492b_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\eb2b0de35b16fce9_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\eb6c84d93c82f411_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\ebfe44b75c2ac730_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\f7a72a7b132e4405_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\fab163e780f55bd3_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\fb35cf784be698c4_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\fb9c6a9c9dd995ae_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\fbcb411b453464e5_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\fd07de0d3bcf7f69_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\fd53f2e36cc2a588_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\fe1c69c3366ae015_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\index, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Cache\index-dir\the-real-index, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\databases\Databases.db, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\databases\Databases.db-journal, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\GPUCache\data_0, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\GPUCache\data_1, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\GPUCache\data_2, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\GPUCache\data_3, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\GPUCache\index, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\000003.log, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\CURRENT, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\LOCK, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\LOG, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\IndexedDB\file__0.indexeddb.leveldb\MANIFEST-000002, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Local Storage\file__0.localstorage, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.Gameo.A, C:\Users\Chaos\AppData\Local\Gameo\Local Storage\file__0.localstorage-journal, , [b14778a5cac0a88e75a9d1372ed7c33d],
PUP.Optional.LuckyTab.A, C:\Windows\System32\Tasks\LuckyTab, , [27d1e835d3b7cb6b2f373bda59aca55b],
PUP.Optional.WebsSearches.A, C:\Users\Chaos\AppData\Roaming\webssearches\UninstallManager.exe, , [63959489f991bc7a863833264cb732ce],
PUP.Optional.WebsSearches.A, C:\Users\Chaos\AppData\Roaming\webssearches\log\UninstallManager_2015-02-01[15-43-49-597].log, , [63959489f991bc7a863833264cb732ce],
PUP.Optional.LuckyTab.A, C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab\Get Lucky.lnk, , [3ebae5384c3ed5614ac4a8da2fd49f61],
PUP.Optional.LuckyTab.A, C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab\Help.lnk, , [3ebae5384c3ed5614ac4a8da2fd49f61],
PUP.Optional.LuckyTab.A, C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab\Uninstall.lnk, , [3ebae5384c3ed5614ac4a8da2fd49f61],
PUP.Optional.ViView.A, C:\Users\Chaos\AppData\Roaming\vi-view\UninstallManager.exe, , [46b257c61872e74f3df9bec85fa45aa6],
PUP.Optional.ViView.A, C:\Users\Chaos\AppData\Roaming\vi-view\log\UninstallManager_2015-02-01[14-32-45-795].log, , [46b257c61872e74f3df9bec85fa45aa6],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, , [3fb933ea92f8c07673a5e7a04db64db3],

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

Edward12 14.02.2015 08:36
Wir haben schon einiges an unerwünschten Einträgen erwischt, müssten aber noch ein wenig nachbessern :)

1. Schritt:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
CHR HomePage: Default -> hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX", "hxxp://www.google.com", "hxxp://myhome.vi-view.com/?type=hp&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hp&ts=1422798055&from=exp&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997"
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


2. Schritt:

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


3. Schritt:
Bitte ein neues FRST-Log erstellen und zusammen mit anderen Logs hier posten.

FlyingEagle 14.02.2015 11:02
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-02-2015 02
Ran by Chaos at 2015-02-14 10:06:24 Run:1
Running from C:\Users\Chaos\Desktop
Loaded Profiles: Chaos (Available profiles: Chaos)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR HomePage: Default -> hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX", "hxxp://www.google.com", "hxxp://myhome.vi-view.com/?type=hp&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hp&ts=1422798055&from=exp&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997"
EmptyTemp:
*****************

Chrome HomePage deleted successfully.
Chrome StartupUrls deleted successfully.
EmptyTemp: => Removed 483.5 MB temporary data.


The system needed a reboot.

==== End of Fixlog 10:06:26 ====
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=7d1a8ccc48187540861dc7583dc23ee5
# engine=22470
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-02-14 09:17:01
# local_time=2015-02-14 10:17:01 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 237653 46885815 0 0
# scanned=18771
# found=0
# cleaned=0
# scan_time=120
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=7d1a8ccc48187540861dc7583dc23ee5
# engine=22470
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-02-14 09:46:58
# local_time=2015-02-14 10:46:58 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 239450 46887612 0 0
# scanned=149882
# found=8
# cleaned=0
# scan_time=1728
sh=7F4293FDDDC32BB6B0AF49305EFCD26FD4A277E9 ft=0 fh=0000000000000000 vn="Variante von Win32/Keygen.HU potenziell unsichere Anwendung" ac=I fn="C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000"
sh=26BDFBA6B234818997F7A67ED4F1FE292EC61F4D ft=1 fh=097714b5db23cab1 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Chaos\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
sh=A4FD61B51CB55934073A2EDB7221A7C3AE2EC7DD ft=1 fh=b0d1c5a0b0dd9711 vn="Variante von Win32/Adware.CiDHelp Anwendung" ac=I fn="X:\Alt PC\Music\Music\Music2\ASYLUM\MsgPlusLive-4.83.380.exe"
sh=F5CBE6BF3D27388A92FEECC74BE257DC29C5B56B ft=0 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="X:\CHAOS-PC\Backup Set 2014-11-27 183612\Backup Files 2014-12-11 172736\Backup files 6.zip"
sh=A8B667F47BCD33CC915BA1BD5EBB2ADE61C54C6B ft=0 fh=0000000000000000 vn="Variante von Win32/Keygen.HU potenziell unsichere Anwendung" ac=I fn="X:\CHAOS-PC\Backup Set 2014-11-27 183612\Backup Files 2015-02-10 220001\Backup files 2.zip"
sh=BD029FAFF00BA72A991B9432888E8900CABF51F0 ft=0 fh=0000000000000000 vn="Variante von Win32/Keygen.HU potenziell unsichere Anwendung" ac=I fn="X:\CHAOS-PC\Backup Set 2014-11-27 183612\Backup Files 2015-02-10 220001\Backup files 32.zip"
sh=5AF5A9D095494D616B1109449B70FCE4E072272D ft=0 fh=0000000000000000 vn="Variante von Win32/Keygen.HU potenziell unsichere Anwendung" ac=I fn="X:\CHAOS-PC\Backup Set 2014-11-27 183612\Backup Files 2015-02-10 220001\Backup files 44.zip"
sh=A4FD61B51CB55934073A2EDB7221A7C3AE2EC7DD ft=1 fh=b0d1c5a0b0dd9711 vn="Variante von Win32/Adware.CiDHelp Anwendung" ac=I fn="X:\Desktop\Music\Music\Music2\ASYLUM\MsgPlusLive-4.83.380.exe"

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by Chaos (administrator) on CHAOS-PC on 14-02-2015 10:57:44
Running from C:\Users\Chaos\Desktop
Loaded Profiles: Chaos (Available profiles: Chaos)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Spotify Ltd) C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-12-17] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify] => C:\Users\Chaos\AppData\Roaming\Spotify\Spotify.exe [6737976 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify Web Helper] => C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\MountPoints2: {1e7b1d52-7644-11e4-bebd-8f82a67bff64} - E:\pushinst.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3907120464-2962894331-2469926676-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Chaos\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX", "hxxp://www.google.com", "hxxp://myhome.vi-view.com/?type=hp&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hp&ts=1422798055&from=exp&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-27]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-27]
CHR Extension: (YouTube) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-27]
CHR Extension: (Google-Suche) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-27]
CHR Extension: (AdBlock) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-01]
CHR Extension: (Stylish Facebook Themes) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\haomkemhnjlojfjklokcbkjkdanghlic [2014-11-27]
CHR Extension: (Google Wallet) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-27]
CHR Extension: (Google Mail) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 10:12 - 2015-02-14 10:12 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-14 10:09 - 2015-02-14 10:09 - 02347384 _____ (ESET) C:\Users\Chaos\Desktop\esetsmartinstaller_deu.exe
2015-02-13 16:44 - 2015-02-13 16:44 - 00000000 ____D () C:\Users\Chaos\Desktop\Neuer Ordner
2015-02-13 16:43 - 2015-02-13 16:43 - 00000625 _____ () C:\Users\Chaos\Desktop\JRT.txt
2015-02-13 16:41 - 2015-02-13 16:41 - 01388274 _____ (Thisisu) C:\Users\Chaos\Desktop\JRT.exe
2015-02-13 16:36 - 2015-02-13 16:38 - 00000000 ____D () C:\AdwCleaner
2015-02-13 16:36 - 2015-02-13 16:36 - 02112512 _____ () C:\Users\Chaos\Desktop\AdwCleaner_4.110.exe
2015-02-13 16:32 - 2015-02-13 16:32 - 00042446 _____ () C:\Users\Chaos\Desktop\mbam.txt
2015-02-13 15:52 - 2015-02-13 15:52 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-13 15:52 - 2015-02-13 15:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-13 15:51 - 2015-02-13 15:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Chaos\Desktop\mbam-setup-2.0.4.1028.exe
2015-02-12 18:58 - 2015-02-14 10:57 - 00009948 _____ () C:\Users\Chaos\Desktop\FRST.txt
2015-02-12 18:58 - 2015-02-14 10:57 - 00000000 ____D () C:\FRST
2015-02-12 18:56 - 2015-02-12 18:56 - 02134016 _____ (Farbar) C:\Users\Chaos\Desktop\FRST64.exe
2015-02-12 17:46 - 2015-02-12 17:46 - 529320485 _____ () C:\Windows\MEMORY.DMP
2015-02-12 15:38 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 15:38 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 16:32 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 16:32 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 16:32 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-11 16:32 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-11 16:31 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 16:31 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 16:31 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 16:31 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 16:31 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 16:31 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 16:31 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 16:31 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 16:31 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 16:31 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 16:31 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 16:31 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 16:31 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 16:31 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 16:31 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 16:31 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 16:31 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 16:31 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 16:31 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 16:27 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 16:27 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 16:27 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 16:27 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 16:27 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 16:27 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 16:27 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 16:27 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 16:27 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 16:27 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 16:27 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 16:27 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 16:27 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 16:27 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 16:27 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 16:27 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 16:27 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 16:27 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 16:27 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 16:27 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 16:27 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 16:27 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 16:27 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 16:27 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 16:27 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-10 14:52 - 2015-02-14 10:06 - 00002477 _____ () C:\Windows\setupact.log
2015-02-10 14:52 - 2015-02-10 14:52 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 14:51 - 2015-02-13 16:38 - 00091994 _____ () C:\Windows\PFRO.log
2015-02-09 21:53 - 2015-02-09 21:53 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-09 21:53 - 2015-02-09 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-09 21:52 - 2015-02-14 10:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-09 21:52 - 2015-02-14 10:07 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-09 21:52 - 2015-02-09 21:52 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 21:52 - 2015-02-09 21:52 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 22:00 - 2015-02-03 22:05 - 00165592 _____ () C:\Users\Chaos\Desktop\Two Steps from Hell - Heart of Courage.mp3.sfk
2015-02-03 10:55 - 2015-02-09 21:51 - 00000000 ____D () C:\Users\Chaos\AppData\Local\CrashDumps
2015-02-02 20:20 - 2015-02-02 20:27 - 00174016 _____ () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4.sfk
2015-02-02 20:19 - 2015-02-02 20:18 - 18563197 ____N () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4
2015-02-01 17:02 - 2015-02-08 18:13 - 00000000 ____D () C:\Users\Chaos\Desktop\Abschlussfeier aus der Ausbildung
2015-02-01 16:27 - 2015-02-01 16:45 - 263830833 _____ () C:\Users\Chaos\Downloads\Fotos_Freistellungsfeier.zip
2015-02-01 16:18 - 2015-02-01 16:18 - 00000000 ____D () C:\NPE
2015-02-01 16:14 - 2015-02-01 16:26 - 00000000 ____D () C:\Users\Chaos\AppData\Local\NPE
2015-02-01 16:14 - 2015-02-01 16:14 - 03077776 ____N (Symantec Corporation) C:\Users\Chaos\Downloads\NPE.exe
2015-02-01 16:14 - 2015-02-01 16:14 - 00000000 ____D () C:\ProgramData\Norton
2015-02-01 15:54 - 2015-02-01 15:54 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-01 15:54 - 2015-02-01 15:54 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-01 15:48 - 2015-02-01 15:48 - 04188536 _____ (Piriform Ltd) C:\Users\Chaos\Downloads\ccsetup501_slim.exe
2015-02-01 15:32 - 2015-02-01 15:32 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\QuickScan
2015-02-01 15:31 - 2015-02-01 15:31 - 00003150 _____ () C:\Windows\System32\Tasks\{B03DD839-A0AA-48C8-9D0B-8E4910D1094C}
2015-02-01 15:25 - 2015-02-01 15:27 - 00273880 _____ () C:\Users\Chaos\Desktop\Five Finger Death Punch  - Cradle To The Grave.mp3.sfk
2015-02-01 15:20 - 2015-02-01 15:20 - 00001805 _____ () C:\Users\Chaos\Desktop\MovieStudioPlatinum130 - Verknüpfung.lnk
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Publish Providers
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\AMD
2015-02-01 15:13 - 2015-02-14 02:33 - 00000000 ____D () C:\Users\Chaos\Documents\Movie Studio Platinum 13.0 Projekte
2015-02-01 15:00 - 2015-02-01 15:00 - 00000000 ____D () C:\Program Files\Sony
2015-02-01 14:55 - 2015-02-01 14:57 - 484367128 _____ (Sony Creative Software Inc.) C:\Users\Chaos\Downloads\moviestudiope13.0.943_64bit.exe
2015-02-01 14:50 - 2015-02-01 14:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 02060888 _____ () C:\Users\Chaos\Downloads\winrar-x64-520d.exe
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-01 14:40 - 2015-02-01 14:40 - 00000045 _____ () C:\user.js
2015-02-01 14:32 - 2015-02-01 14:32 - 00003140 _____ () C:\Windows\System32\Tasks\{F2EF4D33-E414-4F49-BD02-84CFF53440B0}
2015-02-01 14:26 - 2015-02-01 14:26 - 00000171 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url
2015-02-01 14:26 - 2015-02-01 14:26 - 00000000 ___HD () C:\Users\Chaos\AppData\Roaming\GoldenGate
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Sony
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-01 14:21 - 2015-02-01 14:21 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-02-01 14:12 - 2015-02-01 15:13 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Sony
2015-02-01 14:12 - 2015-02-01 15:08 - 00000000 ____D () C:\Users\Chaos\Documents\Vegas Movie Studio HD Platinum 10.0 Projekte
2015-02-01 14:11 - 2015-02-03 22:22 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Sony
2015-01-25 14:20 - 2015-01-25 14:20 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Microsoft Games
2015-01-24 12:49 - 2015-02-13 16:33 - 00000000 ____D () C:\Windows\Minidump
2015-01-20 23:48 - 2015-01-20 23:48 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\library_dir
2015-01-20 23:47 - 2015-01-20 23:47 - 00053736 _____ () C:\Windows\SysWOW64\CCCInstall_201501202347516231.log
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\ATI
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-20 23:46 - 2015-02-11 17:17 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-20 23:46 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files\AMD
2015-01-18 20:43 - 2015-01-18 20:43 - 00003842 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421610199
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Opera Software
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Opera Software
2015-01-15 09:34 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 10:22 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 10:22 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-14 10:18 - 2014-11-27 16:08 - 01463360 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 10:12 - 2014-11-28 00:42 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2015-02-14 10:12 - 2014-11-28 00:42 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2015-02-14 10:12 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-14 10:11 - 2014-11-27 16:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 10:07 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Spotify
2015-02-14 10:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 18:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-13 16:39 - 2014-12-06 11:28 - 00005609 _____ () C:\Users\Chaos\Desktop\AdwCleaner.txt
2015-02-12 22:08 - 2014-11-27 20:13 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\TS3Client
2015-02-11 17:39 - 2014-12-11 17:17 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 17:39 - 2014-11-27 20:10 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 17:39 - 2009-07-14 05:45 - 00294640 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 17:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-11 17:16 - 2014-11-27 18:05 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-11 17:16 - 2014-11-27 18:05 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-11 17:15 - 2014-11-27 18:52 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 17:13 - 2014-11-27 18:52 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-09 21:52 - 2014-11-27 16:30 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-09 21:52 - 2014-11-27 16:29 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Deployment
2015-02-04 22:11 - 2014-11-27 16:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 22:11 - 2014-11-27 16:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 22:11 - 2014-11-27 16:17 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-03 10:55 - 2014-12-01 12:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\vlc
2015-02-02 21:01 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-02-02 14:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-01 16:03 - 2014-11-27 19:49 - 01592628 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-01 15:56 - 2014-11-28 00:43 - 00000000 ____D () C:\Windows\Panther
2015-02-01 15:44 - 2014-11-27 16:08 - 00001425 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-01 15:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-01 14:35 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\ProgramData\AMD
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-20 23:44 - 2014-11-27 16:26 - 00000000 ____D () C:\AMD
2015-01-18 01:23 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Spotify

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 18:11

==================== End Of Log ============================
--- --- ---

Edward12 14.02.2015 15:12
1. Schritt:
Wir müssen noch deine Einstellungen in Chrom auf Standard zurücksetzen um die Reste der AdWare zu beseitigen. Bitte dazu folgender Anleitung folgen:
Google Chrome auf Standardeinstellungen zurücksetzen - Anleitungen

2. Schritt:
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

3. Schritt:
Bitte ein neues FRST-Log posten


Bestehen noch irgendwelche Probleme mit Werbeeinblendungen?

FlyingEagle 14.02.2015 16:18
So:

Habe die Standardeinstellungen bei Chrome zurückgesetzt.

Schritt 2:

Code:
Results of screen317's Security Check version 0.99.96 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Microsoft Security Essentials 
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````
  Java 64-bit 8 Update 31 
 Google Chrome (40.0.2214.111)
````````Process Check: objlist.exe by Laurent```````` 
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
Schritt 3.:


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by Chaos (administrator) on CHAOS-PC on 14-02-2015 16:17:39
Running from C:\Users\Chaos\Desktop
Loaded Profiles: Chaos (Available profiles: Chaos)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Spotify Ltd) C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify] => C:\Users\Chaos\AppData\Roaming\Spotify\Spotify.exe [6737976 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify Web Helper] => C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\RunOnce: [DeleteMarkAny] => C:\Windows\SysWOW64\MASetupCleaner.exe [24576 2013-12-30] ((주)마크애니)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\MountPoints2: {1e7b1d52-7644-11e4-bebd-8f82a67bff64} - E:\pushinst.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3907120464-2962894331-2469926676-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Chaos\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1399663500&from=cor&uid=HitachiXHDS721010DLE630_MSK523Y20R1J5F0R1J5FX", "hxxp://www.google.com", "hxxp://myhome.vi-view.com/?type=hp&ts=1422797199&from=cor&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hp&ts=1422798055&from=exp&uid=SanDiskXSDSSDHII240G_144159402997", "hxxp://istart.webssearches.com/?type=hppp&ts=1422798107&from=exp&uid=SanDiskXSDSSDHII240G_144159402997"
CHR Profile: C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-27]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-27]
CHR Extension: (YouTube) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-27]
CHR Extension: (Google-Suche) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-27]
CHR Extension: (AdBlock) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-01]
CHR Extension: (Stylish Facebook Themes) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\haomkemhnjlojfjklokcbkjkdanghlic [2014-11-27]
CHR Extension: (Google Wallet) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-27]
CHR Extension: (Google Mail) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 16:17 - 2015-02-14 16:17 - 00000000 ____D () C:\Users\Chaos\Desktop\FRST-OlderVersion
2015-02-14 16:15 - 2015-02-14 16:15 - 00852594 _____ () C:\Users\Chaos\Desktop\SecurityCheck.exe
2015-02-14 10:57 - 2015-02-14 10:58 - 00027932 _____ () C:\Users\Chaos\Desktop\Addition.txt
2015-02-14 10:09 - 2015-02-14 10:09 - 02347384 _____ (ESET) C:\Users\Chaos\Desktop\esetsmartinstaller_deu.exe
2015-02-13 16:44 - 2015-02-13 16:44 - 00000000 ____D () C:\Users\Chaos\Desktop\Neuer Ordner
2015-02-13 16:43 - 2015-02-13 16:43 - 00000625 _____ () C:\Users\Chaos\Desktop\JRT.txt
2015-02-13 16:41 - 2015-02-13 16:41 - 01388274 _____ (Thisisu) C:\Users\Chaos\Desktop\JRT.exe
2015-02-13 16:36 - 2015-02-13 16:38 - 00000000 ____D () C:\AdwCleaner
2015-02-13 16:36 - 2015-02-13 16:36 - 02112512 _____ () C:\Users\Chaos\Desktop\AdwCleaner_4.110.exe
2015-02-13 16:32 - 2015-02-13 16:32 - 00042446 _____ () C:\Users\Chaos\Desktop\mbam.txt
2015-02-13 15:52 - 2015-02-13 15:52 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-13 15:52 - 2015-02-13 15:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-13 15:51 - 2015-02-13 15:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Chaos\Desktop\mbam-setup-2.0.4.1028.exe
2015-02-12 18:58 - 2015-02-14 16:17 - 00009750 _____ () C:\Users\Chaos\Desktop\FRST.txt
2015-02-12 18:58 - 2015-02-14 16:17 - 00000000 ____D () C:\FRST
2015-02-12 18:56 - 2015-02-14 16:17 - 02134528 _____ (Farbar) C:\Users\Chaos\Desktop\FRST64.exe
2015-02-12 17:46 - 2015-02-12 17:46 - 529320485 _____ () C:\Windows\MEMORY.DMP
2015-02-12 15:38 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 15:38 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 16:32 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 16:32 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 16:32 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-11 16:32 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-11 16:31 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 16:31 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 16:31 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 16:31 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 16:31 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 16:31 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 16:31 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 16:31 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 16:31 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 16:31 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 16:31 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 16:31 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 16:31 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 16:31 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 16:31 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 16:31 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 16:31 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 16:31 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 16:31 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 16:27 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 16:27 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 16:27 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 16:27 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 16:27 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 16:27 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 16:27 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 16:27 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 16:27 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 16:27 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 16:27 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 16:27 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 16:27 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 16:27 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 16:27 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 16:27 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 16:27 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 16:27 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 16:27 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 16:27 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 16:27 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 16:27 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 16:27 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 16:27 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 16:27 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-10 14:52 - 2015-02-14 10:06 - 00002477 _____ () C:\Windows\setupact.log
2015-02-10 14:52 - 2015-02-10 14:52 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 14:51 - 2015-02-13 16:38 - 00091994 _____ () C:\Windows\PFRO.log
2015-02-09 21:53 - 2015-02-09 21:53 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-09 21:53 - 2015-02-09 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-09 21:52 - 2015-02-14 15:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-09 21:52 - 2015-02-14 10:07 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-09 21:52 - 2015-02-09 21:52 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 21:52 - 2015-02-09 21:52 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 22:00 - 2015-02-03 22:05 - 00165592 _____ () C:\Users\Chaos\Desktop\Two Steps from Hell - Heart of Courage.mp3.sfk
2015-02-03 10:55 - 2015-02-09 21:51 - 00000000 ____D () C:\Users\Chaos\AppData\Local\CrashDumps
2015-02-02 20:20 - 2015-02-02 20:27 - 00174016 _____ () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4.sfk
2015-02-02 20:19 - 2015-02-02 20:18 - 18563197 ____N () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4
2015-02-01 17:02 - 2015-02-08 18:13 - 00000000 ____D () C:\Users\Chaos\Desktop\Abschlussfeier aus der Ausbildung
2015-02-01 16:27 - 2015-02-01 16:45 - 263830833 _____ () C:\Users\Chaos\Downloads\Fotos_Freistellungsfeier.zip
2015-02-01 16:18 - 2015-02-01 16:18 - 00000000 ____D () C:\NPE
2015-02-01 16:14 - 2015-02-01 16:26 - 00000000 ____D () C:\Users\Chaos\AppData\Local\NPE
2015-02-01 16:14 - 2015-02-01 16:14 - 03077776 ____N (Symantec Corporation) C:\Users\Chaos\Downloads\NPE.exe
2015-02-01 16:14 - 2015-02-01 16:14 - 00000000 ____D () C:\ProgramData\Norton
2015-02-01 15:54 - 2015-02-01 15:54 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-01 15:54 - 2015-02-01 15:54 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-01 15:48 - 2015-02-01 15:48 - 04188536 _____ (Piriform Ltd) C:\Users\Chaos\Downloads\ccsetup501_slim.exe
2015-02-01 15:32 - 2015-02-01 15:32 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\QuickScan
2015-02-01 15:31 - 2015-02-01 15:31 - 00003150 _____ () C:\Windows\System32\Tasks\{B03DD839-A0AA-48C8-9D0B-8E4910D1094C}
2015-02-01 15:25 - 2015-02-01 15:27 - 00273880 _____ () C:\Users\Chaos\Desktop\Five Finger Death Punch  - Cradle To The Grave.mp3.sfk
2015-02-01 15:20 - 2015-02-01 15:20 - 00001805 _____ () C:\Users\Chaos\Desktop\MovieStudioPlatinum130 - Verknüpfung.lnk
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Publish Providers
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\AMD
2015-02-01 15:13 - 2015-02-14 14:00 - 00000000 ____D () C:\Users\Chaos\Documents\Movie Studio Platinum 13.0 Projekte
2015-02-01 15:00 - 2015-02-01 15:00 - 00000000 ____D () C:\Program Files\Sony
2015-02-01 14:55 - 2015-02-01 14:57 - 484367128 _____ (Sony Creative Software Inc.) C:\Users\Chaos\Downloads\moviestudiope13.0.943_64bit.exe
2015-02-01 14:50 - 2015-02-01 14:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 02060888 _____ () C:\Users\Chaos\Downloads\winrar-x64-520d.exe
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-01 14:40 - 2015-02-01 14:40 - 00000045 _____ () C:\user.js
2015-02-01 14:32 - 2015-02-01 14:32 - 00003140 _____ () C:\Windows\System32\Tasks\{F2EF4D33-E414-4F49-BD02-84CFF53440B0}
2015-02-01 14:26 - 2015-02-01 14:26 - 00000171 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url
2015-02-01 14:26 - 2015-02-01 14:26 - 00000000 ___HD () C:\Users\Chaos\AppData\Roaming\GoldenGate
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Sony
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-01 14:21 - 2015-02-01 14:21 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-02-01 14:12 - 2015-02-01 15:13 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Sony
2015-02-01 14:12 - 2015-02-01 15:08 - 00000000 ____D () C:\Users\Chaos\Documents\Vegas Movie Studio HD Platinum 10.0 Projekte
2015-02-01 14:11 - 2015-02-03 22:22 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Sony
2015-01-25 14:20 - 2015-01-25 14:20 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Microsoft Games
2015-01-24 12:49 - 2015-02-13 16:33 - 00000000 ____D () C:\Windows\Minidump
2015-01-20 23:48 - 2015-01-20 23:48 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\library_dir
2015-01-20 23:47 - 2015-01-20 23:47 - 00053736 _____ () C:\Windows\SysWOW64\CCCInstall_201501202347516231.log
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\ATI
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-20 23:46 - 2015-02-11 17:17 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-20 23:46 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files\AMD
2015-01-18 20:43 - 2015-01-18 20:43 - 00003842 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421610199
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Opera Software
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Opera Software
2015-01-15 09:34 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 16:11 - 2014-11-27 16:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 13:40 - 2014-11-28 00:42 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2015-02-14 13:40 - 2014-11-28 00:42 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2015-02-14 13:40 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-14 11:07 - 2015-01-11 15:22 - 00000000 ____D () C:\ProgramData\Samsung
2015-02-14 11:07 - 2015-01-11 15:22 - 00000000 ____D () C:\Program Files (x86)\Samsung
2015-02-14 11:07 - 2014-11-27 16:13 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-14 10:22 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 10:22 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-14 10:18 - 2014-11-27 16:08 - 01463360 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 10:07 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Spotify
2015-02-14 10:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 18:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-13 16:39 - 2014-12-06 11:28 - 00005609 _____ () C:\Users\Chaos\Desktop\AdwCleaner.txt
2015-02-12 22:08 - 2014-11-27 20:13 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\TS3Client
2015-02-11 17:39 - 2014-12-11 17:17 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 17:39 - 2014-11-27 20:10 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 17:39 - 2009-07-14 05:45 - 00294640 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 17:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-11 17:16 - 2014-11-27 18:05 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-11 17:16 - 2014-11-27 18:05 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-11 17:15 - 2014-11-27 18:52 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 17:13 - 2014-11-27 18:52 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-09 21:52 - 2014-11-27 16:30 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-09 21:52 - 2014-11-27 16:29 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Deployment
2015-02-04 22:11 - 2014-11-27 16:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 22:11 - 2014-11-27 16:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 22:11 - 2014-11-27 16:17 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-03 10:55 - 2014-12-01 12:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\vlc
2015-02-02 21:01 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-02-02 14:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-01 16:03 - 2014-11-27 19:49 - 01592628 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-01 15:56 - 2014-11-28 00:43 - 00000000 ____D () C:\Windows\Panther
2015-02-01 15:44 - 2014-11-27 16:08 - 00001425 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-01 15:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-01 14:35 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\ProgramData\AMD
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-20 23:44 - 2014-11-27 16:26 - 00000000 ____D () C:\AMD
2015-01-18 01:23 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Spotify

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 18:11

==================== End Of Log ============================
--- --- ---

--- --- ---


Ich habe noch keine Werbeeinblendungen heute in Chrome gehabt.

Edward12 15.02.2015 14:31
Im Chrome ist immer noch etwas vorhanden um was wir uns kümmern müssen. Daher bitte Chrome beenden und folgenden fix ausführen:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Preferences

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Danach bitte wieder ein neues FRST-Log posten.

FlyingEagle 15.02.2015 17:33
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-02-2015
Ran by Chaos at 2015-02-15 17:32:14 Run:2
Running from C:\Users\Chaos\Desktop
Loaded Profiles: Chaos (Available profiles: Chaos)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Preferences
*****************

C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Preferences => Moved successfully.

==== End of Fixlog 17:32:14 ====

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-02-2015
Ran by Chaos (administrator) on CHAOS-PC on 15-02-2015 17:32:33
Running from C:\Users\Chaos\Desktop
Loaded Profiles: Chaos (Available profiles: Chaos)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Spotify Ltd) C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify] => C:\Users\Chaos\AppData\Roaming\Spotify\Spotify.exe [6737976 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [Spotify Web Helper] => C:\Users\Chaos\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-09] (Spotify Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\...\MountPoints2: {1e7b1d52-7644-11e4-bebd-8f82a67bff64} - E:\pushinst.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3907120464-2962894331-2469926676-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-3907120464-2962894331-2469926676-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Chaos\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome:
=======
CHR Profile: C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-27]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-27]
CHR Extension: (YouTube) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-27]
CHR Extension: (Google-Suche) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-27]
CHR Extension: (AdBlock) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-01]
CHR Extension: (Stylish Facebook Themes) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\haomkemhnjlojfjklokcbkjkdanghlic [2014-11-27]
CHR Extension: (Google Wallet) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-27]
CHR Extension: (Google Mail) - C:\Users\Chaos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-14 16:17 - 2015-02-14 16:17 - 00000000 ____D () C:\Users\Chaos\Desktop\FRST-OlderVersion
2015-02-14 16:15 - 2015-02-14 16:15 - 00852594 _____ () C:\Users\Chaos\Desktop\SecurityCheck.exe
2015-02-14 10:57 - 2015-02-14 10:58 - 00027932 _____ () C:\Users\Chaos\Desktop\Addition.txt
2015-02-14 10:09 - 2015-02-14 10:09 - 02347384 _____ (ESET) C:\Users\Chaos\Desktop\esetsmartinstaller_deu.exe
2015-02-13 16:44 - 2015-02-13 16:44 - 00000000 ____D () C:\Users\Chaos\Desktop\Neuer Ordner
2015-02-13 16:43 - 2015-02-13 16:43 - 00000625 _____ () C:\Users\Chaos\Desktop\JRT.txt
2015-02-13 16:41 - 2015-02-13 16:41 - 01388274 _____ (Thisisu) C:\Users\Chaos\Desktop\JRT.exe
2015-02-13 16:36 - 2015-02-13 16:38 - 00000000 ____D () C:\AdwCleaner
2015-02-13 16:36 - 2015-02-13 16:36 - 02112512 _____ () C:\Users\Chaos\Desktop\AdwCleaner_4.110.exe
2015-02-13 16:32 - 2015-02-13 16:32 - 00042446 _____ () C:\Users\Chaos\Desktop\mbam.txt
2015-02-13 15:52 - 2015-02-13 15:52 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-13 15:52 - 2015-02-13 15:52 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-13 15:52 - 2015-02-13 15:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-13 15:52 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-13 15:52 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-13 15:51 - 2015-02-13 15:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Chaos\Desktop\mbam-setup-2.0.4.1028.exe
2015-02-12 18:58 - 2015-02-15 17:32 - 00008324 _____ () C:\Users\Chaos\Desktop\FRST.txt
2015-02-12 18:58 - 2015-02-15 17:32 - 00000000 ____D () C:\FRST
2015-02-12 18:56 - 2015-02-14 16:17 - 02134528 _____ (Farbar) C:\Users\Chaos\Desktop\FRST64.exe
2015-02-12 17:46 - 2015-02-12 17:46 - 529320485 _____ () C:\Windows\MEMORY.DMP
2015-02-12 15:38 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 15:38 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 15:38 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 16:32 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 16:32 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 16:32 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 16:32 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 16:32 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-11 16:32 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-11 16:32 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-11 16:31 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 16:31 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 16:31 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 16:31 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 16:31 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 16:31 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 16:31 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 16:31 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 16:31 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 16:31 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 16:31 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 16:31 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 16:31 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 16:31 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 16:31 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 16:31 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 16:31 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 16:31 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 16:31 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 16:31 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 16:31 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 16:31 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 16:31 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 16:31 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 16:31 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 16:31 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 16:31 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 16:31 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 16:31 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 16:31 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 16:31 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 16:31 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 16:31 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 16:31 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 16:27 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 16:27 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 16:27 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 16:27 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 16:27 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 16:27 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 16:27 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 16:27 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 16:27 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 16:27 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 16:27 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 16:27 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 16:27 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 16:27 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 16:27 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 16:27 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 16:27 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 16:27 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 16:27 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 16:27 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 16:27 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 16:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 16:27 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 16:27 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 16:27 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 16:27 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 16:27 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 16:27 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 16:27 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 16:27 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 16:27 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-10 14:52 - 2015-02-15 17:26 - 00002533 _____ () C:\Windows\setupact.log
2015-02-10 14:52 - 2015-02-10 14:52 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 14:51 - 2015-02-15 17:26 - 00092828 _____ () C:\Windows\PFRO.log
2015-02-09 21:53 - 2015-02-09 21:53 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-09 21:53 - 2015-02-09 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-09 21:52 - 2015-02-15 17:30 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-09 21:52 - 2015-02-14 16:57 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-09 21:52 - 2015-02-09 21:52 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 21:52 - 2015-02-09 21:52 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-03 22:00 - 2015-02-03 22:05 - 00165592 _____ () C:\Users\Chaos\Desktop\Two Steps from Hell - Heart of Courage.mp3.sfk
2015-02-03 10:55 - 2015-02-09 21:51 - 00000000 ____D () C:\Users\Chaos\AppData\Local\CrashDumps
2015-02-02 20:20 - 2015-02-02 20:27 - 00174016 _____ () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4.sfk
2015-02-02 20:19 - 2015-02-02 20:18 - 18563197 ____N () C:\Users\Chaos\Desktop\MERCK _ PROUD TO BE AN ORIGINAL_HD.mp4
2015-02-01 17:02 - 2015-02-08 18:13 - 00000000 ____D () C:\Users\Chaos\Desktop\Abschlussfeier aus der Ausbildung
2015-02-01 16:27 - 2015-02-01 16:45 - 263830833 _____ () C:\Users\Chaos\Downloads\Fotos_Freistellungsfeier.zip
2015-02-01 16:18 - 2015-02-01 16:18 - 00000000 ____D () C:\NPE
2015-02-01 16:14 - 2015-02-01 16:26 - 00000000 ____D () C:\Users\Chaos\AppData\Local\NPE
2015-02-01 16:14 - 2015-02-01 16:14 - 03077776 ____N (Symantec Corporation) C:\Users\Chaos\Downloads\NPE.exe
2015-02-01 16:14 - 2015-02-01 16:14 - 00000000 ____D () C:\ProgramData\Norton
2015-02-01 15:54 - 2015-02-01 15:54 - 00002772 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-01 15:54 - 2015-02-01 15:54 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-01 15:54 - 2015-02-01 15:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-02-01 15:48 - 2015-02-01 15:48 - 04188536 _____ (Piriform Ltd) C:\Users\Chaos\Downloads\ccsetup501_slim.exe
2015-02-01 15:32 - 2015-02-01 15:32 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\QuickScan
2015-02-01 15:31 - 2015-02-01 15:31 - 00003150 _____ () C:\Windows\System32\Tasks\{B03DD839-A0AA-48C8-9D0B-8E4910D1094C}
2015-02-01 15:25 - 2015-02-01 15:27 - 00273880 _____ () C:\Users\Chaos\Desktop\Five Finger Death Punch  - Cradle To The Grave.mp3.sfk
2015-02-01 15:20 - 2015-02-01 15:20 - 00001805 _____ () C:\Users\Chaos\Desktop\MovieStudioPlatinum130 - Verknüpfung.lnk
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Publish Providers
2015-02-01 15:18 - 2015-02-01 15:18 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\AMD
2015-02-01 15:13 - 2015-02-14 14:00 - 00000000 ____D () C:\Users\Chaos\Documents\Movie Studio Platinum 13.0 Projekte
2015-02-01 15:00 - 2015-02-01 15:00 - 00000000 ____D () C:\Program Files\Sony
2015-02-01 14:55 - 2015-02-01 14:57 - 484367128 _____ (Sony Creative Software Inc.) C:\Users\Chaos\Downloads\moviestudiope13.0.943_64bit.exe
2015-02-01 14:50 - 2015-02-01 14:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 02060888 _____ () C:\Users\Chaos\Downloads\winrar-x64-520d.exe
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 14:49 - 2015-02-01 14:49 - 00000000 ____D () C:\Program Files\WinRAR
2015-02-01 14:40 - 2015-02-01 14:40 - 00000045 _____ () C:\user.js
2015-02-01 14:32 - 2015-02-01 14:32 - 00003140 _____ () C:\Windows\System32\Tasks\{F2EF4D33-E414-4F49-BD02-84CFF53440B0}
2015-02-01 14:26 - 2015-02-01 14:26 - 00000171 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url
2015-02-01 14:26 - 2015-02-01 14:26 - 00000000 ___HD () C:\Users\Chaos\AppData\Roaming\GoldenGate
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Sony
2015-02-01 14:21 - 2015-02-01 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-01 14:21 - 2015-02-01 14:21 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-02-01 14:12 - 2015-02-01 15:13 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Sony
2015-02-01 14:12 - 2015-02-01 15:08 - 00000000 ____D () C:\Users\Chaos\Documents\Vegas Movie Studio HD Platinum 10.0 Projekte
2015-02-01 14:11 - 2015-02-03 22:22 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Sony
2015-01-25 14:20 - 2015-01-25 14:20 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Microsoft Games
2015-01-24 12:49 - 2015-02-13 16:33 - 00000000 ____D () C:\Windows\Minidump
2015-01-20 23:48 - 2015-01-20 23:48 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\library_dir
2015-01-20 23:47 - 2015-01-20 23:47 - 00053736 _____ () C:\Windows\SysWOW64\CCCInstall_201501202347516231.log
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\ProgramData\ATI
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-20 23:47 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-20 23:46 - 2015-02-11 17:17 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-20 23:46 - 2015-01-20 23:47 - 00000000 ____D () C:\Program Files\AMD
2015-01-18 20:43 - 2015-01-18 20:43 - 00003842 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1421610199
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Opera Software
2015-01-18 20:43 - 2015-01-18 20:43 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Opera Software

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-15 17:31 - 2014-11-28 00:42 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2015-02-15 17:31 - 2014-11-28 00:42 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2015-02-15 17:31 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-15 17:30 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\Spotify
2015-02-15 17:26 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-14 17:14 - 2014-11-27 16:08 - 01486464 _____ () C:\Windows\WindowsUpdate.log
2015-02-14 17:11 - 2014-11-27 16:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-14 11:07 - 2015-01-11 15:25 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Samsung
2015-02-14 11:07 - 2015-01-11 15:22 - 00000000 ____D () C:\ProgramData\Samsung
2015-02-14 11:07 - 2015-01-11 15:22 - 00000000 ____D () C:\Program Files (x86)\Samsung
2015-02-14 11:07 - 2014-11-27 16:13 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-14 10:22 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-14 10:22 - 2009-07-14 05:45 - 00033376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-13 18:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-13 16:39 - 2014-12-06 11:28 - 00005609 _____ () C:\Users\Chaos\Desktop\AdwCleaner.txt
2015-02-12 22:08 - 2014-11-27 20:13 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\TS3Client
2015-02-11 17:39 - 2014-12-11 17:17 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-11 17:39 - 2014-11-27 20:10 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-11 17:39 - 2009-07-14 05:45 - 00294640 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-11 17:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-11 17:16 - 2014-11-27 18:05 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-11 17:16 - 2014-11-27 18:05 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-11 17:16 - 2014-11-27 18:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-11 17:15 - 2014-11-27 18:52 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 17:13 - 2014-11-27 18:52 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-09 21:52 - 2014-11-27 16:30 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-09 21:52 - 2014-11-27 16:29 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Deployment
2015-02-04 22:11 - 2014-11-27 16:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-04 22:11 - 2014-11-27 16:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-04 22:11 - 2014-11-27 16:17 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-03 10:55 - 2014-12-01 12:50 - 00000000 ____D () C:\Users\Chaos\AppData\Roaming\vlc
2015-02-02 21:01 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-02-02 14:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-01 16:03 - 2014-11-27 19:49 - 01592628 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-01 15:56 - 2014-11-28 00:43 - 00000000 ____D () C:\Windows\Panther
2015-02-01 15:44 - 2014-11-27 16:08 - 00001425 _____ () C:\Users\Chaos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-01 15:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-01 14:35 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\ProgramData\AMD
2015-01-20 23:47 - 2014-11-27 16:27 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-20 23:44 - 2014-11-27 16:26 - 00000000 ____D () C:\AMD
2015-01-18 01:23 - 2015-01-09 23:30 - 00000000 ____D () C:\Users\Chaos\AppData\Local\Spotify

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 18:11

==================== End Of Log ============================
--- --- ---


Hoffe jetzt ist alles wieder oke :D

Edward12 16.02.2015 19:23
Das sieht jetzt viel besser aus. Damit wären wir durch :)

Downloade dir bitte delfix auf deinen Desktop.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
  • DelFix entfernt u. a. alle verwendeten Programme und Logs und löscht sich abschließend selbst.
  • Sollten noch irgendwelche Programme übrig geblieben sein, so kannst du diese bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren. Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.
Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.
Zusätzlicher Schutz
  • MalwareBytes Anti Malware Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt. Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter. Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.
Sicheres Browsen
  • SpywareBlaster Eine kurze Einführung findest du Hier
  • MVPs hosts file Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust) Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen. Es spart ausserdem Downloadkapazität.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

FlyingEagle 17.02.2015 17:43
Hey,
danke für deine Hilfe :D
Habe keine Werbung mehr beim Surfen. Vielen Dank dafür :D

Edward12 18.02.2015 06:45
Gern geschehen & happy surfing :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:56 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55