Code:
----------
Key: APNMCP
ImagePath: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (verified signer: [APN LLC])
177560 bytes
Created: 31.01.2015 00:53
Modified: 31.01.2015 00:53
Company: APN LLC.
----------
----------
Key: AVP15.0.0
ImagePath: "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe" -r
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe (verified signer: [Kaspersky Lab])
233552 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
----------
----------
Key: CVPND
ImagePath: "C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe"
C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (verified signer: [Cisco Systems, Inc.])
1528616 bytes
Created: 23.03.2010 12:19
Modified: 23.03.2010 12:19
Company: Cisco Systems, Inc.
----------
----------
Key: CVPNDRVA
ImagePath: \??\C:\Windows\system32\Drivers\CVPNDRVA.sys
C:\Windows\System32\Drivers\CVPNDRVA.sys
304784 bytes
Created: 23.03.2010 12:29
Modified: 23.03.2010 12:29
Company: [no info]
----------
----------
Key: GamesAppIntegrationService
ImagePath: "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (verified signer: [WildTangent Inc])
227936 bytes
Created: 06.09.2013 01:41
Modified: 08.12.2013 15:09
Company: WildTangent
----------
----------
Key: GamesAppService
ImagePath: "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe"
C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe (verified signer: [WildTangent Inc])
206072 bytes
Created: 12.10.2010 18:59
Modified: 12.10.2010 18:59
Company: WildTangent, Inc.
----------
----------
Key: HP Health Check Service
ImagePath: "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe (verified signer: [Hewlett-Packard Company])
126520 bytes
Created: 15.11.2010 09:04
Modified: 15.11.2010 09:04
Company: Hewlett-Packard Company
----------
----------
Key: HPDrvMntSvc.exe
ImagePath: "C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (verified signer: [Hewlett-Packard Company])
92216 bytes
Created: 14.10.2010 17:27
Modified: 14.10.2010 17:27
Company: Hewlett-Packard Company
----------
----------
Key: hpqwmiex
ImagePath: "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (verified signer: [Hewlett-Packard Company])
751672 bytes
Created: 14.10.2010 17:22
Modified: 14.10.2010 17:22
Company: Hewlett-Packard Company
----------
----------
Key: IAStorDataMgrSvc
ImagePath: "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (verified signer: [Intel Corporation])
13336 bytes
Created: 05.02.2010 19:03
Modified: 02.10.2009 12:26
Company: Intel Corporation
----------
----------
Key: klflt
ImagePath: system32\DRIVERS\klflt.sys
C:\Windows\System32\DRIVERS\klflt.sys
141320 bytes
Created: 23.11.2014 17:12
Modified: 23.11.2014 17:20
Company: Kaspersky Lab ZAO
----------
----------
Key: McComponentHostService
ImagePath: "C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe"
C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe (verified signer: [McAfee, Inc.])
289256 bytes
Created: 09.04.2014 14:13
Modified: 09.04.2014 14:13
Company: McAfee, Inc.
----------
----------
Key: ogmservice
ImagePath: "C:\Program Files (x86)\Online Games Manager\ogmservice.exe" --service-run
C:\Program Files (x86)\Online Games Manager\ogmservice.exe (verified signer: [GameHouse])
581568 bytes
Created: 27.03.2014 13:07
Modified: 27.03.2014 13:07
Company: RealNetworks, Inc.
----------
----------
Key: OMSI download service
ImagePath: C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
90112 bytes
Created: 23.09.2010 17:25
Modified: 30.04.2009 11:23
Company: [no info]
----------
----------
Key: PDF Architect 2
ImagePath: "C:\Program Files (x86)\PDF Architect 2\ws.exe"
C:\Program Files (x86)\PDF Architect 2\ws.exe (verified signer: [pdfforge GmbH])
1771560 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
----------
Key: PDF Architect 2 Creator
ImagePath: "C:\Program Files (x86)\PDF Architect 2\creator-ws.exe"
C:\Program Files (x86)\PDF Architect 2\creator-ws.exe (verified signer: [pdfforge GmbH])
738856 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
----------
Key: pdfforge CrashHandler
ImagePath: "C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe"
C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe (verified signer: [pdfforge GmbH])
861736 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
----------
Key: Service Mgr PositiveFinds
ImagePath: "C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugincontainer.exe"
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugincontainer.exe (verified signer: [Positive Finds])
577272 bytes
Created: 05.02.2015 05:49
Modified: 12.02.2015 01:33
Company:
----------
----------
Key: SkypeUpdate
ImagePath: "C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\Program Files (x86)\Skype\Updater\Updater.exe (verified signer: [Skype Software Sarl])
-R- 315496 bytes
Created: 11.12.2014 10:30
Modified: 11.12.2014 10:30
Company: Skype Technologies
----------
----------
Key: TuneUp.UtilitiesSvc
ImagePath: "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe"
C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (verified signer: [AVG Netherlands B.V.])
2145080 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
----------
----------
Key: TuneUpUtilitiesDrv
ImagePath: \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys
C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys
14112 bytes
Created: 23.06.2014 08:44
Modified: 23.06.2014 08:44
Company: TuneUp Software
----------
----------
Key: Update Mgr PositiveFinds
ImagePath: "C:\Program Files (x86)\Common Files\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\updater.exe"
C:\Program Files (x86)\Common Files\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\updater.exe (verified signer: [Positive Finds])
384760 bytes
Created: 05.02.2015 04:49
Modified: 12.02.2015 01:33
Company:
----------
----------
Key: X5XSEx
ImagePath: \??\C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys
C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys
55400 bytes
Created: 31.07.2011 13:00
Modified: 22.11.2010 08:25
Company: Exent Technologies Ltd.
----------
----------
Key: X5XSEx_Pr146
ImagePath: \??\C:\Program Files (x86)\GameTreat Player\X5XSEx.Sys
C:\Program Files (x86)\GameTreat Player\X5XSEx.Sys
55328 bytes
Created: 15.01.2012 15:12
Modified: 10.03.2010 20:02
Company: Exent Technologies Ltd.
----------
************************************************************
18:50:58: Scanning -----VXD ENTRIES-----
************************************************************
18:50:58: Scanning ----- ContextMenuHandlers -----
Key: Adobe.Acrobat.ContextMenu
CLSID: {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}
Path: C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll
577536 bytes
Created: 14.12.2004 03:11
Modified: 14.12.2004 03:11
Company: Adobe Systems Inc.
----------
Key: Kaspersky Anti-Virus 15.0.0
CLSID: {BD8BB16E-84EC-485E-8F58-9BD1FEFB8EE2}
Path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\shellex.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\shellex.dll (verified signer: [Kaspersky Lab])
154784 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
----------
Key: PDFManagerExt
CLSID: {59E4A616-E484-44B5-95FB-7F430B35E8FE}
Path: C:\Program Files (x86)\PDF Architect 2\creator-context-menu.dll
C:\Program Files (x86)\PDF Architect 2\creator-context-menu.dll (verified signer: [pdfforge GmbH])
321576 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
Key: TuneUp Shredder Shell Extension
CLSID: {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}
Path: C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-win32.dll
C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-win32.dll (verified signer: [AVG Netherlands B.V.])
32568 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
----------
************************************************************
18:51:00: Scanning ----- Folder\ColumnHandlers -----
Key: {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}
File: "C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll"
C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
401920 bytes
Created: 19.05.2010 15:37
Modified: 19.05.2010 15:37
Company: OpenOffice.org
----------
Key: {F9DB5320-233E-11D1-9F84-707F02C10627}
File: C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
110592 bytes
Created: 14.12.2004 02:20
Modified: 14.12.2004 02:20
Company: Adobe Systems, Inc.
----------
************************************************************
18:51:00: Scanning ----- 64-Bit ContextMenuHandlers -----
Key: Kaspersky Anti-Virus 15.0.0
CLSID: {BD8BB16E-84EC-485E-8F58-9BD1FEFB8EE2}
Path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\shellex.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\shellex.dll (verified signer: [Kaspersky Lab])
245408 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
----------
Key: TuneUp Shredder Shell Extension
CLSID: {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}
Path: C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-x64.dll
C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-x64.dll (verified signer: [AVG Netherlands B.V.])
32056 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
----------
************************************************************
18:51:01: Scanning ----- 64-Bit Folder\ColumnHandlers -----
Key: {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}
File: "C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll"
C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll
830464 bytes
Created: 19.05.2010 15:41
Modified: 19.05.2010 15:41
Company: OpenOffice.org
----------
************************************************************
18:51:01: Scanning ----- Browser Helper Objects -----
Key: {02478D38-C3F9-4efb-9B51-7695ECA05670}
BHO: C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (verified signer: [Yahoo! Inc.])
882416 bytes
Created: 28.07.2008 11:47
Modified: 28.07.2008 11:47
Company: Yahoo! Inc.
----------
Key: {0347C33E-8762-4905-BF09-768834316C61}
BHO: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (verified signer: [Hewlett-Packard Company])
328248 bytes
Created: 20.09.2009 12:15
Modified: 20.09.2009 12:15
Company: Hewlett-Packard Co.
----------
Key: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
BHO: C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (verified signer: [Adobe Systems, Incorporated])
63136 bytes
Created: 14.12.2004 01:56
Modified: 14.12.2004 01:56
Company: Adobe Systems Incorporated
----------
Key: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01}
BHO: C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (verified signer: [McAfee, Inc.])
96128 bytes
Created: 09.04.2014 14:12
Modified: 09.04.2014 14:12
Company: McAfee, Inc.
----------
Key: {17166733-40EA-4432-A85C-AE672FF0E236}
BHO: C:\ProgramData\1und1InternetExplorerAddon\BHOXML.dll
C:\ProgramData\1und1InternetExplorerAddon\BHOXML.dll (verified signer: [1&1 Mail & Media GmbH])
163936 bytes
Created: 11.05.2011 16:36
Modified: 11.05.2011 16:36
Company: 1&1 Mail & Media GmbH
----------
Key: {1dad3af3-ef2f-4f64-ac4b-11789189fcb6}
BHO: C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (verified signer: [Microsoft Corporation])
1431712 bytes
Created: 11.03.2014 22:36
Modified: 11.03.2014 22:36
Company: Microsoft Corporation.
----------
Key: {30c85a3d-1d96-4589-b63f-91fb7ef45a41}
BHO: C:\Program Files (x86)\Positive Finds\Extensions\30c85a3d-1d96-4589-b63f-91fb7ef45a41.dll
C:\Program Files (x86)\Positive Finds\Extensions\30c85a3d-1d96-4589-b63f-91fb7ef45a41.dll (verified signer: [Positive Finds])
145656 bytes
Created: 05.02.2015 08:00
Modified: 05.02.2015 08:00
Company:
----------
Key: {30F9B915-B755-4826-820B-08FBA6BD249D}
BHO: C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (verified signer: [Conduit Ltd.])
175912 bytes
Created: 02.05.2011 17:37
Modified: 17.01.2011 15:54
Company: Conduit Ltd.
----------
Key: {31ad400d-1b06-4e33-a59a-90c2c140cba0}
BHO: mscoree.dll
C:\Windows\SysWoW64\mscoree.dll (verified signer: [Microsoft Windows])
297808 bytes
Created: 09.06.2011 10:27
Modified: 05.11.2010 02:58
Company: Microsoft Corporation
----------
Key: {326E768D-4182-46FD-9C16-1449A49795F4}
BHO: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (verified signer: [DivX, LLC])
3118976 bytes
Created: 08.02.2011 01:17
Modified: 08.02.2011 01:17
Company: DivX, LLC
----------
Key: {4F524A2D-5350-4500-76A7-7A786E7484D7}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll (verified signer: [APN LLC])
12184 bytes
Created: 31.01.2015 00:53
Modified: 31.01.2015 00:53
Company: APN LLC.
----------
Key: {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (verified signer: [Kaspersky Lab])
709312 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {691B33B0-B86E-47F3-81C7-56E4FE3B929C}
BHO: C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll
C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll (verified signer: [pdfforge GmbH])
37928 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
Key: {73455575-E40C-433C-9784-C78DC7761455}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (verified signer: [Kaspersky Lab])
1152808 bytes
Created: 20.04.2014 01:42
Modified: 23.11.2014 17:20
Company: Kaspersky Lab ZAO
----------
Key: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
BHO: C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (verified signer: [Oracle America, Inc.])
460712 bytes
Created: 12.02.2015 17:56
Modified: 12.02.2015 17:56
Company: Oracle Corporation
----------
Key: {79a2b609-bbc0-4d16-9925-70cb98a6490d}
BHO: C:\Program Files (x86)\Die_FreeRide_Games_Bar\prxtbDie_.dll
C:\Program Files (x86)\Die_FreeRide_Games_Bar\prxtbDie_.dll (verified signer: [Conduit Ltd.])
176936 bytes
Created: 09.05.2011 10:49
Modified: 09.05.2011 10:49
Company: Conduit Ltd.
----------
Key: {872b5b88-9db5-4310-bdd0-ac189557e5f5}
BHO: C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (verified signer: [Conduit Ltd.])
175912 bytes
Created: 28.07.2011 17:55
Modified: 17.01.2011 15:54
Company: Conduit Ltd.
----------
Key: {9030D464-4C02-4ABF-8ECC-5164760863C6}
BHO: C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (verified signer: [Microsoft Corporation])
408448 bytes
Created: 22.01.2009 15:41
Modified: 22.01.2009 15:41
Company: Microsoft Corporation
----------
Key: {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (verified signer: [Kaspersky Lab])
480448 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {AA58ED58-01DD-4d91-8333-CF10577473F7}
BHO: C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (verified signer: [Google Inc])
194504 bytes
Created: 08.09.2010 14:51
Modified: 28.03.2014 14:07
Company: Google Inc.
----------
Key: {AE7CD045-E861-484f-8273-0445EE161910}
BHO: C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
225280 bytes
Created: 14.12.2004 02:13
Modified: 14.12.2004 02:13
Company: Adobe Systems Incorporated
----------
Key: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
BHO: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (verified signer: [Skype Technologies SA])
4296864 bytes
Created: 02.03.2012 10:51
Modified: 02.03.2012 10:51
Company: Skype Technologies S.A.
----------
Key: {BF42D4A8-016E-4fcd-B1EB-837659FD77C6}
BHO: C:\Program Files (x86)\GMX Toolbar\IE\uitb.dll
C:\Program Files (x86)\GMX Toolbar\IE\uitb.dll (verified signer: [1&1 Mail & Media GmbH])
1579104 bytes
Created: 02.02.2012 19:32
Modified: 02.02.2012 19:32
Company: 1und1 Mail und Media GmbH
----------
Key: {D4027C7F-154A-4066-A1AD-4243D8127440}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport.dll (verified signer: [APN LLC])
12184 bytes
Created: 30.10.2014 17:56
Modified: 30.10.2014 17:56
Company: APN LLC.
----------
Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
BHO: C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (verified signer: [Oracle America, Inc.])
172968 bytes
Created: 12.02.2015 17:56
Modified: 12.02.2015 17:56
Company: Oracle Corporation
----------
Key: {E33CF602-D945-461A-83F0-819F76A199F8}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (verified signer: [Kaspersky Lab])
891072 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {f92a9fe4-2850-4198-b9d5-279880e49b16}
BHO: C:\Program Files (x86)\A_Free_Ride_Games_Bar\prxtbA_Fr.dll
C:\Program Files (x86)\A_Free_Ride_Games_Bar\prxtbA_Fr.dll (verified signer: [Conduit Ltd.])
175912 bytes
Created: 31.07.2011 13:00
Modified: 17.01.2011 15:54
Company: Conduit Ltd.
----------
Key: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
BHO: C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (verified signer: [Yahoo! Inc.])
160496 bytes
Created: 28.07.2008 11:47
Modified: 28.07.2008 11:47
Company: Yahoo! Inc
----------
Key: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}
BHO: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (verified signer: [Hewlett-Packard Company])
509496 bytes
Created: 20.09.2009 12:15
Modified: 20.09.2009 12:15
Company: Hewlett-Packard Co.
----------
************************************************************
18:51:11: Scanning ----- 64-Bit Browser Helper Objects -----
Key: {1dad3af3-ef2f-4f64-ac4b-11789189fcb6}
BHO: C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (verified signer: [Microsoft Corporation])
1154720 bytes
Created: 11.03.2014 22:30
Modified: 11.03.2014 22:30
Company: Microsoft Corporation.
----------
Key: {31ad400d-1b06-4e33-a59a-90c2c140cba0}
BHO: mscoree.dll
C:\Windows\System32\mscoree.dll (verified signer: [Microsoft Windows])
444752 bytes
Created: 09.06.2011 10:27
Modified: 05.11.2010 02:57
Company: Microsoft Corporation
----------
Key: {4F524A2D-5350-4500-76A7-7A786E7484D7}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll (verified signer: [APN LLC])
13720 bytes
Created: 31.01.2015 00:53
Modified: 31.01.2015 00:53
Company: APN LLC.
----------
Key: {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (verified signer: [Kaspersky Lab])
878784 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {73455575-E40C-433C-9784-C78DC7761455}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (verified signer: [Kaspersky Lab])
1428264 bytes
Created: 20.04.2014 01:42
Modified: 23.11.2014 17:20
Company: Kaspersky Lab ZAO
----------
Key: {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (verified signer: [Kaspersky Lab])
583360 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {AA58ED58-01DD-4d91-8333-CF10577473F7}
BHO: C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (verified signer: [Google Inc])
256456 bytes
Created: 08.09.2010 14:52
Modified: 28.03.2014 14:08
Company: Google Inc.
----------
Key: {BF42D4A8-016E-4fcd-B1EB-837659FD77C6}
BHO: C:\Program Files\GMX Toolbar\IE\uitb.dll
C:\Program Files\GMX Toolbar\IE\uitb.dll (verified signer: [1&1 Mail & Media GmbH])
1973344 bytes
Created: 02.02.2012 19:32
Modified: 02.02.2012 19:32
Company: 1und1 Mail und Media GmbH
----------
Key: {D4027C7F-154A-4066-A1AD-4243D8127440}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport_x64.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport_x64.dll (verified signer: [APN LLC])
13720 bytes
Created: 30.10.2014 17:56
Modified: 30.10.2014 17:56
Company: APN LLC.
----------
Key: {E33CF602-D945-461A-83F0-819F76A199F8}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (verified signer: [Kaspersky Lab])
1109696 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
************************************************************
18:51:15: Scanning ----- ShellServiceObjectDelayLoad Entries -----
************************************************************
18:51:15: Scanning ----- 64-Bit ShellServiceObjectDelayLoad Entries -----
************************************************************
18:51:15: Scanning ----- ShellServiceObjects -----
************************************************************
18:51:18: Scanning ----- 64-Bit ShellServiceObjects -----
************************************************************
18:51:21: Scanning ----- SHAREDTASKSCHEDULER ENTRIES -----
No SharedTaskScheduler entries found to scan
************************************************************
18:51:21: Scanning ----- IMAGEFILE DEBUGGERS -----
No "Debugger" entries found.
************************************************************
18:51:21: Scanning ----- APPINIT_DLLS -----
No AppInit_DLLs value found to check
************************************************************
18:51:21: Scanning ----- 64-Bit APPINIT_DLLS -----
No 64-Bit AppInit_DLLs value found to check
************************************************************
18:51:21: Scanning ----- SECURITY PROVIDER DLLS -----
************************************************************
18:51:21: Scanning ----- CREDENTIAL PROVIDERS -----
************************************************************
18:51:24: Scanning ------ COMMON STARTUP GROUP ------
[C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup]
The Common Startup Group attempts to load the following file(s) at boot time:
Adobe Acrobat - Schnellstart.lnk - links to [C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe]
C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe
-R- 25214 bytes
Created: 24.01.2015 15:49
Modified: 24.01.2015 15:49
Company: [no info]
--------------------
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-HS- 174 bytes
Created: 14.07.2009 05:54
Modified: 14.07.2009 05:54
Company: [no info]
--------------------
HP Digital Imaging Monitor.lnk - links to [C:\PROGRA~2\hp\DIGITA~1\bin\hpqtra08.exe]
C:\PROGRA~2\hp\DIGITA~1\bin\hpqtra08.exe
270336 bytes
Created: 20.09.2009 12:36
Modified: 20.09.2009 12:36
Company: Hewlett-Packard Co.
--------------------
McAfee Security Scan Plus.lnk - links to [C:\PROGRA~1\MCAFEE~1\385C9A~1.150\SSSCHE~1.EXE]
C:\PROGRA~1\MCAFEE~1\385C9A~1.150\SSSCHE~1.EXE (verified signer: [McAfee, Inc.])
332016 bytes
Created: 09.04.2014 14:14
Modified: 09.04.2014 14:14
Company: McAfee, Inc.
--------------------
vpngui.exe.lnk - links to [C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe]
C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe
-R- 5120 bytes
Created: 24.10.2011 17:33
Modified: 24.10.2011 17:33
Company: [no info]
--------------------
************************************************************
18:51:25: Scanning ----- USER STARTUP GROUPS -----
Checking Startup Group for: ola
[C:\Users\ola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup]
Adobe Gamma.lnk - links to [C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE
113664 bytes
Created: 16.03.2005 19:16
Modified: 16.03.2005 19:16
Company: Adobe Systems, Inc.
----------
C:\Users\ola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-HS- 174 bytes
Created: 08.09.2010 14:37
Modified: 18.08.2014 08:29
Company: [no info]
----------
OpenOffice.org 3.2.lnk - links to [C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE
1195008 bytes
Created: 20.05.2010 12:14
Modified: 20.05.2010 12:14
Company: [no info]
----------
--------------------
************************************************************
18:51:26: Scanning ----- SCHEDULED TASKS -----
Taskname: {440C16AE-EFF7-4451-9E33-E04BFA205354}
File: C:\Users\ola\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ola\AppData\Local\Google\Chrome\Application\chrome.exe (verified signer: [Google Inc])
843592 bytes
Created: 16.10.2010 19:21
Modified: 04.02.2015 10:02
Company: Google Inc.
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: {5F0472E8-4636-4748-8486-5A34D579AEB8}
File: C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe (verified signer: [Skype Software Sarl])
-R- 30877280 bytes
Created: 11.12.2014 11:20
Modified: 11.12.2014 11:20
Company: Skype Technologies S.A.
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator: SkypeSetupLight
Comments:
----------
Taskname: 1und1 Konfiguration
File: C:\ProgramData\1und1InternetExplorerAddon\ConfigTask.exe
C:\ProgramData\1und1InternetExplorerAddon\ConfigTask.exe (verified signer: [1&1 Mail & Media GmbH])
193632 bytes
Created: 19.04.2011 13:26
Modified: 19.04.2011 13:26
Company: 1und1 Mail und Media GmbH
Schedule: At 09:55:54 every day
Next Run Time: 13.02.2015 09:55:54
Status: Ready
Creator: 1und1
Comments:
----------
Taskname: Adobe Flash Player Updater
File: C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (verified signer: [Adobe Systems Incorporated])
267440 bytes
Created: 27.02.2013 22:11
Modified: 05.02.2015 12:36
Company: Adobe Systems Incorporated
Schedule: At 01:35:00 every day
Next Run Time: 12.02.2015 19:35:00
Status: Ready
Creator: Adobe Systems Incorporated
Comments: Mit diesem Task ist Ihre Flash Player-Installation immer aktuell und verwendet die neuesten Verbesserungen und Sicherheits-Fixes. Wenn dieser Task deaktiviert oder entfernt wird, kann Adobe Flash Player Ihren Computer nicht automatisch mit den neuesten Sicherheits-Fixes sichern.
----------
Taskname: CLMLSvc
File: c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (verified signer: [CyberLink])
210216 bytes
Created: 22.10.2009 18:50
Modified: 22.10.2009 18:50
Company: CyberLink
Schedule: At logon
Next Run Time:
Status: Running
Creator: CyberLink
Comments:
----------
Taskname: CreateChoiceProcessTask
File: C:\Windows\System32\browserchoice.exe
C:\Windows\System32\browserchoice.exe
294912 bytes
Created: 09.09.2010 19:44
Modified: 23.02.2010 09:16
Company: Microsoft Corporation
Parameters: /launch
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator: BrowserChoice
Comments:
----------
Taskname: DVDAgent
File: c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
Schedule: At logon
Next Run Time:
Status: Ready
Creator: CyberLink
Comments:
c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe - [file not found to scan]
----------
Taskname: ExtendedServicePlan
File: C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe (verified signer: [Hewlett-Packard Company])
26680 bytes
Created: 05.02.2010 19:19
Modified: 20.10.2009 10:58
Company:
Parameters: ExtendedServicePlan ShowMessageTask
Schedule: At 00:00:00 on 08.08.2011
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: GoogleUpdateTaskMachineCore
File: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 08.09.2010 14:51
Modified: 23.10.2014 11:33
Company: Google Inc.
Parameters: /c
Schedule: Multiple schedule times
Next Run Time: 13.02.2015 10:50:00
Status: Ready
Creator: SYSTEM
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: GoogleUpdateTaskMachineUA
File: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 08.09.2010 14:51
Modified: 23.10.2014 11:33
Company: Google Inc.
Parameters: /ua /installsource scheduler
Schedule: At 10:50:00 every day
Next Run Time: 12.02.2015 19:50:00
Status: Ready
Creator: SYSTEM
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: GoogleUpdateTaskUserS-1-5-21-107307583-39740663-3650351078-1001Core
File: C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 16.10.2010 19:21
Modified: 19.10.2014 15:09
Company: Google Inc.
Parameters: /c
Schedule: At 13:26:00 every day
Next Run Time: 13.02.2015 13:26:00
Status: Ready
Creator: ola
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: GoogleUpdateTaskUserS-1-5-21-107307583-39740663-3650351078-1001UA
File: C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 16.10.2010 19:21
Modified: 19.10.2014 15:09
Company: Google Inc.
Parameters: /ua /installsource scheduler
Schedule: At 13:26:00 every day
Next Run Time: 12.02.2015 19:26:00
Status: Ready
Creator: ola
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: Norton Security Scan for ola
File: C:\PROGRA~2\NORTON~2\Engine\351~1.8\Nss.exe
C:\PROGRA~2\NORTON~2\Engine\351~1.8\Nss.exe (verified signer: [Symantec Corporation])
641464 bytes
Created: 12.11.2011 19:29
Modified: 03.04.2012 01:45
Company: Symantec Corporation
Parameters: /scan-quick /scheduled
Schedule: At 17:15:00 every Sonntag, Montag, Dienstag, Mittwoch, Donnerstag, Freitag, Samstag of every week, starting 12.11.2011
Next Run Time: 13.02.2015 17:15:00
Status: Ready
Creator: ola
Comments: Norton Security Scan
----------
Taskname: PCDRScheduledMaintenance
File: C:\Program Files\PC-Doctor for Windows\pcdrcui.exe
C:\Program Files\PC-Doctor for Windows\pcdrcui.exe (verified signer: [PC-Doctor, Inc.])
147440 bytes
Created: 18.09.2009 08:11
Modified: 18.09.2009 08:11
Company: PC-Doctor, Inc.
Parameters: -fh scripts\monthly.xml -st PCDRScheduledMaintenance
Schedule: Multiple schedule times
Next Run Time: 28.02.2015 10:00:00
Status: Ready
Creator: PC-Doctor
Comments:
----------
Taskname: RecoveryCDWin7
File: C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe (verified signer: [Hewlett-Packard Company])
26680 bytes
Created: 05.02.2010 19:19
Modified: 20.10.2009 10:58
Company:
Parameters: RecoveryCDWin7 ShowMessageTask
Schedule: At 00:00:00 every 14 days
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: Registration 1und1 Task
File: C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe
C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe (verified signer: [ITSCM - IT Solution Center Muenchen GmbH])
588656 bytes
Created: 08.06.2011 13:23
Modified: 08.06.2011 13:23
Company: 1&1 Mail & Media GmbH
Schedule: Multiple schedule times
Next Run Time: 13.02.2015 09:56:00
Status: Ready
Creator: 1und1
Comments:
----------
Taskname: ServicePlan
File: C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe (verified signer: [Hewlett-Packard Company])
26680 bytes
Created: 05.02.2010 19:19
Modified: 20.10.2009 10:58
Company:
Parameters: ServicePlan ShowMessageTask15D
Schedule: At 00:00:00 on 23.09.2010
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: SidebarExecute
File: C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe (verified signer: [Microsoft Windows])
1475584 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: TuneUpUtilities_Task_BkGndMaintenance2013
File: C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe
C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe (verified signer: [AVG Netherlands B.V.])
459576 bytes
Created: 16.07.2014 10:22
Modified: 16.07.2014 10:22
Company: TuneUp Software
Parameters: $(Arg0)
Schedule: Task not scheduled
Next Run Time:
Status: Running
Creator:
Comments:
----------
************************************************************
18:51:33: Scanning ----- SHELLICONOVERLAYIDENTIFIERS -----
************************************************************
18:51:34: Scanning ----- DEVICE DRIVER ENTRIES -----
Value: msacm.l3acm
File: C:\Windows\SysWOW64\l3codeca.acm
C:\Windows\SysWOW64\l3codeca.acm
64000 bytes
Created: 14.07.2009 01:07
Modified: 14.07.2009 02:14
Company: Fraunhofer Institut Integrierte Schaltungen IIS
----------
Value: msacm.l3codecp
File: l3codecp.acm
C:\Windows\SysWoW64\l3codecp.acm
220672 bytes
Created: 14.07.2009 01:09
Modified: 14.07.2009 02:14
Company: Fraunhofer Institut Integrierte Schaltungen IIS
----------
************************************************************
18:51:35: ----- ADDITIONAL CHECKS -----
Heuristic checks for hidden files/drivers completed
----------
Layered Service Provider entries checks completed
----------
Windows Explorer Policies checks completed
----------
Desktop Wallpaper: C:\Users\ola\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
C:\Users\ola\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
988938 bytes
Created: 08.09.2010 14:37
Modified: 09.09.2011 13:58
Company: [no info]
----------
Web Desktop Wallpaper entry is blank
----------
Checks for rogue DNS NameServers completed
----------
Checks for Backdoor.ZeroAccess completed
----------
Safe Mode checks completed
Additional checks completed
************************************************************
18:51:36: Scanning ----- RUNNING PROCESSES -----
C:\Windows\System32\smss.exe
112640 bytes
Created: 17.09.2013 07:29
Modified: 02.08.2013 01:59
Company: Microsoft Corporation
--------------------
C:\Windows\System32\csrss.exe
7680 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\wininit.exe
129024 bytes
Created: 14.07.2009 00:52
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\services.exe
328704 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\winlogon.exe
455168 bytes
Created: 17.10.2014 09:26
Modified: 17.07.2014 03:07
Company: Microsoft Corporation
--------------------
C:\Windows\System32\lsass.exe
31232 bytes
Created: 14.05.2014 13:51
Modified: 12.04.2014 03:19
Company: Microsoft Corporation
--------------------
C:\Windows\System32\lsm.exe
343040 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:24
Company: Microsoft Corporation
--------------------
C:\Windows\System32\svchost.exe
27136 bytes
Created: 14.07.2009 00:31
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\atiesrxx.exe
202752 bytes
Created: 06.02.2010 03:39
Modified: 02.12.2009 13:18
Company: AMD
--------------------
C:\Windows\System32\atieclxx.exe
446976 bytes
Created: 06.02.2010 03:39
Modified: 02.12.2009 13:19
Company: AMD
--------------------
C:\Windows\System32\spoolsv.exe
559104 bytes
Created: 15.08.2012 10:05
Modified: 11.02.2012 07:36
Company: Microsoft Corporation
--------------------
C:\Windows\SysWOW64\svchost.exe
20992 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:14
Company: Microsoft Corporation
C:\Windows\SysWOW64\svchost.exe
20992 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:14
Company: Microsoft Corporation
C:\Windows\System32\dwm.exe
120320 bytes
Created: 14.07.2009 00:37
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\taskhost.exe
68608 bytes
Created: 21.03.2013 10:00
Modified: 23.11.2012 04:13
Company: Microsoft Corporation
--------------------
C:\Windows\System32\wbem\WmiPrvSE.exe
372736 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe
270336 bytes
Created: 20.09.2009 12:36
Modified: 20.09.2009 12:36
Company: Hewlett-Packard Co.
--------------------
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
332016 bytes
Created: 09.04.2014 14:14
Modified: 09.04.2014 14:14
Company: McAfee, Inc.
--------------------
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
11318784 bytes
Created: 20.05.2010 23:59
Modified: 20.05.2010 23:59
Company: OpenOffice.org
--------------------
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
11312128 bytes
Created: 20.05.2010 23:59
Modified: 20.05.2010 23:59
Company: OpenOffice.org
--------------------
C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
656896 bytes
Created: 25.08.2009 03:11
Modified: 25.08.2009 03:11
Company: Hewlett-Packard
--------------------
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
309824 bytes
Created: 03.11.2011 19:54
Modified: 25.08.2010 11:27
Company: ArcSoft Inc.
--------------------
C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
2040120 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
--------------------
C:\Windows\System32\taskeng.exe
464384 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
C:\Windows\System32\wbem\unsecapp.exe
47104 bytes
Created: 14.07.2009 00:47
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\4\Plugin.exe
400120 bytes
Created: 11.02.2015 19:33
Modified: 11.02.2015 19:33
Company:
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\8\Plugin.exe
508152 bytes
Created: 12.02.2015 06:33
Modified: 12.02.2015 06:33
Company:
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\3\Plugin.exe
701176 bytes
Created: 12.02.2015 07:33
Modified: 12.02.2015 07:33
Company:
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\5\Plugin.exe
518904 bytes
Created: 11.02.2015 19:33
Modified: 11.02.2015 19:33
Company:
--------------------
C:\Windows\System32\SearchIndexer.exe
591872 bytes
Created: 29.06.2011 09:24
Modified: 04.05.2011 06:19
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
65536 bytes
Created: 22.04.2009 17:38
Modified: 22.04.2009 17:38
Company: Advanced Micro Devices Inc.
--------------------
C:\Windows\System32\WUDFHost.exe
229888 bytes
Created: 16.11.2012 19:48
Modified: 26.07.2012 04:08
Company: Microsoft Corporation
--------------------
C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
42856 bytes
Created: 09.06.2011 10:26
Modified: 05.11.2010 02:53
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqste08.exe
168960 bytes
Created: 20.09.2009 12:07
Modified: 20.09.2009 12:07
Company: Hewlett-Packard Co.
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqbam08.exe
559104 bytes
Created: 20.09.2009 12:07
Modified: 20.09.2009 12:07
Company: Hewlett-Packard Co.
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqgpc01.exe
362496 bytes
Created: 21.05.2009 18:57
Modified: 21.05.2009 18:57
Company: Hewlett-Packard
--------------------
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
65536 bytes
Created: 22.04.2009 17:37
Modified: 22.04.2009 17:37
Company: ATI Technologies Inc.
--------------------
C:\Program Files\Windows Media Player\wmpnetwk.exe
1525248 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
192160 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
--------------------
C:\Windows\servicing\TrustedInstaller.exe
194048 bytes
Created: 09.06.2011 10:26
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
C:\Windows\System32\wuauclt.exe
58336 bytes
Created: 31.08.2014 10:08
Modified: 14.05.2014 17:23
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
247968 bytes
Created: 11.03.2014 22:36
Modified: 11.03.2014 22:36
Company: Microsoft Corporation.
--------------------
C:\Program Files (x86)\Trojan Remover\Rmvtrjan.exe
FileSize: 5484896
[This is a Trojan Remover component]
--------------------
--------------------
C:\Windows\System32\SearchProtocolHost.exe
249856 bytes
Created: 29.06.2011 09:24
Modified: 04.05.2011 06:19
Company: Microsoft Corporation
--------------------
C:\Windows\System32\SearchFilterHost.exe
113664 bytes
Created: 29.06.2011 09:24
Modified: 04.05.2011 06:19
Company: Microsoft Corporation
--------------------
************************************************************
18:51:47: Checking HOSTS file
No malicious entries were found in the HOSTS file
************************************************************
18:51:48: Checking ----- ROGUE BROWSER MODIFICATIONS -----
************************************************************
------ INTERNET EXPLORER HOME/START/SEARCH SETTINGS ------
HKLM\Software\Microsoft\Internet Explorer\Main\"Start Page":
hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main\"Local Page":
C:\Windows\SysWOW64\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main\"Search Page":
hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Page_URL":
hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Search_URL":
hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKCU\Software\Microsoft\Internet Explorer\Main\"Start Page":
hxxp://www.search.ask.com/?tpid=ORJ-SPE&o=APN11412&pf=V7&trgb=CR&p2=%5EBBK%5EOSJ000%5EYY%5EDE&gct=hp&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=cr_37.0.2062.120&apn_uid=E5F992F8-2029-4972-9D8F-8C5D058ACD21&itbv=12.15.5.30&doi=2014-09-15&psv=&pt=tb
HKCU\Software\Microsoft\Internet Explorer\Main\"Local Page":
C:\Windows\system32\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main\"Search Page":
hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=01ff5193-73d3-475b-a8f9-3b78739c5878&searchtype=ds&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main\"Default_Page_URL":
hxxp://go.gmx.net/br/ie9_startpage
************************************************************
=== NO CHANGES HAVE BEEN MADE TO YOUR SYSTEM FILES ===
Scan completed at: 18:51:48 12 Feb 2015
Total Scan time: 00:02:21
************************************************************
***** NORMAL SCAN FOR ACTIVE MALWARE *****
Trojan Remover Ver 6.9.1.2932. For information, email support@simplysup.com
[Unregistered version]
Scan started at: 18:05:20 12 Feb 2015
Using Database v8517
Operating System: Windows 7 x64 Home Premium (SP1) [Build: 6.1.7601]
File System: NTFS
UAC is ENABLED [default level]
[Secure Desktop Prompt is DISABLED]
UserData directory: C:\Users\ola\AppData\Roaming\Simply Super Software\Trojan Remover\
Database directory: C:\ProgramData\Simply Super Software\Trojan Remover\Data\
Logfile directory: C:\Users\ola\Documents\Simply Super Software\Trojan Remover Logfiles\
Program directory: C:\Program Files (x86)\Trojan Remover\
Running with Administrator privileges
************************************************************
18:05:22: ----- Checking Default File Associations -----
No modified default file associations detected
************************************************************
18:05:22: ----- SCANNING FOR ROOTKIT SERVICES -----
No hidden Services were detected.
************************************************************
18:05:24: Scanning ----- Windows Registry -----
--------------------
Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
This key's "Shell" value calls the following program(s):
Key value: [explorer.exe]
File: C:\Windows\Explorer.exe
C:\Windows\Explorer.exe (verified signer: [Microsoft Windows])
2871808 bytes
Created: 27.04.2011 12:30
Modified: 25.02.2011 07:19
Company: Microsoft Corporation
----------
This key's "Userinit" value calls the following program(s):
Key value: [C:\Windows\system32\userinit.exe,]
File: C:\Windows\system32\userinit.exe
C:\Windows\System32\userinit.exe (verified signer: [Microsoft Windows])
30720 bytes
Created: 09.06.2011 10:26
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
----------
--------------------
Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: [hpsysdrv]
Value Data: [c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe]
c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe (verified signer: [Hewlett-Packard Company])
62768 bytes
Created: 20.11.2008 10:47
Modified: 20.11.2008 10:47
Company: Hewlett-Packard
--------------------
Value Name: [HP Remote Solution]
Value Data: [%ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe]
C:\Program Files\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe - [file not found to scan]
--------------------
Value Name: [IAStorIcon]
Value Data: [C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe]
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (verified signer: [Intel Corporation])
284696 bytes
Created: 05.02.2010 19:03
Modified: 02.10.2009 12:26
Company: Intel Corporation
--------------------
Value Name: [StartCCC]
Value Data: ["C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
98304 bytes
Created: 01.12.2009 22:39
Modified: 01.12.2009 22:39
Company: Advanced Micro Devices, Inc.
--------------------
Value Name: [HP Software Update]
Value Data: [c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe]
c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe (verified signer: [Hewlett-Packard Company])
54576 bytes
Created: 08.12.2008 14:50
Modified: 08.12.2008 14:50
Company: Hewlett-Packard
--------------------
Value Name: [Easybits Recovery]
Value Data: [C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe]
C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (verified signer: [EasyBits Software AS])
60464 bytes
Created: 02.09.2009 12:00
Modified: 02.09.2009 12:00
Company: EasyBits Software AS
--------------------
Value Name: [hpqSRMon]
Value Data: [C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe]
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
150528 bytes
Created: 22.07.2008 18:33
Modified: 22.07.2008 18:33
Company: Hewlett-Packard
--------------------
Value Name: [GrooveMonitor]
Value Data: ["C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (verified signer: [Microsoft Corporation])
30040 bytes
Created: 26.02.2009 18:36
Modified: 26.02.2009 18:36
Company: Microsoft Corporation
--------------------
Value Name: [DivXUpdate]
Value Data: ["C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (verified signer: [DivX, LLC])
1230704 bytes
Created: 21.03.2011 19:56
Modified: 21.03.2011 19:56
Company:
--------------------
Value Name: [ArcSoft Connection Service]
Value Data: [C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe]
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (verified signer: [ArcSoft, Inc.])
207424 bytes
Created: 03.11.2011 19:54
Modified: 27.10.2010 19:17
Company: ArcSoft Inc.
--------------------
Value Name: [Nikon Transfer Monitor]
Value Data: [C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe]
C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
479232 bytes
Created: 15.09.2009 18:47
Modified: 15.09.2009 18:47
Company: Nikon Corporation
--------------------
Value Name: [Adobe Reader Speed Launcher]
Value Data: ["C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"]
C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (verified signer: [Adobe Systems, Incorporated])
40368 bytes
Created: 31.08.2011 02:57
Modified: 31.08.2011 02:57
Company: Adobe Systems Incorporated
--------------------
Value Name: [Adobe ARM]
Value Data: ["C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (verified signer: [Adobe Systems, Incorporated])
-R- 937920 bytes
Created: 29.03.2011 21:59
Modified: 29.03.2011 21:59
Company: Adobe Systems Incorporated
--------------------
Value Name: [ApnTBMon]
Value Data: ["C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"]
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (verified signer: [APN LLC])
1934744 bytes
Created: 31.01.2015 00:53
Modified: 31.01.2015 00:53
Company: APN
--------------------
Value Name: [KiesTrayAgent]
Value Data: [C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (verified signer: [Samsung Electronics CO., LTD.])
311616 bytes
Created: 14.06.2014 12:30
Modified: 25.07.2014 09:42
Company: Samsung Electronics Co., Ltd.
--------------------
Value Name: [Acrobat Assistant 7.0]
Value Data: ["C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"]
C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
483328 bytes
Created: 14.12.2004 02:12
Modified: 14.12.2004 02:12
Company: Adobe Systems Inc.
--------------------
Value Name: [TrojanScanner]
Value Data: [C:\Program Files (x86)\Trojan Remover\Trjscan.exe /boot]
C:\Program Files (x86)\Trojan Remover\Trjscan.exe (verified signer: [Simply Super Software])
1791856 bytes
Created: 12.02.2015 18:04
Modified: 16.10.2014 16:00
Company: Simply Super Software
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
This Registry key appears to be empty
--------------------
Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Value Name: [HPADVISOR]
Value Data: [C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW]
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe (verified signer: [Hewlett-Packard Company])
1685048 bytes
Created: 29.09.2009 15:26
Modified: 29.09.2009 15:26
Company: Hewlett-Packard
--------------------
Value Name: [swg]
Value Data: ["C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"]
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (verified signer: [Google Inc])
39408 bytes
Created: 08.09.2010 14:51
Modified: 08.09.2010 14:51
Company: Google Inc.
--------------------
Value Name: [Sony Ericsson PC Suite]
Value Data: ["C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon]
C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
434176 bytes
Created: 23.09.2010 17:25
Modified: 24.09.2009 13:41
Company: Sony Ericsson Mobile Communications AB
--------------------
Value Name: [Google Update]
Value Data: ["C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe" /c]
C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 16.10.2010 19:21
Modified: 19.10.2014 15:09
Company: Google Inc.
--------------------
Value Name: [Spiele Post]
Value Data: [C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe]
C:\Program Files (x86)\OXXOGames\GPlayer\GameCenterNotifier.exe (verified signer: [INTENIUM GmbH])
483400 bytes
Created: 06.12.2013 13:09
Modified: 06.12.2013 13:09
Company: Intenium
--------------------
Value Name: [Exetender]
Value Data: ["C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup]
C:\Program Files (x86)\Free Ride Games\GPlayer.exe (verified signer: [Exent Technologies Ltd.])
4862384 bytes
Created: 31.07.2011 13:00
Modified: 01.09.2011 18:18
Company: Exent Technologies Ltd.
--------------------
Value Name: [GameXN GO]
Value Data: ["C:\ProgramData\GameXN\GameXNGO.exe" /startup]
C:\ProgramData\GameXN\GameXNGO.exe (verified signer: [EasyBits Software AS])
347144 bytes
Created: 01.09.2011 12:34
Modified: 08.08.2014 11:12
Company: GameXN AS
--------------------
Value Name: [GoogleChromeAutoLaunch_7AF6FE48D09771C69065DE049B362851]
Value Data: ["C:\Users\ola\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window]
C:\Users\ola\AppData\Local\Google\Chrome\Application\chrome.exe (verified signer: [Google Inc])
843592 bytes
Created: 16.10.2010 19:21
Modified: 04.02.2015 10:02
Company: Google Inc.
--------------------
Value Name: [Alamandi tray notifier]
Value Data: [c:\program files (x86)\deutschland spielt\alamandi\TaskBarNotifier.exe]
c:\program files (x86)\deutschland spielt\alamandi\TaskBarNotifier.exe - [file not found to scan]
--------------------
Value Name: [Amazon Music]
Value Data: ["C:\Users\ola\AppData\Local\Amazon Music\Amazon Music Helper.exe"]
C:\Users\ola\AppData\Local\Amazon Music\Amazon Music Helper.exe (verified signer: [Amazon Services LLC])
6281536 bytes
Created: 12.09.2014 18:39
Modified: 06.09.2014 01:54
Company: [no info]
--------------------
Value Name: [KiesPreload]
Value Data: [C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe (verified signer: [Samsung Electronics CO., LTD.])
1562264 bytes
Created: 14.06.2014 12:30
Modified: 25.07.2014 09:42
Company: Samsung
--------------------
Value Name: [Skype]
Value Data: ["C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun]
C:\Program Files (x86)\Skype\Phone\Skype.exe (verified signer: [Skype Software Sarl])
-R- 30877280 bytes
Created: 11.12.2014 11:20
Modified: 11.12.2014 11:20
Company: Skype Technologies S.A.
--------------------
Checking HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
This Registry key appears to be empty
************************************************************
18:05:53: Scanning ----- Windows 64-Bit Registry -----
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: [SmartMenu]
Value Data: [C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background]
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (verified signer: [Hewlett-Packard Company])
610360 bytes
Created: 14.09.2009 16:17
Modified: 14.09.2009 16:17
Company:
--------------------
Value Name: [PC-Doctor for Windows localizer]
Value Data: [C:\Program Files\PC-Doctor for Windows\localizer.exe]
C:\Program Files\PC-Doctor for Windows\localizer.exe (verified signer: [PC-Doctor, Inc.])
95728 bytes
Created: 17.09.2009 06:57
Modified: 17.09.2009 06:57
Company: PC-Doctor, Inc.
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
This Registry key appears to be empty
************************************************************
18:05:54: Scanning -----SHELLEXECUTEHOOKS-----
ValueName: {E54729E8-BB3D-4270-9D49-7389EA579090}
Value: EasyBits Security Shield Hook - prevents launching insecure programs by kids
File: C:\Windows\SysWow64\EZUPBH~1.DLL
C:\Windows\SysWow64\EZUPBH~1.DLL (verified signer: [EasyBits Software AS])
52272 bytes
Created: 05.02.2010 19:26
Modified: 05.02.2010 19:26
Company: EasyBits Software Corp.
----------
ValueName: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}
Value: Groove GFS Stub Execution Hook
File: C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (verified signer: [Microsoft Corporation])
2217832 bytes
Created: 26.02.2009 18:36
Modified: 26.02.2009 18:36
Company: Microsoft Corporation
----------
************************************************************
18:06:00: Scanning -----HIDDEN REGISTRY ENTRIES-----
Taskdir check completed
----------
No Hidden File-loading Registry Entries found
----------
************************************************************
18:06:00: Scanning -----ACTIVE SCREENSAVER-----
No active ScreenSaver found to scan.
--------------------
************************************************************
18:06:00: Scanning ----- REGISTRY ACTIVE SETUP KEYS -----
Key: {2D46B6DC-2207-486B-B523-A557E6D54B47}
Path: C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
C:\Windows\SysWoW64\ie4uinit.exe - [file not found to scan]
----------
************************************************************
18:06:02: Scanning ----- SERVICEDLL REGISTRY KEYS -----
Key: HPSLPSVC
Path: C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
1039360 bytes
Created: 22.10.2010 13:08
Modified: 22.10.2010 13:08
Company: Hewlett-Packard Co.
----------
************************************************************
18:06:40: Scanning ----- SERVICES REGISTRY KEYS -----
----------
Key: ACDaemon
ImagePath: C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (verified signer: [ArcSoft, Inc.])
113152 bytes
Created: 03.11.2011 19:54
Modified: 18.03.2010 11:19
Company: ArcSoft Inc.
----------
----------
Key: Adobe LM Service
ImagePath: "C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"
C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
72704 bytes
Created: 24.01.2015 15:56
Modified: 24.01.2015 15:56
Company: Adobe Systems
----------
----------
Key: Afc
ImagePath: SysWOW64\drivers\Afc.sys
C:\Windows\SysWOW64\drivers\Afc.sys
22784 bytes
Created: 03.11.2011 19:54
Modified: 14.11.2006 11:31
Company: Arcsoft, Inc.
----------
----------
Key: APNMCP
ImagePath: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (verified signer: [APN LLC])
177560 bytes
Created: 31.01.2015 00:53
Modified: 31.01.2015 00:53
Company: APN LLC.
----------
----------
Key: AVP15.0.0
ImagePath: "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe" -r
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe (verified signer: [Kaspersky Lab])
233552 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
----------
----------
Key: CVPND
ImagePath: "C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe"
C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (verified signer: [Cisco Systems, Inc.])
1528616 bytes
Created: 23.03.2010 12:19
Modified: 23.03.2010 12:19
Company: Cisco Systems, Inc.
----------
----------
Key: CVPNDRVA
ImagePath: \??\C:\Windows\system32\Drivers\CVPNDRVA.sys
C:\Windows\System32\Drivers\CVPNDRVA.sys
304784 bytes
Created: 23.03.2010 12:29
Modified: 23.03.2010 12:29
Company: [no info]
----------
----------
Key: GamesAppIntegrationService
ImagePath: "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (verified signer: [WildTangent Inc])
227936 bytes
Created: 06.09.2013 01:41
Modified: 08.12.2013 15:09
Company: WildTangent
----------
----------
Key: GamesAppService
ImagePath: "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe"
C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe (verified signer: [WildTangent Inc])
206072 bytes
Created: 12.10.2010 18:59
Modified: 12.10.2010 18:59
Company: WildTangent, Inc.
----------
----------
Key: HP Health Check Service
ImagePath: "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe (verified signer: [Hewlett-Packard Company])
126520 bytes
Created: 15.11.2010 09:04
Modified: 15.11.2010 09:04
Company: Hewlett-Packard Company
----------
----------
Key: HPDrvMntSvc.exe
ImagePath: "C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (verified signer: [Hewlett-Packard Company])
92216 bytes
Created: 14.10.2010 17:27
Modified: 14.10.2010 17:27
Company: Hewlett-Packard Company
----------
----------
Key: hpqwmiex
ImagePath: "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (verified signer: [Hewlett-Packard Company])
751672 bytes
Created: 14.10.2010 17:22
Modified: 14.10.2010 17:22
Company: Hewlett-Packard Company
----------
----------
Key: IAStorDataMgrSvc
ImagePath: "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (verified signer: [Intel Corporation])
13336 bytes
Created: 05.02.2010 19:03
Modified: 02.10.2009 12:26
Company: Intel Corporation
----------
----------
Key: klflt
ImagePath: system32\DRIVERS\klflt.sys
C:\Windows\System32\DRIVERS\klflt.sys
141320 bytes
Created: 23.11.2014 17:12
Modified: 23.11.2014 17:20
Company: Kaspersky Lab ZAO
----------
----------
Key: McComponentHostService
ImagePath: "C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe"
C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe (verified signer: [McAfee, Inc.])
289256 bytes
Created: 09.04.2014 14:13
Modified: 09.04.2014 14:13
Company: McAfee, Inc.
----------
----------
Key: ogmservice
ImagePath: "C:\Program Files (x86)\Online Games Manager\ogmservice.exe" --service-run
C:\Program Files (x86)\Online Games Manager\ogmservice.exe (verified signer: [GameHouse])
581568 bytes
Created: 27.03.2014 13:07
Modified: 27.03.2014 13:07
Company: RealNetworks, Inc.
----------
----------
Key: OMSI download service
ImagePath: C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
90112 bytes
Created: 23.09.2010 17:25
Modified: 30.04.2009 11:23
Company: [no info]
----------
----------
Key: PDF Architect 2
ImagePath: "C:\Program Files (x86)\PDF Architect 2\ws.exe"
C:\Program Files (x86)\PDF Architect 2\ws.exe (verified signer: [pdfforge GmbH])
1771560 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
----------
Key: PDF Architect 2 Creator
ImagePath: "C:\Program Files (x86)\PDF Architect 2\creator-ws.exe"
C:\Program Files (x86)\PDF Architect 2\creator-ws.exe (verified signer: [pdfforge GmbH])
738856 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
----------
Key: pdfforge CrashHandler
ImagePath: "C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe"
C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe (verified signer: [pdfforge GmbH])
861736 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
----------
Key: Service Mgr PositiveFinds
ImagePath: "C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugincontainer.exe"
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugincontainer.exe (verified signer: [Positive Finds])
577272 bytes
Created: 05.02.2015 05:49
Modified: 12.02.2015 01:33
Company:
----------
----------
Key: SkypeUpdate
ImagePath: "C:\Program Files (x86)\Skype\Updater\Updater.exe"
C:\Program Files (x86)\Skype\Updater\Updater.exe (verified signer: [Skype Software Sarl])
-R- 315496 bytes
Created: 11.12.2014 10:30
Modified: 11.12.2014 10:30
Company: Skype Technologies
----------
----------
Key: TuneUp.UtilitiesSvc
ImagePath: "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe"
C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (verified signer: [AVG Netherlands B.V.])
2145080 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
----------
----------
Key: TuneUpUtilitiesDrv
ImagePath: \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys
C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys
14112 bytes
Created: 23.06.2014 08:44
Modified: 23.06.2014 08:44
Company: TuneUp Software
----------
----------
Key: Update Mgr PositiveFinds
ImagePath: "C:\Program Files (x86)\Common Files\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\updater.exe"
C:\Program Files (x86)\Common Files\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\updater.exe (verified signer: [Positive Finds])
384760 bytes
Created: 05.02.2015 04:49
Modified: 12.02.2015 01:33
Company:
----------
----------
Key: X5XSEx
ImagePath: \??\C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys
C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys
55400 bytes
Created: 31.07.2011 13:00
Modified: 22.11.2010 08:25
Company: Exent Technologies Ltd.
----------
----------
Key: X5XSEx_Pr146
ImagePath: \??\C:\Program Files (x86)\GameTreat Player\X5XSEx.Sys
C:\Program Files (x86)\GameTreat Player\X5XSEx.Sys
55328 bytes
Created: 15.01.2012 15:12
Modified: 10.03.2010 20:02
Company: Exent Technologies Ltd.
----------
************************************************************
18:08:25: Scanning -----VXD ENTRIES-----
************************************************************
18:08:25: Scanning ----- ContextMenuHandlers -----
Key: Adobe.Acrobat.ContextMenu
CLSID: {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}
Path: C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll
577536 bytes
Created: 14.12.2004 03:11
Modified: 14.12.2004 03:11
Company: Adobe Systems Inc.
----------
Key: Kaspersky Anti-Virus 15.0.0
CLSID: {BD8BB16E-84EC-485E-8F58-9BD1FEFB8EE2}
Path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\shellex.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\shellex.dll (verified signer: [Kaspersky Lab])
154784 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
----------
Key: PDFManagerExt
CLSID: {59E4A616-E484-44B5-95FB-7F430B35E8FE}
Path: C:\Program Files (x86)\PDF Architect 2\creator-context-menu.dll
C:\Program Files (x86)\PDF Architect 2\creator-context-menu.dll (verified signer: [pdfforge GmbH])
321576 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
Key: TuneUp Shredder Shell Extension
CLSID: {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}
Path: C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-win32.dll
C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-win32.dll (verified signer: [AVG Netherlands B.V.])
32568 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
----------
************************************************************
18:08:27: Scanning ----- Folder\ColumnHandlers -----
Key: {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}
File: "C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll"
C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
401920 bytes
Created: 19.05.2010 15:37
Modified: 19.05.2010 15:37
Company: OpenOffice.org
----------
Key: {F9DB5320-233E-11D1-9F84-707F02C10627}
File: C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
110592 bytes
Created: 14.12.2004 02:20
Modified: 14.12.2004 02:20
Company: Adobe Systems, Inc.
----------
************************************************************
18:08:28: Scanning ----- 64-Bit ContextMenuHandlers -----
Key: Kaspersky Anti-Virus 15.0.0
CLSID: {BD8BB16E-84EC-485E-8F58-9BD1FEFB8EE2}
Path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\shellex.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\shellex.dll (verified signer: [Kaspersky Lab])
245408 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
----------
Key: TuneUp Shredder Shell Extension
CLSID: {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}
Path: C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-x64.dll
C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-x64.dll (verified signer: [AVG Netherlands B.V.])
32056 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
----------
************************************************************
18:08:29: Scanning ----- 64-Bit Folder\ColumnHandlers -----
Key: {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}
File: "C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll"
C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl_x64.dll
830464 bytes
Created: 19.05.2010 15:41
Modified: 19.05.2010 15:41
Company: OpenOffice.org
----------
************************************************************
18:08:30: Scanning ----- Browser Helper Objects -----
Key: {02478D38-C3F9-4efb-9B51-7695ECA05670}
BHO: C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (verified signer: [Yahoo! Inc.])
882416 bytes
Created: 28.07.2008 11:47
Modified: 28.07.2008 11:47
Company: Yahoo! Inc.
----------
Key: {0347C33E-8762-4905-BF09-768834316C61}
BHO: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (verified signer: [Hewlett-Packard Company])
328248 bytes
Created: 20.09.2009 12:15
Modified: 20.09.2009 12:15
Company: Hewlett-Packard Co.
----------
Key: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
BHO: C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (verified signer: [Adobe Systems, Incorporated])
63136 bytes
Created: 14.12.2004 01:56
Modified: 14.12.2004 01:56
Company: Adobe Systems Incorporated
----------
Key: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01}
BHO: C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (verified signer: [McAfee, Inc.])
96128 bytes
Created: 09.04.2014 14:12
Modified: 09.04.2014 14:12
Company: McAfee, Inc.
----------
Key: {17166733-40EA-4432-A85C-AE672FF0E236}
BHO: C:\ProgramData\1und1InternetExplorerAddon\BHOXML.dll
C:\ProgramData\1und1InternetExplorerAddon\BHOXML.dll (verified signer: [1&1 Mail & Media GmbH])
163936 bytes
Created: 11.05.2011 16:36
Modified: 11.05.2011 16:36
Company: 1&1 Mail & Media GmbH
----------
Key: {1dad3af3-ef2f-4f64-ac4b-11789189fcb6}
BHO: C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (verified signer: [Microsoft Corporation])
1431712 bytes
Created: 11.03.2014 22:36
Modified: 11.03.2014 22:36
Company: Microsoft Corporation.
----------
Key: {30c85a3d-1d96-4589-b63f-91fb7ef45a41}
BHO: C:\Program Files (x86)\Positive Finds\Extensions\30c85a3d-1d96-4589-b63f-91fb7ef45a41.dll
C:\Program Files (x86)\Positive Finds\Extensions\30c85a3d-1d96-4589-b63f-91fb7ef45a41.dll (verified signer: [Positive Finds])
145656 bytes
Created: 05.02.2015 08:00
Modified: 05.02.2015 08:00
Company:
----------
Key: {30F9B915-B755-4826-820B-08FBA6BD249D}
BHO: C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (verified signer: [Conduit Ltd.])
175912 bytes
Created: 02.05.2011 17:37
Modified: 17.01.2011 15:54
Company: Conduit Ltd.
----------
Key: {31ad400d-1b06-4e33-a59a-90c2c140cba0}
BHO: mscoree.dll
C:\Windows\SysWoW64\mscoree.dll (verified signer: [Microsoft Windows])
297808 bytes
Created: 09.06.2011 10:27
Modified: 05.11.2010 02:58
Company: Microsoft Corporation
----------
Key: {326E768D-4182-46FD-9C16-1449A49795F4}
BHO: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (verified signer: [DivX, LLC])
3118976 bytes
Created: 08.02.2011 01:17
Modified: 08.02.2011 01:17
Company: DivX, LLC
----------
Key: {4F524A2D-5350-4500-76A7-7A786E7484D7}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport.dll (verified signer: [APN LLC])
12184 bytes
Created: 31.01.2015 00:53
Modified: 31.01.2015 00:53
Company: APN LLC.
----------
Key: {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (verified signer: [Kaspersky Lab])
709312 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {691B33B0-B86E-47F3-81C7-56E4FE3B929C}
BHO: C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll
C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll (verified signer: [pdfforge GmbH])
37928 bytes
Created: 10.10.2014 16:03
Modified: 10.10.2014 16:03
Company: pdfforge GmbH
----------
Key: {73455575-E40C-433C-9784-C78DC7761455}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (verified signer: [Kaspersky Lab])
1152808 bytes
Created: 20.04.2014 01:42
Modified: 23.11.2014 17:20
Company: Kaspersky Lab ZAO
----------
Key: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
BHO: C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (verified signer: [Oracle America, Inc.])
460712 bytes
Created: 12.02.2015 17:56
Modified: 12.02.2015 17:56
Company: Oracle Corporation
----------
Key: {79a2b609-bbc0-4d16-9925-70cb98a6490d}
BHO: C:\Program Files (x86)\Die_FreeRide_Games_Bar\prxtbDie_.dll
C:\Program Files (x86)\Die_FreeRide_Games_Bar\prxtbDie_.dll (verified signer: [Conduit Ltd.])
176936 bytes
Created: 09.05.2011 10:49
Modified: 09.05.2011 10:49
Company: Conduit Ltd.
----------
Key: {872b5b88-9db5-4310-bdd0-ac189557e5f5}
BHO: C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (verified signer: [Conduit Ltd.])
175912 bytes
Created: 28.07.2011 17:55
Modified: 17.01.2011 15:54
Company: Conduit Ltd.
----------
Key: {9030D464-4C02-4ABF-8ECC-5164760863C6}
BHO: C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (verified signer: [Microsoft Corporation])
408448 bytes
Created: 22.01.2009 15:41
Modified: 22.01.2009 15:41
Company: Microsoft Corporation
----------
Key: {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (verified signer: [Kaspersky Lab])
480448 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {AA58ED58-01DD-4d91-8333-CF10577473F7}
BHO: C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (verified signer: [Google Inc])
194504 bytes
Created: 08.09.2010 14:51
Modified: 28.03.2014 14:07
Company: Google Inc.
----------
Key: {AE7CD045-E861-484f-8273-0445EE161910}
BHO: C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
225280 bytes
Created: 14.12.2004 02:13
Modified: 14.12.2004 02:13
Company: Adobe Systems Incorporated
----------
Key: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
BHO: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (verified signer: [Skype Technologies SA])
4296864 bytes
Created: 02.03.2012 10:51
Modified: 02.03.2012 10:51
Company: Skype Technologies S.A.
----------
Key: {BF42D4A8-016E-4fcd-B1EB-837659FD77C6}
BHO: C:\Program Files (x86)\GMX Toolbar\IE\uitb.dll
C:\Program Files (x86)\GMX Toolbar\IE\uitb.dll (verified signer: [1&1 Mail & Media GmbH])
1579104 bytes
Created: 02.02.2012 19:32
Modified: 02.02.2012 19:32
Company: 1und1 Mail und Media GmbH
----------
Key: {D4027C7F-154A-4066-A1AD-4243D8127440}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport.dll (verified signer: [APN LLC])
12184 bytes
Created: 30.10.2014 17:56
Modified: 30.10.2014 17:56
Company: APN LLC.
----------
Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
BHO: C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (verified signer: [Oracle America, Inc.])
172968 bytes
Created: 12.02.2015 17:56
Modified: 12.02.2015 17:56
Company: Oracle Corporation
----------
Key: {E33CF602-D945-461A-83F0-819F76A199F8}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (verified signer: [Kaspersky Lab])
891072 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {f92a9fe4-2850-4198-b9d5-279880e49b16}
BHO: C:\Program Files (x86)\A_Free_Ride_Games_Bar\prxtbA_Fr.dll
C:\Program Files (x86)\A_Free_Ride_Games_Bar\prxtbA_Fr.dll (verified signer: [Conduit Ltd.])
175912 bytes
Created: 31.07.2011 13:00
Modified: 17.01.2011 15:54
Company: Conduit Ltd.
----------
Key: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
BHO: C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (verified signer: [Yahoo! Inc.])
160496 bytes
Created: 28.07.2008 11:47
Modified: 28.07.2008 11:47
Company: Yahoo! Inc
----------
Key: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}
BHO: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (verified signer: [Hewlett-Packard Company])
509496 bytes
Created: 20.09.2009 12:15
Modified: 20.09.2009 12:15
Company: Hewlett-Packard Co.
----------
************************************************************
18:08:45: Scanning ----- 64-Bit Browser Helper Objects -----
Key: {1dad3af3-ef2f-4f64-ac4b-11789189fcb6}
BHO: C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (verified signer: [Microsoft Corporation])
1154720 bytes
Created: 11.03.2014 22:30
Modified: 11.03.2014 22:30
Company: Microsoft Corporation.
----------
Key: {31ad400d-1b06-4e33-a59a-90c2c140cba0}
BHO: mscoree.dll
C:\Windows\System32\mscoree.dll (verified signer: [Microsoft Windows])
444752 bytes
Created: 09.06.2011 10:27
Modified: 05.11.2010 02:57
Company: Microsoft Corporation
----------
Key: {4F524A2D-5350-4500-76A7-7A786E7484D7}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-SPE\Passport_x64.dll (verified signer: [APN LLC])
13720 bytes
Created: 31.01.2015 00:53
Modified: 31.01.2015 00:53
Company: APN LLC.
----------
Key: {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (verified signer: [Kaspersky Lab])
878784 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {73455575-E40C-433C-9784-C78DC7761455}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (verified signer: [Kaspersky Lab])
1428264 bytes
Created: 20.04.2014 01:42
Modified: 23.11.2014 17:20
Company: Kaspersky Lab ZAO
----------
Key: {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (verified signer: [Kaspersky Lab])
583360 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
Key: {AA58ED58-01DD-4d91-8333-CF10577473F7}
BHO: C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (verified signer: [Google Inc])
256456 bytes
Created: 08.09.2010 14:52
Modified: 28.03.2014 14:08
Company: Google Inc.
----------
Key: {BF42D4A8-016E-4fcd-B1EB-837659FD77C6}
BHO: C:\Program Files\GMX Toolbar\IE\uitb.dll
C:\Program Files\GMX Toolbar\IE\uitb.dll (verified signer: [1&1 Mail & Media GmbH])
1973344 bytes
Created: 02.02.2012 19:32
Modified: 02.02.2012 19:32
Company: 1und1 Mail und Media GmbH
----------
Key: {D4027C7F-154A-4066-A1AD-4243D8127440}
BHO: "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport_x64.dll"
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MTV\Passport_x64.dll (verified signer: [APN LLC])
13720 bytes
Created: 30.10.2014 17:56
Modified: 30.10.2014 17:56
Company: APN LLC.
----------
Key: {E33CF602-D945-461A-83F0-819F76A199F8}
BHO: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (verified signer: [Kaspersky Lab])
1109696 bytes
Created: 20.04.2014 01:42
Modified: 20.04.2014 01:42
Company: Kaspersky Lab ZAO
----------
************************************************************
18:08:51: Scanning ----- ShellServiceObjectDelayLoad Entries -----
************************************************************
18:08:51: Scanning ----- 64-Bit ShellServiceObjectDelayLoad Entries -----
************************************************************
18:08:51: Scanning ----- ShellServiceObjects -----
************************************************************
18:08:56: Scanning ----- 64-Bit ShellServiceObjects -----
************************************************************
18:09:03: Scanning ----- SHAREDTASKSCHEDULER ENTRIES -----
No SharedTaskScheduler entries found to scan
************************************************************
18:09:03: Scanning ----- IMAGEFILE DEBUGGERS -----
No "Debugger" entries found.
************************************************************
18:09:03: Scanning ----- APPINIT_DLLS -----
No AppInit_DLLs value found to check
************************************************************
18:09:04: Scanning ----- 64-Bit APPINIT_DLLS -----
No 64-Bit AppInit_DLLs value found to check
************************************************************
18:09:05: Scanning ----- SECURITY PROVIDER DLLS -----
************************************************************
18:09:05: Scanning ----- CREDENTIAL PROVIDERS -----
************************************************************
18:09:09: Scanning ------ COMMON STARTUP GROUP ------
[C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup]
The Common Startup Group attempts to load the following file(s) at boot time:
Adobe Acrobat - Schnellstart.lnk - links to [C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe]
C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe
-R- 25214 bytes
Created: 24.01.2015 15:49
Modified: 24.01.2015 15:49
Company: [no info]
--------------------
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-HS- 174 bytes
Created: 14.07.2009 05:54
Modified: 14.07.2009 05:54
Company: [no info]
--------------------
HP Digital Imaging Monitor.lnk - links to [C:\PROGRA~2\hp\DIGITA~1\bin\hpqtra08.exe]
C:\PROGRA~2\hp\DIGITA~1\bin\hpqtra08.exe
270336 bytes
Created: 20.09.2009 12:36
Modified: 20.09.2009 12:36
Company: Hewlett-Packard Co.
--------------------
McAfee Security Scan Plus.lnk - links to [C:\PROGRA~1\MCAFEE~1\385C9A~1.150\SSSCHE~1.EXE]
C:\PROGRA~1\MCAFEE~1\385C9A~1.150\SSSCHE~1.EXE (verified signer: [McAfee, Inc.])
332016 bytes
Created: 09.04.2014 14:14
Modified: 09.04.2014 14:14
Company: McAfee, Inc.
--------------------
vpngui.exe.lnk - links to [C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe]
C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe
-R- 5120 bytes
Created: 24.10.2011 17:33
Modified: 24.10.2011 17:33
Company: [no info]
--------------------
************************************************************
18:09:11: Scanning ----- USER STARTUP GROUPS -----
Checking Startup Group for: ola
[C:\Users\ola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup]
Adobe Gamma.lnk - links to [C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE
113664 bytes
Created: 16.03.2005 19:16
Modified: 16.03.2005 19:16
Company: Adobe Systems, Inc.
----------
C:\Users\ola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-HS- 174 bytes
Created: 08.09.2010 14:37
Modified: 18.08.2014 08:29
Company: [no info]
----------
OpenOffice.org 3.2.lnk - links to [C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE
1195008 bytes
Created: 20.05.2010 12:14
Modified: 20.05.2010 12:14
Company: [no info]
----------
--------------------
************************************************************
18:09:12: Scanning ----- SCHEDULED TASKS -----
Taskname: {440C16AE-EFF7-4451-9E33-E04BFA205354}
File: C:\Users\ola\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ola\AppData\Local\Google\Chrome\Application\chrome.exe (verified signer: [Google Inc])
843592 bytes
Created: 16.10.2010 19:21
Modified: 04.02.2015 10:02
Company: Google Inc.
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: {5F0472E8-4636-4748-8486-5A34D579AEB8}
File: C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe (verified signer: [Skype Software Sarl])
-R- 30877280 bytes
Created: 11.12.2014 11:20
Modified: 11.12.2014 11:20
Company: Skype Technologies S.A.
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator: SkypeSetupLight
Comments:
----------
Taskname: 1und1 Konfiguration
File: C:\ProgramData\1und1InternetExplorerAddon\ConfigTask.exe
C:\ProgramData\1und1InternetExplorerAddon\ConfigTask.exe (verified signer: [1&1 Mail & Media GmbH])
193632 bytes
Created: 19.04.2011 13:26
Modified: 19.04.2011 13:26
Company: 1und1 Mail und Media GmbH
Schedule: At 09:55:54 every day
Next Run Time: 13.02.2015 09:55:54
Status: Ready
Creator: 1und1
Comments:
----------
Taskname: Adobe Flash Player Updater
File: C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (verified signer: [Adobe Systems Incorporated])
267440 bytes
Created: 27.02.2013 22:11
Modified: 05.02.2015 12:36
Company: Adobe Systems Incorporated
Schedule: At 01:35:00 every day
Next Run Time: 12.02.2015 18:35:00
Status: Ready
Creator: Adobe Systems Incorporated
Comments: Mit diesem Task ist Ihre Flash Player-Installation immer aktuell und verwendet die neuesten Verbesserungen und Sicherheits-Fixes. Wenn dieser Task deaktiviert oder entfernt wird, kann Adobe Flash Player Ihren Computer nicht automatisch mit den neuesten Sicherheits-Fixes sichern.
----------
Taskname: CLMLSvc
File: c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (verified signer: [CyberLink])
210216 bytes
Created: 22.10.2009 18:50
Modified: 22.10.2009 18:50
Company: CyberLink
Schedule: At logon
Next Run Time:
Status: Running
Creator: CyberLink
Comments:
----------
Taskname: CreateChoiceProcessTask
File: C:\Windows\System32\browserchoice.exe
C:\Windows\System32\browserchoice.exe
294912 bytes
Created: 09.09.2010 19:44
Modified: 23.02.2010 09:16
Company: Microsoft Corporation
Parameters: /launch
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator: BrowserChoice
Comments:
----------
Taskname: DVDAgent
File: c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
Schedule: At logon
Next Run Time:
Status: Ready
Creator: CyberLink
Comments:
c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe - [file not found to scan]
----------
Taskname: ExtendedServicePlan
File: C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe (verified signer: [Hewlett-Packard Company])
26680 bytes
Created: 05.02.2010 19:19
Modified: 20.10.2009 10:58
Company:
Parameters: ExtendedServicePlan ShowMessageTask
Schedule: At 00:00:00 on 08.08.2011
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: GoogleUpdateTaskMachineCore
File: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 08.09.2010 14:51
Modified: 23.10.2014 11:33
Company: Google Inc.
Parameters: /c
Schedule: Multiple schedule times
Next Run Time: 13.02.2015 10:50:00
Status: Ready
Creator: SYSTEM
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: GoogleUpdateTaskMachineUA
File: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 08.09.2010 14:51
Modified: 23.10.2014 11:33
Company: Google Inc.
Parameters: /ua /installsource scheduler
Schedule: At 10:50:00 every day
Next Run Time: 12.02.2015 18:50:00
Status: Ready
Creator: SYSTEM
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: GoogleUpdateTaskUserS-1-5-21-107307583-39740663-3650351078-1001Core
File: C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 16.10.2010 19:21
Modified: 19.10.2014 15:09
Company: Google Inc.
Parameters: /c
Schedule: At 13:26:00 every day
Next Run Time: 13.02.2015 13:26:00
Status: Ready
Creator: ola
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: GoogleUpdateTaskUserS-1-5-21-107307583-39740663-3650351078-1001UA
File: C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\ola\AppData\Local\Google\Update\GoogleUpdate.exe (verified signer: [Google Inc])
107912 bytes
Created: 16.10.2010 19:21
Modified: 19.10.2014 15:09
Company: Google Inc.
Parameters: /ua /installsource scheduler
Schedule: At 13:26:00 every day
Next Run Time: 12.02.2015 18:26:00
Status: Ready
Creator: ola
Comments: Hält Ihre Google-Software auf dem neuesten Stand. Falls diese Anwendung deaktiviert oder angehalten wird, wird Ihre Google-Software nicht aktualisiert. Das heißt, dass eventuell auftretende Sicherheitslücken nicht behoben und bestimmte Funktionen möglicherweise nicht ausgeführt werden können. Diese Anwendung deinstalliert sich selbst, wenn sie nicht von einer Google-Software verwendet wird.
----------
Taskname: Norton Security Scan for ola
File: C:\PROGRA~2\NORTON~2\Engine\351~1.8\Nss.exe
C:\PROGRA~2\NORTON~2\Engine\351~1.8\Nss.exe (verified signer: [Symantec Corporation])
641464 bytes
Created: 12.11.2011 19:29
Modified: 03.04.2012 01:45
Company: Symantec Corporation
Parameters: /scan-quick /scheduled
Schedule: At 17:15:00 every Sonntag, Montag, Dienstag, Mittwoch, Donnerstag, Freitag, Samstag of every week, starting 12.11.2011
Next Run Time: 13.02.2015 17:15:00
Status: Ready
Creator: ola
Comments: Norton Security Scan
----------
Taskname: PCDRScheduledMaintenance
File: C:\Program Files\PC-Doctor for Windows\pcdrcui.exe
C:\Program Files\PC-Doctor for Windows\pcdrcui.exe (verified signer: [PC-Doctor, Inc.])
147440 bytes
Created: 18.09.2009 08:11
Modified: 18.09.2009 08:11
Company: PC-Doctor, Inc.
Parameters: -fh scripts\monthly.xml -st PCDRScheduledMaintenance
Schedule: Multiple schedule times
Next Run Time: 28.02.2015 10:00:00
Status: Ready
Creator: PC-Doctor
Comments:
----------
Taskname: RecoveryCDWin7
File: C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe (verified signer: [Hewlett-Packard Company])
26680 bytes
Created: 05.02.2010 19:19
Modified: 20.10.2009 10:58
Company:
Parameters: RecoveryCDWin7 ShowMessageTask
Schedule: At 00:00:00 every 14 days
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: Registration 1und1 Task
File: C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe
C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe (verified signer: [ITSCM - IT Solution Center Muenchen GmbH])
588656 bytes
Created: 08.06.2011 13:23
Modified: 08.06.2011 13:23
Company: 1&1 Mail & Media GmbH
Schedule: Multiple schedule times
Next Run Time: 13.02.2015 09:56:00
Status: Running
Creator: 1und1
Comments:
----------
Taskname: ServicePlan
File: C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe (verified signer: [Hewlett-Packard Company])
26680 bytes
Created: 05.02.2010 19:19
Modified: 20.10.2009 10:58
Company:
Parameters: ServicePlan ShowMessageTask15D
Schedule: At 00:00:00 on 23.09.2010
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: SidebarExecute
File: C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe (verified signer: [Microsoft Windows])
1475584 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
Schedule: At task creation/modification
Next Run Time:
Status: Ready
Creator:
Comments:
----------
Taskname: TuneUpUtilities_Task_BkGndMaintenance2013
File: C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe
C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe (verified signer: [AVG Netherlands B.V.])
459576 bytes
Created: 16.07.2014 10:22
Modified: 16.07.2014 10:22
Company: TuneUp Software
Parameters: $(Arg0)
Schedule: Task not scheduled
Next Run Time:
Status: Ready
Creator:
Comments:
----------
************************************************************
18:09:21: Scanning ----- SHELLICONOVERLAYIDENTIFIERS -----
************************************************************
18:09:22: Scanning ----- DEVICE DRIVER ENTRIES -----
Value: msacm.l3acm
File: C:\Windows\SysWOW64\l3codeca.acm
C:\Windows\SysWOW64\l3codeca.acm
64000 bytes
Created: 14.07.2009 01:07
Modified: 14.07.2009 02:14
Company: Fraunhofer Institut Integrierte Schaltungen IIS
----------
Value: msacm.l3codecp
File: l3codecp.acm
C:\Windows\SysWoW64\l3codecp.acm
220672 bytes
Created: 14.07.2009 01:09
Modified: 14.07.2009 02:14
Company: Fraunhofer Institut Integrierte Schaltungen IIS
----------
************************************************************
18:09:25: ----- ADDITIONAL CHECKS -----
Heuristic checks for hidden files/drivers completed
----------
Layered Service Provider entries checks completed
----------
Windows Explorer Policies checks completed
----------
Desktop Wallpaper: C:\Users\ola\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
C:\Users\ola\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
988938 bytes
Created: 08.09.2010 14:37
Modified: 09.09.2011 13:58
Company: [no info]
----------
Web Desktop Wallpaper entry is blank
----------
Checks for rogue DNS NameServers completed
----------
Checks for Backdoor.ZeroAccess completed
----------
Safe Mode checks completed
Additional checks completed
************************************************************
18:09:27: Scanning ----- RUNNING PROCESSES -----
C:\Windows\System32\smss.exe
112640 bytes
Created: 17.09.2013 07:29
Modified: 02.08.2013 01:59
Company: Microsoft Corporation
--------------------
C:\Windows\System32\csrss.exe
7680 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\wininit.exe
129024 bytes
Created: 14.07.2009 00:52
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\services.exe
328704 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\lsass.exe
31232 bytes
Created: 14.05.2014 13:51
Modified: 12.04.2014 03:19
Company: Microsoft Corporation
--------------------
C:\Windows\System32\lsm.exe
343040 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:24
Company: Microsoft Corporation
--------------------
C:\Windows\System32\winlogon.exe
455168 bytes
Created: 17.10.2014 09:26
Modified: 17.07.2014 03:07
Company: Microsoft Corporation
--------------------
C:\Windows\System32\svchost.exe
27136 bytes
Created: 14.07.2009 00:31
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\atiesrxx.exe
202752 bytes
Created: 06.02.2010 03:39
Modified: 02.12.2009 13:18
Company: AMD
--------------------
C:\Windows\System32\atieclxx.exe
446976 bytes
Created: 06.02.2010 03:39
Modified: 02.12.2009 13:19
Company: AMD
--------------------
C:\Windows\System32\spoolsv.exe
559104 bytes
Created: 15.08.2012 10:05
Modified: 11.02.2012 07:36
Company: Microsoft Corporation
--------------------
C:\Windows\SysWOW64\svchost.exe
20992 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:14
Company: Microsoft Corporation
C:\Windows\SysWOW64\svchost.exe
20992 bytes
Created: 14.07.2009 00:19
Modified: 14.07.2009 02:14
Company: Microsoft Corporation
C:\Windows\System32\wbem\WmiPrvSE.exe
372736 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
C:\Windows\System32\WUDFHost.exe
229888 bytes
Created: 16.11.2012 19:48
Modified: 26.07.2012 04:08
Company: Microsoft Corporation
--------------------
C:\Windows\System32\taskhost.exe
68608 bytes
Created: 21.03.2013 10:00
Modified: 23.11.2012 04:13
Company: Microsoft Corporation
--------------------
C:\Windows\System32\dwm.exe
120320 bytes
Created: 14.07.2009 00:37
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Windows\System32\SearchIndexer.exe
591872 bytes
Created: 29.06.2011 09:24
Modified: 04.05.2011 06:19
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
2040120 bytes
Created: 16.07.2014 10:24
Modified: 16.07.2014 10:24
Company: TuneUp Software
--------------------
C:\Program Files\Windows Media Player\wmpnetwk.exe
1525248 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
192160 bytes
Created: 20.04.2014 16:15
Modified: 20.04.2014 16:15
Company: Kaspersky Lab ZAO
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe
270336 bytes
Created: 20.09.2009 12:36
Modified: 20.09.2009 12:36
Company: Hewlett-Packard Co.
--------------------
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
332016 bytes
Created: 09.04.2014 14:14
Modified: 09.04.2014 14:14
Company: McAfee, Inc.
--------------------
C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
656896 bytes
Created: 25.08.2009 03:11
Modified: 25.08.2009 03:11
Company: Hewlett-Packard
--------------------
C:\Windows\System32\taskeng.exe
464384 bytes
Created: 09.06.2011 10:27
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
65536 bytes
Created: 22.04.2009 17:38
Modified: 22.04.2009 17:38
Company: Advanced Micro Devices Inc.
--------------------
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
11318784 bytes
Created: 20.05.2010 23:59
Modified: 20.05.2010 23:59
Company: OpenOffice.org
--------------------
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
11312128 bytes
Created: 20.05.2010 23:59
Modified: 20.05.2010 23:59
Company: OpenOffice.org
--------------------
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
309824 bytes
Created: 03.11.2011 19:54
Modified: 25.08.2010 11:27
Company: ArcSoft Inc.
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqste08.exe
168960 bytes
Created: 20.09.2009 12:07
Modified: 20.09.2009 12:07
Company: Hewlett-Packard Co.
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqbam08.exe
559104 bytes
Created: 20.09.2009 12:07
Modified: 20.09.2009 12:07
Company: Hewlett-Packard Co.
--------------------
C:\Program Files (x86)\hp\Digital Imaging\bin\hpqgpc01.exe
362496 bytes
Created: 21.05.2009 18:57
Modified: 21.05.2009 18:57
Company: Hewlett-Packard
--------------------
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
65536 bytes
Created: 22.04.2009 17:37
Modified: 22.04.2009 17:37
Company: ATI Technologies Inc.
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\8\Plugin.exe
508152 bytes
Created: 12.02.2015 06:33
Modified: 12.02.2015 06:33
Company:
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\4\Plugin.exe
400120 bytes
Created: 11.02.2015 19:33
Modified: 11.02.2015 19:33
Company:
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\5\Plugin.exe
518904 bytes
Created: 11.02.2015 19:33
Modified: 11.02.2015 19:33
Company:
--------------------
C:\ProgramData\d2d4a9d3-f3f1-4c52-8d3f-dddc91fe0602\plugins\3\Plugin.exe
701176 bytes
Created: 12.02.2015 07:33
Modified: 12.02.2015 07:33
Company:
--------------------
C:\Windows\System32\wuauclt.exe
58336 bytes
Created: 31.08.2014 10:08
Modified: 14.05.2014 17:23
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
247968 bytes
Created: 11.03.2014 22:36
Modified: 11.03.2014 22:36
Company: Microsoft Corporation.
--------------------
C:\Windows\System32\msiexec.exe
128000 bytes
Created: 09.06.2011 10:26
Modified: 20.11.2010 14:24
Company: Microsoft Corporation
--------------------
C:\Windows\System32\SearchProtocolHost.exe
249856 bytes
Created: 29.06.2011 09:24
Modified: 04.05.2011 06:19
Company: Microsoft Corporation
--------------------
C:\Users\ola\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe
157080 bytes
Created: 15.09.2014 08:49
Modified: 31.01.2015 00:53
Company: APN LLC.
--------------------
C:\Users\ola\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe
164248 bytes
Created: 15.09.2014 08:49
Modified: 31.01.2015 00:53
Company: APN LLC.
--------------------
C:\Windows\System32\wbem\unsecapp.exe
47104 bytes
Created: 14.07.2009 00:47
Modified: 14.07.2009 02:39
Company: Microsoft Corporation
--------------------
C:\Program Files (x86)\Trojan Remover\Rmvtrjan.exe
FileSize: 5484896
[This is a Trojan Remover component]
--------------------
--------------------
C:\Windows\splwow64.exe
67072 bytes
Created: 15.08.2012 10:05
Modified: 11.02.2012 07:36
Company: Microsoft Corporation
--------------------
C:\Windows\System32\SearchFilterHost.exe
113664 bytes
Created: 29.06.2011 09:24
Modified: 04.05.2011 06:19
Company: Microsoft Corporation
--------------------
C:\Windows\servicing\TrustedInstaller.exe
194048 bytes
Created: 09.06.2011 10:26
Modified: 20.11.2010 14:25
Company: Microsoft Corporation
--------------------
************************************************************
18:09:43: Checking HOSTS file
No malicious entries were found in the HOSTS file
************************************************************
18:09:43: Checking ----- ROGUE BROWSER MODIFICATIONS -----
{006ee092-9658-4fd6-bd8e-a21a348e59f5} - this rogue IE SearchScope, associated with BrowserHijack.SnapDo, has been removed
************************************************************
------ INTERNET EXPLORER HOME/START/SEARCH SETTINGS ------
HKLM\Software\Microsoft\Internet Explorer\Main\"Start Page":
hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main\"Local Page":
C:\Windows\SysWOW64\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main\"Search Page":
hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Page_URL":
hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Search_URL":
hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKCU\Software\Microsoft\Internet Explorer\Main\"Start Page":
hxxp://www.search.ask.com/?tpid=ORJ-SPE&o=APN11412&pf=V7&trgb=CR&p2=%5EBBK%5EOSJ000%5EYY%5EDE&gct=hp&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=cr_37.0.2062.120&apn_uid=E5F992F8-2029-4972-9D8F-8C5D058ACD21&itbv=12.15.5.30&doi=2014-09-15&psv=&pt=tb
HKCU\Software\Microsoft\Internet Explorer\Main\"Local Page":
C:\Windows\system32\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main\"Search Page":
hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=01ff5193-73d3-475b-a8f9-3b78739c5878&searchtype=ds&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main\"Default_Page_URL":
hxxp://go.gmx.net/br/ie9_startpage
************************************************************
=== NO CHANGES HAVE BEEN MADE TO YOUR SYSTEM FILES ===
Scan completed at: 18:10:02 12 Feb 2015
Total Scan time: 00:04:42
************************************************************
Mehr finde ich nicht. Malware habe ich aber auch schon wieder deinstalliert.
Und nu?
(Vielleicht sollte ich doch wieder zur Schreibmaschine zurück kehren.
Es tut mir wirklich leid. |
FRST 32-Bit | FRST 64-Bit
Lesestoff:
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
