Hallo Luete
Hab mir leider auch den GVU Virus eingefangen.
Ich kann nicht mehr auf den abgesicherten Modus zurückgreifen.
Hab frst64.exe schon über computer reparieren gestartet.
Hoffe jemand kann mir helfen

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-06-2013 02
Ran by SYSTEM on 27-06-2013 13:09:29
Running from H:\
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BTMTrayAgent] rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [10358784 2011-11-14] (Intel Corporation)
HKLM\...\Run: [IntelPAN] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2012-01-04] (Intel(R) Corporation)
HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-08-27] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [36800 2012-07-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [823224 2012-07-27] (Adobe Systems Inc.)
HKU\Motherfucker666\...\Run: [hkxojyqlpydybcy] C:\ProgramData\hkxojyql.exe [x]
HKU\Motherfucker666\...\Run: [Akamai NetSession Interface] "C:\Users\Motherfucker666\AppData\Local\Akamai\netsession_win.exe" [4440896 2012-08-10] (Akamai Technologies, Inc.)
HKU\Motherfucker666\...\Run: [DataMgr] C:\Users\Motherfucker666\AppData\Roaming\DataMgr\datamgr.exe [168264 2012-10-16] (HTTO Group, Ltd.)
HKU\Motherfucker666\...\Run: [Protector] wscript.exe "C:\Users\Motherfucker666\AppData\Roaming\SDIV 2.0\Prot\prot.vbs" check [289 2012-09-12] ()
HKU\Motherfucker666\...\Run: [TU] "C:\Users\Motherfucker666\AppData\Roaming\SDIV 2.0\Prot\tu\tu.exe" [133536 2012-10-16] ()
HKU\Motherfucker666\...\Run: [Zoutpod] C:\Users\Motherfucker666\AppData\Roaming\Acbi\myig.exe [282624 2012-09-26] (Facebook Inc.)
HKU\Motherfucker666\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19603048 2013-06-03] (Skype Technologies S.A.)
HKU\Motherfucker666\...\Run: [Iwikx] C:\Users\Motherfucker666\AppData\Roaming\Quubca\tudey.exe [356430 2012-09-01] (ActiveState Corporation)
HKU\Motherfucker666\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] C:\Users\Motherfucker666\7666211.exe [73728 2013-06-27] (NVIDIA Corporation)
HKU\Motherfucker666\...\Winlogon: [Shell] cmd.exe [345088 2010-11-21] (Microsoft Corporation) <==== ATTENTION
HKU\Motherfucker666\...\Command Processor: "C:\Users\Motherfucker666\7666211.exe" <===== ATTENTION!

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [248304 2011-06-24] (CyberLink)
S4 FPLService; C:\Program Files\TrueSuite\TrueSuite.Service.exe [294216 2011-04-26] (AuthenTec, Inc)
S2 GobiQDLService; C:\Program Files (x86)\Huawei\Gobi\GobiQDLService\GobiQDLService.exe [318464 2011-03-04] (HUAWEI Technologies Co., Ltd.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2012-01-04] ()
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
S2 WTGService; C:\Program Files (x86)\OneClickInternet\WTGService.exe [342984 2011-03-09] ()

==================== Drivers (Whitelisted) ====================

S3 gobi3kfilter; C:\Windows\System32\DRIVERS\gobi3kfilter.sys [34304 2010-12-13] (QUALCOMM Incorporated)
S3 gobi3kmbb; C:\Windows\System32\DRIVERS\gobi3kmbb.sys [399872 2011-04-21] (QUALCOMM Incorporated)
S3 gobi3kserial; C:\Windows\System32\DRIVERS\gobi3kserial.sys [233984 2010-12-13] (QUALCOMM Incorporated)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-27 13:07 - 2013-06-27 13:07 - 00000000 ___DC C:\FRST
2013-06-27 11:31 - 2013-06-27 11:31 - 01084722 ____A C:\Users\Motherfucker666\AppData\Roaming\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 01084679 ____A C:\ProgramData\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 01084677 ____A C:\Users\Motherfucker666\AppData\Local\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 00073728 ____A (NVIDIA Corporation) C:\Users\Motherfucker666\7666211.exe
2013-06-26 17:46 - 2013-06-27 11:53 - 00000504 ____A C:\Windows\setupact.log
2013-06-26 17:46 - 2013-06-26 17:46 - 00000000 ____A C:\Windows\setuperr.log
2013-06-26 15:04 - 2013-06-26 18:26 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Qizue
2013-06-26 15:04 - 2013-06-26 15:04 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Yvxauf
2013-06-26 15:04 - 2013-06-26 15:04 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Quubca
2013-06-25 13:34 - 2013-06-25 13:34 - 00000000 ___DC C:\Program Files (x86)\Utherverse Digital Inc
2013-06-24 17:21 - 2013-05-17 02:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-24 17:21 - 2013-05-17 02:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-24 17:21 - 2013-05-17 02:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-24 17:21 - 2013-05-17 02:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-24 17:21 - 2013-05-17 02:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-24 17:21 - 2013-05-17 02:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-24 17:21 - 2013-05-17 02:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-24 17:21 - 2013-05-17 02:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-24 17:21 - 2013-05-17 01:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-24 17:21 - 2013-05-17 01:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-24 17:21 - 2013-05-17 01:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-24 17:21 - 2013-05-17 01:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-24 17:21 - 2013-05-17 01:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-24 17:21 - 2013-05-17 01:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-24 17:21 - 2013-05-17 01:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-24 17:21 - 2013-05-17 01:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-24 17:21 - 2013-05-17 01:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-24 17:21 - 2013-05-14 13:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-24 17:21 - 2013-05-14 09:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-16 02:00 - 2013-06-08 15:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-16 02:00 - 2013-06-08 15:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-16 02:00 - 2013-06-08 15:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-16 02:00 - 2013-06-08 15:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-16 02:00 - 2013-06-08 15:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-16 02:00 - 2013-06-08 13:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-16 02:00 - 2013-06-08 12:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-16 02:00 - 2013-06-08 12:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-16 02:00 - 2013-06-08 12:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 19:02 - 2013-05-13 06:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 19:02 - 2013-05-13 06:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 19:02 - 2013-05-13 06:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 19:02 - 2013-05-13 06:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 19:02 - 2013-05-13 05:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 19:02 - 2013-05-13 05:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 19:02 - 2013-05-13 05:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 19:02 - 2013-05-13 04:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 19:02 - 2013-05-13 04:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 19:02 - 2013-05-13 04:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 19:02 - 2013-05-10 06:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 19:02 - 2013-05-10 04:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 19:02 - 2013-05-08 07:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 19:02 - 2013-04-26 06:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 19:02 - 2013-04-26 05:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 19:02 - 2013-04-26 00:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 19:02 - 2013-04-17 08:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 19:02 - 2013-04-17 07:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 19:02 - 2013-03-31 23:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 02:21 - 2013-06-08 02:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 02:21 - 2013-06-08 02:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 02:21 - 2013-06-08 02:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 02:21 - 2013-06-08 02:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 02:21 - 2013-06-08 02:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 02:21 - 2013-06-08 02:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 02:21 - 2013-06-08 02:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 02:21 - 2013-06-08 02:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 02:01 - 2013-06-08 02:01 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-06 17:29 - 2013-06-27 11:29 - 00001300 __ASH C:\ProgramData\e3159cb9-3043-42f0-a3d2-f12e32f1e7f8
2013-06-06 17:14 - 2013-06-06 17:14 - 00000000 ____D C:\ProgramData\fa33352d-61d3-434a-85bd-dc3dd89a7373
2013-06-06 17:14 - 2013-06-06 17:14 - 00000000 ____D C:\ProgramData\1463
2013-06-04 12:29 - 2013-06-04 12:29 - 00003584 ____A C:\Users\Motherfucker666\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-05-31 22:00 - 2013-06-27 11:53 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-31 22:00 - 2013-06-27 11:29 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

==================== One Month Modified Files and Folders =======

2013-06-27 13:07 - 2013-06-27 13:07 - 00000000 ___DC C:\FRST
2013-06-27 11:53 - 2013-06-26 17:46 - 00000504 ____A C:\Windows\setupact.log
2013-06-27 11:53 - 2013-05-31 22:00 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-27 11:53 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-27 11:33 - 2013-03-20 08:11 - 01228552 ____A C:\Windows\WindowsUpdate.log
2013-06-27 11:31 - 2013-06-27 11:31 - 01084722 ____A C:\Users\Motherfucker666\AppData\Roaming\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 01084679 ____A C:\ProgramData\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 01084677 ____A C:\Users\Motherfucker666\AppData\Local\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 00073728 ____A (NVIDIA Corporation) C:\Users\Motherfucker666\7666211.exe
2013-06-27 11:31 - 2012-04-09 11:38 - 00000000 ____D C:\users\Motherfucker666
2013-06-27 11:29 - 2013-06-06 17:29 - 00001300 __ASH C:\ProgramData\e3159cb9-3043-42f0-a3d2-f12e32f1e7f8
2013-06-27 11:29 - 2013-05-31 22:00 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-27 11:29 - 2013-05-26 08:10 - 00000296 ____A C:\Windows\Tasks\Dealply.job
2013-06-27 11:29 - 2013-05-26 08:09 - 00000298 ____A C:\Windows\Tasks\MySearchDial.job
2013-06-27 11:29 - 2012-08-08 19:36 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Skype
2013-06-27 11:29 - 2012-04-16 20:19 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-26 18:26 - 2013-06-26 15:04 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Qizue
2013-06-26 17:57 - 2012-09-16 20:40 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\CrashDumps
2013-06-26 17:52 - 2013-02-20 20:54 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-26 17:52 - 2012-04-09 11:16 - 00000000 ____D C:\ProgramData\Skype
2013-06-26 17:46 - 2013-06-26 17:46 - 00000000 ____A C:\Windows\setuperr.log
2013-06-26 15:04 - 2013-06-26 15:04 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Yvxauf
2013-06-26 15:04 - 2013-06-26 15:04 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Quubca
2013-06-25 13:34 - 2013-06-25 13:34 - 00000000 ___DC C:\Program Files (x86)\Utherverse Digital Inc
2013-06-25 13:29 - 2012-08-30 15:51 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\PMB Files
2013-06-25 12:41 - 2012-09-01 09:45 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\Akamai
2013-06-25 10:51 - 2009-07-14 05:45 - 00020992 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-25 10:51 - 2009-07-14 05:45 - 00020992 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-24 19:16 - 2012-04-09 11:50 - 00696870 ____A C:\Windows\System32\perfh007.dat
2013-06-24 19:16 - 2012-04-09 11:50 - 00148134 ____A C:\Windows\System32\perfc007.dat
2013-06-24 19:16 - 2009-07-14 06:13 - 01612484 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-24 17:34 - 2011-02-10 23:48 - 00000000 ____D C:\Windows\Panther
2013-06-19 10:15 - 2012-08-30 15:51 - 00000000 ____D C:\ProgramData\PMB Files
2013-06-17 18:24 - 2012-04-09 14:10 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\vlc
2013-06-14 02:01 - 2012-04-09 11:52 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-06-14 02:01 - 2012-04-09 11:41 - 00000000 ____D C:\Update
2013-06-14 02:00 - 2012-04-16 20:19 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-14 02:00 - 2012-04-09 11:08 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-13 02:01 - 2012-07-10 08:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-13 02:00 - 2012-04-21 03:22 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-08 15:08 - 2013-06-16 02:00 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 15:07 - 2013-06-16 02:00 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 15:06 - 2013-06-16 02:00 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 15:06 - 2013-06-16 02:00 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 15:06 - 2013-06-16 02:00 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 13:28 - 2013-06-16 02:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 12:42 - 2013-06-16 02:00 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 12:40 - 2013-06-16 02:00 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 12:13 - 2013-06-16 02:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 02:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-08 02:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-08 02:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-08 02:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-08 02:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-08 02:21 - 2013-06-08 02:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 02:21 - 2013-06-08 02:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 02:21 - 2013-06-08 02:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 02:21 - 2013-06-08 02:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 02:21 - 2013-06-08 02:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 02:21 - 2013-06-08 02:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 02:21 - 2013-06-08 02:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 02:21 - 2013-06-08 02:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 02:21 - 2013-06-08 02:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 02:21 - 2013-06-08 02:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 02:21 - 2013-06-08 02:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 02:01 - 2013-06-08 02:01 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 02:01 - 2013-06-08 02:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-06 17:14 - 2013-06-06 17:14 - 00000000 ____D C:\ProgramData\fa33352d-61d3-434a-85bd-dc3dd89a7373
2013-06-06 17:14 - 2013-06-06 17:14 - 00000000 ____D C:\ProgramData\1463
2013-06-06 17:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\sysprep
2013-06-05 15:13 - 2012-07-19 14:13 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\Microsoft Help
2013-06-04 12:29 - 2013-06-04 12:29 - 00003584 ____A C:\Users\Motherfucker666\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-05-31 22:00 - 2013-05-18 19:06 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\Google
2013-05-31 22:00 - 2012-08-27 07:59 - 00000000 ___DC C:\Program Files (x86)\Google

Files to move or delete:
====================
C:\Users\Motherfucker666\7666211.exe
C:\Users\Motherfucker666\csrss.exe
C:\ProgramData\ahc__0poi.pad
C:\ProgramData\ssrsc.pad

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================


==================== Memory info ===========================

Percentage of memory in use: 10%
Total physical RAM: 8107.82 MB
Available physical RAM: 7267.71 MB
Total Pagefile: 8106.02 MB
Available Pagefile: 7291.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:41.76 GB) (Free:0.08 GB) NTFS (Disk=0 Partition=3)
Drive d: (Volume) (Fixed) (Total:60.16 GB) (Free:6.71 GB) NTFS (Disk=0 Partition=4)
Drive f: (Recovery) (Fixed) (Total:17.22 GB) (Free:0.66 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]
Drive h: (LaCie) (Removable) (Total:7.52 GB) (Free:1.7 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 96D4082B)
Partition 1: (Not Active) - (Size=17 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=42 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=60 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 8 GB) (Disk ID: 2C6B7369)
Partition 1: (Not Active) - (Size=883 GB) - (Type=68)
Partition 2: (Not Active) - (Size=257 GB) - (Type=79)
Partition 3: (Not Active) - (Size=667 GB) - (Type=53)
Partition 4: (Not Active) - (Size=10 MB) - (Type=49)


LastRegBack: 2013-06-16 11:18

==================== End Of Log ============================

Hallo Silfed und

Mein Name ist Leo und ich werde dich durch die Bereinigung deines Rechners begleiten.

Eins vorneweg: Ich kann dir keine Garantien geben, dass ich alles finden werde. Bei schwerwiegenden Infektionen ist ein Formatieren und Neuinstallieren meist der schnellere und immer der sicherere Weg.
Wenn du dich für eine Bereinigung entscheidest, dann sollten wir gründlich vorgehen. Bleib also dran, bis ich dir eindeutig mitteile, dass wir fertig sind.
Auch wenn die auffälligen Symptome schon früh verschwinden, bedeutet das nicht, dass dein Rechner dann schon sauber und sicher ist.

Hinweise zum Ablauf

• Du bekommst von mir jeweils eine individuell auf dich abgestimmte schrittweise Anleitung.
  • Lese diese Anweisungen immer zuerst vollständig durch und frag bei Unklarheiten nach, bevor du beginnst.
  • Arbeite die Anleitungen dann sorgfältig und in der angegebenen Reihenfolge ab und poste deine Rückmeldungen und Logfiles erst zum Schluss gesammelt in einer Antwort.
  • Füge den Inhalt der Logfiles wenn immer möglich innerhalb von Code-Tags in deine Antwort ein.
  • Sollten Probleme auftauchen, dann brich an dieser Stelle ab und schildere sie so gut wie möglich.

• Es ist wichtig für mich, dass sich der Zustand deines Systems nicht plötzlich unvorhersehbar ändert:
  • Lasse keine Scanner oder Tools ohne Aufforderung laufen. Lösche nichts auf eigene Faust.
  • Installiere oder deinstalliere während der Bereinigung keine Software.

Los geht's:

Bei dir laufen auch noch andere unschöne Sachen als nur dieser GVU-Sperrschirm...
Kannst du nach folgendem Fix den Rechner wieder normal starten?


Schritt 1

Drücke auf einem Zweitrechner bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument:

HKU\Motherfucker666\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] C:\Users\Motherfucker666\7666211.exe [73728 2013-06-27] (NVIDIA Corporation)
HKU\Motherfucker666\...\Winlogon: [Shell] cmd.exe [345088 2010-11-21] (Microsoft Corporation) <==== ATTENTION
HKU\Motherfucker666\...\Command Processor: "C:\Users\Motherfucker666\7666211.exe" <===== ATTENTION!
2013-06-27 11:31 - 2013-06-27 11:31 - 01084722 ____A C:\Users\Motherfucker666\AppData\Roaming\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 01084679 ____A C:\ProgramData\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 01084677 ____A C:\Users\Motherfucker666\AppData\Local\2433f433
2013-06-27 11:31 - 2013-06-27 11:31 - 00073728 ____A (NVIDIA Corporation) C:\Users\Motherfucker666\7666211.exe
2013-06-26 15:04 - 2013-06-26 18:26 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Qizue
2013-06-26 15:04 - 2013-06-26 15:04 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Yvxauf
2013-06-26 15:04 - 2013-06-26 15:04 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Quubca
HKU\Motherfucker666\...\Run: [Iwikx] C:\Users\Motherfucker666\AppData\Roaming\Quubca\tudey.exe [356430 2012-09-01] (ActiveState Corporation)
HKU\Motherfucker666\...\Run: [Zoutpod] C:\Users\Motherfucker666\AppData\Roaming\Acbi\myig.exe [282624 2012-09-26] (Facebook Inc.)
HKU\Motherfucker666\...\Run: [hkxojyqlpydybcy] C:\ProgramData\hkxojyql.exe [x]
C:\Users\Motherfucker666\csrss.exe
C:\ProgramData\ahc__0poi.pad
C:\ProgramData\ssrsc.pad
         

Speichere dieses dann bitte unter dem Dateinamen Fixlist.txt auf deinen USB Stick neben FRST.

• Schliesse den USB Stick wieder an den infizierten Rechner an.
• Starte deinen Rechner erneut in die Reparaturoptionen.
• Starte nun wiederum FRST, aber klicke dieses Mal auf den Fix Button.

Das Tool erstellt eine Datei Fixlog.txt auf deinem USB Stick. Poste deren Inhalt bitte hier.



Bitte poste in deiner nächsten Antwort:

• Fixlog von FRST

Ja ich kann den Rechner wieder normal starten

Fixlog:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-06-2013 02
Ran by SYSTEM at 2013-06-27 13:43:27 Run:1
Running from H:\
Boot Mode: Recovery
==============================================

HKU\Motherfucker666\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully.
HKU\Motherfucker666\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
HKU\Motherfucker666\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.
C:\Users\Motherfucker666\AppData\Roaming\2433f433 => Moved successfully.
C:\ProgramData\2433f433 => Moved successfully.
C:\Users\Motherfucker666\AppData\Local\2433f433 => Moved successfully.
C:\Users\Motherfucker666\7666211.exe => Moved successfully.
C:\Users\Motherfucker666\AppData\Roaming\Qizue => Moved successfully.
C:\Users\Motherfucker666\AppData\Roaming\Yvxauf => Moved successfully.
C:\Users\Motherfucker666\AppData\Roaming\Quubca => Moved successfully.
HKU\Motherfucker666\Software\Microsoft\Windows\CurrentVersion\Run\\Iwikx => Value deleted successfully.
HKU\Motherfucker666\Software\Microsoft\Windows\CurrentVersion\Run\\Zoutpod => Value deleted successfully.
HKU\Motherfucker666\Software\Microsoft\Windows\CurrentVersion\Run\\hkxojyqlpydybcy => Value deleted successfully.
C:\Users\Motherfucker666\csrss.exe => Moved successfully.
C:\ProgramData\ahc__0poi.pad => Moved successfully.
C:\ProgramData\ssrsc.pad => Moved successfully.

==== End of Fixlog ====

Ok.

Dann verschiebe die frst64.exe vom USB-Stick auf deinen Desktop.

• Starte dann FRST.
• Setze bei Optional Scan den Haken bei Addition.txt und drücke Scan.
• Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieser beiden Logfiles bitte hier in deinen Thread.

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-06-2013 02
Ran by Asimi on 27-06-2013 13:49:40
Running from C:\Users\Motherfucker666\Desktop
WIN_7 Service Pack 1 (X64) OS Language: German Standard
Boot Mode: Recovery
Attention: Could not load system hive.
==================== Registry (Whitelisted) ==================

ATTENTION: Software hive is not loaded.

BootExecute: 

==================== Services (Whitelisted) =================


==================== Drivers (Whitelisted) ====================


==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-27 14:07 - 2013-06-27 13:49 - 00000000 ___DC C:\FRST
2013-06-27 13:49 - 2013-06-27 13:04 - 01931940 ____A (Farbar) C:\Users\Motherfucker666\Desktop\FRST64.exe
2013-06-26 18:46 - 2013-06-27 13:44 - 00000560 ____A C:\Windows\setupact.log
2013-06-26 18:46 - 2013-06-26 18:46 - 00000000 ____A C:\Windows\setuperr.log
2013-06-25 14:34 - 2013-06-25 14:34 - 00000000 ___DC C:\Program Files (x86)\Utherverse Digital Inc
2013-06-24 18:21 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-24 18:21 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-24 18:21 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-24 18:21 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-24 18:21 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-24 18:21 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-24 18:21 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-24 18:21 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-24 18:21 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-24 18:21 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-24 18:21 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-24 18:21 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-24 18:21 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-24 18:21 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-24 18:21 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-24 18:21 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-24 18:21 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-24 18:21 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-24 18:21 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-16 03:00 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-16 03:00 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-16 03:00 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-16 03:00 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-16 03:00 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-16 03:00 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-16 03:00 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-16 03:00 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-16 03:00 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 20:02 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 20:02 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 20:02 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 20:02 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 20:02 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 20:02 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 20:02 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 20:02 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 20:02 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 20:02 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 20:02 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 20:02 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 20:02 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 20:02 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 20:02 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 20:02 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 20:02 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 20:02 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 20:02 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 03:21 - 2013-06-08 03:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 03:21 - 2013-06-08 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 03:21 - 2013-06-08 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 03:21 - 2013-06-08 03:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 03:21 - 2013-06-08 03:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 03:21 - 2013-06-08 03:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 03:21 - 2013-06-08 03:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 03:21 - 2013-06-08 03:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 03:01 - 2013-06-08 03:01 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-06 18:29 - 2013-06-27 12:29 - 00001300 __ASH C:\ProgramData\e3159cb9-3043-42f0-a3d2-f12e32f1e7f8
2013-06-06 18:14 - 2013-06-06 18:14 - 00000000 ____D C:\ProgramData\fa33352d-61d3-434a-85bd-dc3dd89a7373
2013-06-06 18:14 - 2013-06-06 18:14 - 00000000 ____D C:\ProgramData\1463
2013-06-04 13:29 - 2013-06-04 13:29 - 00003584 ____A C:\Users\Motherfucker666\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-05-31 23:00 - 2013-06-27 13:45 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-31 23:00 - 2013-06-27 12:29 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

==================== One Month Modified Files and Folders =======

2013-06-27 14:43 - 2012-04-09 12:38 - 00000000 ____D C:\users\Motherfucker666
2013-06-27 13:49 - 2013-06-27 14:07 - 00000000 ___DC C:\FRST
2013-06-27 13:49 - 2012-04-09 12:50 - 00696870 ____A C:\Windows\System32\perfh007.dat
2013-06-27 13:49 - 2012-04-09 12:50 - 00148134 ____A C:\Windows\System32\perfc007.dat
2013-06-27 13:49 - 2009-07-14 07:13 - 01612484 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-27 13:45 - 2013-05-31 23:00 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-27 13:45 - 2012-08-08 20:36 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\Skype
2013-06-27 13:44 - 2013-06-26 18:46 - 00000560 ____A C:\Windows\setupact.log
2013-06-27 13:44 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-27 13:04 - 2013-06-27 13:49 - 01931940 ____A (Farbar) C:\Users\Motherfucker666\Desktop\FRST64.exe
2013-06-27 12:33 - 2013-03-20 09:11 - 01238501 ____A C:\Windows\WindowsUpdate.log
2013-06-27 12:29 - 2013-06-06 18:29 - 00001300 __ASH C:\ProgramData\e3159cb9-3043-42f0-a3d2-f12e32f1e7f8
2013-06-27 12:29 - 2013-05-31 23:00 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-27 12:29 - 2013-05-26 09:10 - 00000296 ____A C:\Windows\Tasks\Dealply.job
2013-06-27 12:29 - 2013-05-26 09:09 - 00000298 ____A C:\Windows\Tasks\MySearchDial.job
2013-06-27 12:29 - 2012-04-16 21:19 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-26 18:57 - 2012-09-16 21:40 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\CrashDumps
2013-06-26 18:52 - 2013-02-20 21:54 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-26 18:52 - 2012-04-09 12:16 - 00000000 ____D C:\ProgramData\Skype
2013-06-26 18:46 - 2013-06-26 18:46 - 00000000 ____A C:\Windows\setuperr.log
2013-06-25 14:34 - 2013-06-25 14:34 - 00000000 ___DC C:\Program Files (x86)\Utherverse Digital Inc
2013-06-25 14:29 - 2012-08-30 16:51 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\PMB Files
2013-06-25 13:41 - 2012-09-01 10:45 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\Akamai
2013-06-25 11:51 - 2009-07-14 06:45 - 00020992 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-25 11:51 - 2009-07-14 06:45 - 00020992 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-24 18:34 - 2011-02-11 00:48 - 00000000 ____D C:\Windows\Panther
2013-06-19 11:15 - 2012-08-30 16:51 - 00000000 ____D C:\ProgramData\PMB Files
2013-06-17 19:24 - 2012-04-09 15:10 - 00000000 ____D C:\Users\Motherfucker666\AppData\Roaming\vlc
2013-06-14 03:01 - 2012-04-09 12:52 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-06-14 03:01 - 2012-04-09 12:41 - 00000000 ____D C:\Update
2013-06-14 03:00 - 2012-04-16 21:19 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-14 03:00 - 2012-04-09 12:08 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-13 03:01 - 2012-07-10 09:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-13 03:00 - 2012-04-21 04:22 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-08 16:08 - 2013-06-16 03:00 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-16 03:00 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-16 03:00 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-16 03:00 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-16 03:00 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-16 03:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-16 03:00 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-16 03:00 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-16 03:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 03:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-08 03:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-08 03:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-08 03:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-08 03:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-08 03:21 - 2013-06-08 03:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-08 03:21 - 2013-06-08 03:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-08 03:21 - 2013-06-08 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-08 03:21 - 2013-06-08 03:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-08 03:21 - 2013-06-08 03:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-08 03:21 - 2013-06-08 03:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-08 03:21 - 2013-06-08 03:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-08 03:21 - 2013-06-08 03:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-08 03:21 - 2013-06-08 03:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-08 03:21 - 2013-06-08 03:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-08 03:21 - 2013-06-08 03:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-08 03:01 - 2013-06-08 03:01 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-08 03:01 - 2013-06-08 03:01 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-06 18:14 - 2013-06-06 18:14 - 00000000 ____D C:\ProgramData\fa33352d-61d3-434a-85bd-dc3dd89a7373
2013-06-06 18:14 - 2013-06-06 18:14 - 00000000 ____D C:\ProgramData\1463
2013-06-06 18:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\sysprep
2013-06-05 16:13 - 2012-07-19 15:13 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\Microsoft Help
2013-06-04 13:29 - 2013-06-04 13:29 - 00003584 ____A C:\Users\Motherfucker666\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-05-31 23:00 - 2013-05-18 20:06 - 00000000 ____D C:\Users\Motherfucker666\AppData\Local\Google
2013-05-31 23:00 - 2012-08-27 08:59 - 00000000 ___DC C:\Program Files (x86)\Google

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe:  <===== ATTENTION!
HKLM\...\exefile\DefaultIcon:  <===== ATTENTION!
HKLM\...\exefile\open\command:  <===== ATTENTION!

==================== Restore Points  =========================


==================== Memory info =========================== 

Percentage of memory in use: 22%
Total physical RAM: 8107.82 MB
Available physical RAM: 6245.34 MB
Total Pagefile: 16213.83 MB
Available Pagefile: 14164.99 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:41.76 GB) (Free:0.1 GB) NTFS (Disk=0 Partition=3)
Drive d: () (Removable) (Total:29.71 GB) (Free:4.85 GB) FAT32 (Disk=1 Partition=1)
Drive e: (LaCie) (Removable) (Total:7.52 GB) (Free:1.7 GB) FAT32 (Disk=2 Partition=1)
Drive x: (Volume) (Fixed) (Total:60.16 GB) (Free:6.71 GB) NTFS (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 96D4082B)
Partition 1: (Not Active) - (Size=17 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=42 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=60 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 30 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=30 GB) - (Type=0C)

========================================================
Disk: 2 (Size: 8 GB) (Disk ID: 2C6B7369)
Partition 1: (Not Active) - (Size=883 GB) - (Type=68)
Partition 2: (Not Active) - (Size=257 GB) - (Type=79)
Partition 3: (Not Active) - (Size=667 GB) - (Type=53)
Partition 4: (Not Active) - (Size=10 MB) - (Type=49)


LastRegBack: 2013-06-16 12:18

==================== End Of Log ============================
         

--- --- ---

Ah, das war wohl ein Missverständnis.
Wenn du den Rechner wieder normal starten kannst, dann führe diesen Schritt auch wieder im normalen Modus von Windows aus. Wiederhole das bitte.

Das war der normale Modus

Irgendwas hat da aber nicht geklappt. Lade mal ein neues FRST herunter:


Downloade dir bitte Farbar Recovery Scan Tool 64-Bit und speichere es auf den Desktop.

• Starte die FRST64.exe.
• Setze bei Optional Scan den Haken bei Addition.txt und drücke Scan.
• Wenn der Scan abgeschlossen ist, werden zwei Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieser beiden Logfiles bitte hier in deinen Thread.

Hi,

ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe?

Wenn ich in den nächsten 24 Stunden nichts von dir höre, gehe ich davon aus, dass sich das Thema erledigt hat und lösche es aus meinen Abos.

Fehlende Rückmeldung
Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung mehr über neue Antworten.
Schreib mir eine PM, falls du das Thema doch wieder fortsetzen möchtest. Dann machen wir hier weiter.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass dein Rechner schon sauber ist.

Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.