|
Log-Analyse und Auswertung: Hilfe! Trojaner Generic BefallWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
10.07.2013, 08:48 | #151 |
| Hilfe! Trojaner Generic Befall FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01 Ran by Thomas (administrator) on 10-07-2013 09:44:54 Running from C:\Users\Thomas\Downloads Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2013\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (McAfee, Inc.) c:\PROGRA~1\mcafee.com\agent\mcagent.exe (Realtek semiconductor) C:\Windows\RTFTrack.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe (Microsoft Corporation) \\?\C:\WINDOWS\system32\wbem\WMIADAP.EXE (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe (Microsoft Corporation) C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16613_none_6273bd8950d6cae2\TiWorker.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtsFT] - RTFTrack.exe [x] HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated) HKLM\...\Run: [SynLenovoGestureMgr] - "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-27] (Synaptics) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [13213840 2012-10-26] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4 [1234064 2012-10-29] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp [11577216 2012-08-27] (Motorola Solutions, Inc.) HKLM\...\Run: [OnekeyStudio] - C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe -start [4196432 2012-09-14] (Lenovo) HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-12-26] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-12-26] (Lenovo(beijing) Limited) HKLM\...\Run: [IgfxTray] - C:\WINDOWS\system32\igfxtray.exe [171040 2012-10-12] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [399392 2012-10-12] (Intel Corporation) HKLM\...\Run: [Persistence] - C:\WINDOWS\system32\igfxpers.exe [441888 2012-10-12] (Intel Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe, HKCU\...\Run: [Steam] - "C:\Program Files (x86)\Steam\Steam.exe" -silent [1672616 2013-07-10] (Valve Corporation) MountPoints2: {5936dd88-d859-11e2-be83-6036dd4cc0f1} - "F:\HTC_Sync_Manager_PC.exe" MountPoints2: {7d819304-cd77-11e2-be77-6036dd4cc0f1} - "F:\pushinst.exe" HKLM-x32\...\Run: [Dolby Home Theater v4] - "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GShortCut] - "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] - "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [mcui_exe] - "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey [1532992 2013-03-13] (McAfee, Inc.) HKLM-x32\...\Run: [Intel AppUp(SM) center] - "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY [4408368 2013-04-29] (AVG Technologies CZ, s.r.o.) AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [247144 2012-07-31] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [202600 2012-07-31] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com HKCU SearchScopes: DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {69C964DD-AD10-48F4-A751-672BDC4EF543} URL = BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20130703103424.dll (McAfee, Inc.) BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20130703103424.dll (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\PROGRA~1\mcafee\msc\MCSNIE~1.DLL (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\PROGRA~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4937264 2013-05-14] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-04-18] (AVG Technologies CZ, s.r.o.) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-01-29] (Nero AG) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McAWFwk; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [332080 2012-01-26] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [384048 2013-02-25] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241456 2013-02-19] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218760 2013-02-19] (McAfee, Inc.) R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [182752 2013-02-19] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-09-24] () R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () R2 vToolbarUpdater15.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [1598128 2013-06-28] (AVG Secure Search) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [1153840 2012-09-24] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20912 2012-10-26] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [246072 2013-03-29] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-02-08] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\system32\DRIVERS\avgldx64.sys [206136 2013-02-08] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311096 2013-02-08] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-02-08] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-02-08] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [248632 2013-06-27] (AVG Technologies CZ, s.r.o.) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.) S3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.) R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-02-19] (McAfee, Inc.) R3 fwlanusbn; C:\Windows\system32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179280 2013-02-19] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309840 2013-02-19] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69168 2013-02-19] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515968 2013-02-19] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771536 2013-02-19] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106552 2013-02-19] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [340216 2013-02-19] (McAfee, Inc.) R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4309032 2012-10-10] (Intel Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8227216 2012-08-27] (Realtek Semiconductor Corp.) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) U3 mfeavfk01; No ImagePath ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-09 21:55 - 2013-07-09 21:55 - 00000000 ____D C:\FRST 2013-07-09 21:48 - 2013-07-09 21:49 - 01776221 ____A (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2013-07-09 20:39 - 2013-07-09 20:39 - 00000880 ____A C:\Users\Thomas\Desktop\JRT.txt 2013-07-09 20:27 - 2013-07-09 20:27 - 00016382 ____A C:\AdwCleaner[S1].txt 2013-07-09 20:27 - 2013-07-09 20:27 - 00000121 ____A C:\Windows\DeleteOnReboot.bat 2013-07-09 20:23 - 2013-07-09 20:23 - 00016734 ____A C:\AdwCleaner[R1].txt 2013-07-09 20:19 - 2013-07-09 20:20 - 00552389 ____A (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe 2013-07-09 13:19 - 2013-07-09 13:19 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes 2013-07-09 13:15 - 2013-07-09 13:15 - 00001124 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-09 13:15 - 2013-07-09 13:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-09 13:15 - 2013-07-09 13:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-07-09 13:15 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys 2013-07-09 11:37 - 2013-07-09 20:21 - 00448512 ____A (OldTimer Tools) C:\Users\Thomas\Downloads\TFC.exe 2013-07-09 10:30 - 2013-07-09 20:36 - 00000000 ____D C:\Windows\ERUNT 2013-07-09 10:30 - 2013-07-09 10:30 - 00001327 ____A C:\DelFix.txt 2013-07-09 09:30 - 2013-07-09 09:30 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software 2013-07-09 09:30 - 2013-07-09 09:30 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software 2013-07-08 14:01 - 2013-07-08 14:02 - 00000000 ____D C:\Windows\LastGood.Tmp 2013-07-07 14:40 - 2013-07-07 14:40 - 00818944 ____A C:\Users\Thomas\Downloads\adblockplus-2.2.4.xpi.zip 2013-07-07 14:37 - 2013-07-07 14:40 - 00533906 ____A C:\Users\Thomas\Downloads\noscript-2.6.6.7.zip 2013-07-07 14:35 - 2013-07-07 14:35 - 00000000 ____D C:\Users\Thomas\AppData\Local\Secunia PSI 2013-07-07 14:35 - 2013-07-07 14:35 - 00000000 ____D C:\Program Files (x86)\Secunia 2013-07-07 14:34 - 2013-07-07 14:34 - 03270960 ____A (Secunia) C:\Users\Thomas\Downloads\PSISetup7009.exe 2013-07-04 19:38 - 2013-07-04 19:38 - 00000425 ____A C:\Users\Thomas\Desktop\CD-Laufwerk - Verknüpfung.lnk 2013-07-01 16:35 - 2013-07-01 16:35 - 00000000 ___HD C:\Windows\System32\CanonIJ Uninstaller Information 2013-07-01 16:35 - 2013-07-01 16:35 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-07-01 16:35 - 2006-09-13 05:00 - 00234496 ____A (CANON INC.) C:\Windows\System32\CNMLM7Q.DLL 2013-07-01 16:34 - 2013-07-01 16:34 - 00000000 ___HD C:\Program Files\CanonBJ 2013-07-01 16:34 - 2006-10-03 09:37 - 00003072 ____A C:\Windows\System32\CNCFLbNL.DLL 2013-07-01 16:34 - 2006-09-21 11:49 - 00003584 ____A (Canon Inc.) C:\Windows\System32\CNCFLbPT.DLL 2013-07-01 16:34 - 2006-09-21 11:49 - 00003584 ____A (Canon Inc.) C:\Windows\System32\CNCFLbES.DLL 2013-07-01 16:34 - 2006-09-21 11:49 - 00003584 ____A (Canon Inc.) C:\Windows\System32\CNCFLbDE.DLL 2013-07-01 16:34 - 2006-09-21 11:49 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbRU.DLL 2013-07-01 16:34 - 2006-09-21 11:49 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbPL.DLL 2013-07-01 16:34 - 2006-09-21 11:49 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbIT.DLL 2013-07-01 16:34 - 2006-09-21 11:49 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbFR.DLL 2013-07-01 16:34 - 2006-09-20 15:15 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbCN.DLL 2013-07-01 16:34 - 2006-09-20 11:37 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbKR.DLL 2013-07-01 16:34 - 2006-09-20 09:18 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbTW.DLL 2013-07-01 16:34 - 2006-09-13 11:32 - 00188928 ____A (Canon Inc.) C:\Windows\System32\CNCF2Lb.DLL 2013-07-01 16:34 - 2006-09-13 11:31 - 00093696 ____A (Canon Inc.) C:\Windows\System32\CNCFMSb.EXE 2013-07-01 16:34 - 2006-09-13 11:30 - 00003072 ____A (Canon Inc.) C:\Windows\System32\CNCFLbUS.DLL 2013-07-01 16:34 - 2006-09-13 11:28 - 00270336 ____A (CANON INC.) C:\Windows\System32\CNCC830.DLL 2013-07-01 16:34 - 2006-09-13 11:28 - 00049664 ____A (CANON INC.) C:\Windows\System32\CNCI830.DLL 2013-07-01 16:34 - 2006-06-29 14:30 - 00017408 ____A (Canon Inc.) C:\Windows\System32\cncisco.x64.dll 2013-07-01 16:34 - 2005-11-07 09:58 - 00122368 ____A (Canon Inc.) C:\Windows\System32\CNCL830.DLL 2013-06-30 18:05 - 2013-07-10 09:41 - 00000398 ____A C:\Windows\Tasks\Auto-Lyrics Update.job 2013-06-30 18:05 - 2013-07-08 13:00 - 00000000 ____D C:\Program Files (x86)\Auto-Lyrics 2013-06-30 11:03 - 2013-06-30 11:03 - 00243800 ____A C:\Users\Thomas\Downloads\Setup.exe 2013-06-29 15:48 - 2013-06-29 15:49 - 00000000 ____D C:\Users\Thomas\Desktop\ViTALiTY 2013-06-29 15:22 - 2013-06-29 15:22 - 00001222 ____A C:\Users\Public\Desktop\Soulstorm.lnk 2013-06-27 00:46 - 2013-06-27 00:46 - 00248632 ____A (AVG Technologies CZ, s.r.o.) C:\Windows\System32\Drivers\avgwfpa.sys 2013-06-25 22:18 - 2013-06-25 22:18 - 00002184 ____A C:\Users\Public\Desktop\Medieval II Total War Teutonic.lnk 2013-06-25 21:56 - 2013-06-25 21:56 - 00002184 ____A C:\Users\Public\Desktop\Medieval II Total War Crusades.lnk 2013-06-24 17:01 - 2013-06-24 17:01 - 00002194 ____A C:\Users\Public\Desktop\Medieval II Total War Britannia.lnk 2013-06-24 16:45 - 2013-06-24 16:45 - 00002184 ____A C:\Users\Public\Desktop\Medieval II Total War Americas.lnk 2013-06-24 16:34 - 2013-06-24 16:34 - 00002133 ____A C:\Users\Public\Desktop\Medieval II Total War.lnk 2013-06-24 16:19 - 2013-06-24 16:19 - 00000000 ____D C:\Program Files (x86)\SEGA 2013-06-20 11:36 - 2013-06-20 11:36 - 00239949 ____A C:\Users\Thomas\Documents\commerzbanking.oxps 2013-06-20 09:42 - 2013-06-20 09:42 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\HTC Sync 2013-06-20 09:42 - 2013-06-20 09:42 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\HTC 2013-06-20 09:41 - 2013-06-20 09:41 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Apple Computer 2013-06-20 09:41 - 2013-06-20 09:41 - 00000000 ____D C:\Users\Thomas\AppData\Local\Apple Computer 2013-06-20 09:36 - 2013-07-09 20:30 - 00000000 ____D C:\Users\Thomas\AppData\Local\HTC MediaHub 2013-06-20 09:36 - 2013-06-20 09:36 - 00002042 ____A C:\Users\Public\Desktop\HTC Sync Manager.lnk 2013-06-20 09:36 - 2013-06-20 09:36 - 00000000 ____D C:\Users\Thomas\Documents\HTC 2013-06-20 09:36 - 2013-06-20 09:36 - 00000000 ____D C:\ProgramData\Motorola 2013-06-20 09:35 - 2013-06-20 09:35 - 00000000 ____D C:\Program Files (x86)\Spirent Communications 2013-06-20 09:33 - 2013-06-20 09:33 - 00000000 ____D C:\Users\Thomas\AppData\Local\Downloaded Installations 2013-06-20 08:56 - 2013-06-20 09:36 - 00000000 ____D C:\Program Files (x86)\HTC 2013-06-20 08:56 - 2013-06-20 08:56 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2013-06-20 08:55 - 2013-06-20 08:55 - 00000000 ____D C:\ProgramData\HTC 2013-06-20 08:55 - 2009-11-02 12:16 - 00033736 ____A (HTC, Corporation) C:\Windows\System32\Drivers\ANDROIDUSB.sys 2013-06-20 08:55 - 2009-06-09 15:41 - 01122664 ____A (Microsoft Corporation) C:\Windows\System32\WdfCoInstaller01007.dll 2013-06-19 19:20 - 2013-05-16 00:35 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\tssdisai.dll 2013-06-17 10:57 - 2013-06-17 10:57 - 04378864 ____A (Piriform Ltd) C:\Users\Thomas\Downloads\ccsetup402.exe 2013-06-16 13:13 - 2013-05-04 09:45 - 02233600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-16 13:13 - 2013-04-24 01:13 - 01013248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-16 13:13 - 2013-04-24 01:12 - 01569792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-16 13:13 - 2013-04-24 01:12 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-16 13:13 - 2013-04-24 00:56 - 01255936 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-16 13:13 - 2013-04-24 00:55 - 01889280 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-16 13:13 - 2013-04-24 00:55 - 00141312 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-16 13:13 - 2013-04-24 00:55 - 00068096 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-15 14:24 - 2013-06-20 09:39 - 00292592 ____A C:\Windows\System32\FNTCACHE.DAT 2013-06-15 12:26 - 2013-06-15 12:26 - 00000000 ____D C:\3093f9b6edc53011f0 2013-06-15 11:01 - 2013-07-08 12:58 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WebApp 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\Documents\Lenovo 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\Documents\CyberLink 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Lenovo 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\CyberLink 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\ProgramData\Lenovo 2013-06-15 10:38 - 2013-04-27 07:20 - 00733184 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-15 09:24 - 2013-05-31 01:24 - 01257472 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll 2013-06-15 09:24 - 2013-05-31 01:08 - 00974848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-06-15 09:24 - 2013-05-24 01:01 - 01300992 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll 2013-06-15 09:24 - 2013-05-24 00:27 - 01022464 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-06-15 09:24 - 2013-05-04 09:58 - 00120736 ____A (Microsoft Corporation) C:\Windows\System32\AuthHost.exe 2013-06-15 09:24 - 2013-05-04 09:34 - 00446720 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS 2013-06-15 09:24 - 2013-05-04 09:34 - 00284416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys 2013-06-15 09:24 - 2013-05-04 09:34 - 00213248 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\UCX01000.SYS 2013-06-15 09:24 - 2013-05-04 09:30 - 00058312 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2013-06-15 09:24 - 2013-05-04 08:59 - 13644288 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll 2013-06-15 09:24 - 2013-05-04 08:59 - 03241472 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2013-06-15 09:24 - 2013-05-04 08:59 - 01619968 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll 2013-06-15 09:24 - 2013-05-04 08:59 - 01483776 ____A (Microsoft Corporation) C:\Windows\System32\VSSVC.exe 2013-06-15 09:24 - 2013-05-04 08:59 - 00812544 ____A (Microsoft Corporation) C:\Windows\System32\Magnify.exe 2013-06-15 09:24 - 2013-05-04 08:59 - 00760320 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2013-06-15 09:24 - 2013-05-04 08:59 - 00251904 ____A (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll 2013-06-15 09:24 - 2013-05-04 08:59 - 00141824 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll 2013-06-15 09:24 - 2013-05-04 08:59 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll 2013-06-15 09:24 - 2013-05-04 08:59 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe 2013-06-15 09:24 - 2013-05-04 08:58 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 01332736 ____A (Microsoft Corporation) C:\Windows\System32\sysmain.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 00470528 ____A (Microsoft Corporation) C:\Windows\System32\netprofmsvc.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 00330240 ____A (Microsoft Corporation) C:\Windows\System32\stobject.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 00328192 ____A (Microsoft Corporation) C:\Windows\System32\ubpm.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\storewuauth.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 00169984 ____A (Microsoft Corporation) C:\Windows\System32\netplwiz.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 00151552 ____A (Microsoft Corporation) C:\Windows\System32\netprofm.dll 2013-06-15 09:24 - 2013-05-04 08:58 - 00093696 ____A (Microsoft Corporation) C:\Windows\System32\psmsrv.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 02305024 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 01131520 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 00708096 ____A (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 00560640 ____A (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 00501760 ____A (Microsoft Corporation) C:\Windows\System32\DevicePairing.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 00389120 ____A (Microsoft Corporation) C:\Windows\System32\BCP47Langs.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 00179712 ____A (Microsoft Corporation) C:\Windows\System32\bisrv.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 00122368 ____A (Microsoft Corporation) C:\Windows\System32\biwinrt.dll 2013-06-15 09:24 - 2013-05-04 08:57 - 00017408 ____A (Microsoft Corporation) C:\Windows\System32\muifontsetup.dll 2013-06-15 09:24 - 2013-05-04 08:56 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl 2013-06-15 09:24 - 2013-05-04 06:58 - 00758784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe 2013-06-15 09:24 - 2013-05-04 06:58 - 00621056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2013-06-15 09:24 - 2013-05-04 06:58 - 00125952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2013-06-15 09:24 - 2013-05-04 06:58 - 00083968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2013-06-15 09:24 - 2013-05-04 06:58 - 00034304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2013-06-15 09:24 - 2013-05-04 06:57 - 10788864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2013-06-15 09:24 - 2013-05-04 06:57 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2013-06-15 09:24 - 2013-05-04 06:57 - 00303616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2013-06-15 09:24 - 2013-05-04 06:57 - 00247296 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2013-06-15 09:24 - 2013-05-04 06:57 - 00151040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll 2013-06-15 09:24 - 2013-05-04 06:57 - 00115712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll 2013-06-15 09:24 - 2013-05-04 06:57 - 00018432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll 2013-06-15 09:24 - 2013-05-04 06:57 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll 2013-06-15 09:24 - 2013-05-04 06:56 - 02035712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-06-15 09:24 - 2013-05-04 06:56 - 00449536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll 2013-06-15 09:24 - 2013-05-04 06:56 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2013-06-15 09:24 - 2013-05-04 06:56 - 00309760 ____A (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll 2013-06-15 09:24 - 2013-05-04 06:56 - 00092160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll 2013-06-15 09:24 - 2013-05-04 06:55 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl 2013-06-15 09:24 - 2013-05-04 06:51 - 00014848 ____A (Microsoft) C:\Windows\System32\rars.rs 2013-06-15 09:24 - 2013-05-04 06:48 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys 2013-06-15 09:24 - 2013-05-04 06:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys 2013-06-15 09:24 - 2013-05-04 06:47 - 00427520 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdbss.sys 2013-06-15 09:24 - 2013-05-04 06:10 - 00014848 ____A (Microsoft) C:\Windows\SysWOW64\rars.rs 2013-06-15 09:24 - 2013-05-03 00:04 - 00386646 ____A C:\Windows\System32\ApnDatabase.xml 2013-06-15 09:23 - 2013-05-15 04:25 - 00888320 ____A (Microsoft Corporation) C:\Windows\System32\autochk.exe 2013-06-15 09:23 - 2013-05-15 04:25 - 00542208 ____A (Microsoft Corporation) C:\Windows\System32\untfs.dll 2013-06-15 09:23 - 2013-05-15 04:24 - 00793088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe 2013-06-15 09:23 - 2013-05-15 04:24 - 00482816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2013-06-15 09:22 - 2012-10-17 06:32 - 01172992 ____A (Microsoft Corporation) C:\Windows\System32\mfnetsrc.dll 2013-06-15 09:22 - 2012-10-17 05:57 - 00929792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll 2013-06-15 09:21 - 2012-10-17 06:32 - 00677888 ____A (Microsoft Corporation) C:\Windows\System32\mfnetcore.dll 2013-06-15 09:21 - 2012-10-17 06:32 - 00673280 ____A (Microsoft Corporation) C:\Windows\System32\mfmpeg2srcsnk.dll 2013-06-15 09:21 - 2012-10-17 05:57 - 00568832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll 2013-06-15 09:21 - 2012-10-17 05:57 - 00513024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll 2013-06-15 09:21 - 2012-10-12 08:13 - 00109568 ____A (Microsoft Corporation) C:\Windows\System32\dskquota.dll 2013-06-15 09:21 - 2012-10-12 07:39 - 00082944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dskquota.dll 2013-06-15 09:18 - 2012-10-24 06:54 - 00396008 ____A (Microsoft Corporation) C:\Windows\System32\hal.dll 2013-06-15 09:14 - 2012-10-11 09:47 - 00793200 ____A (Microsoft Corporation) C:\Windows\System32\mfplat.dll 2013-06-15 09:14 - 2012-10-11 09:35 - 02380944 ____A (Microsoft Corporation) C:\Windows\explorer.exe 2013-06-15 09:14 - 2012-10-11 09:25 - 00056552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\sdstor.sys 2013-06-15 09:14 - 2012-10-11 09:23 - 00441576 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys 2013-06-15 09:14 - 2012-10-11 09:18 - 00172264 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys 2013-06-15 09:14 - 2012-10-11 09:13 - 00058088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dam.sys 2013-06-15 09:14 - 2012-10-11 09:13 - 00033512 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\battc.sys 2013-06-15 09:14 - 2012-10-11 09:08 - 00562392 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys 2013-06-15 09:14 - 2012-10-11 09:02 - 01636672 ____A (Microsoft Corporation) C:\Windows\System32\WMALFXGFXDSP.dll 2013-06-15 09:14 - 2012-10-11 07:56 - 02115952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2013-06-15 09:14 - 2012-10-11 07:46 - 01395712 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Immersive.dll 2013-06-15 09:14 - 2012-10-11 07:46 - 00517120 ____A (Microsoft Corporation) C:\Windows\System32\winlogon.exe 2013-06-15 09:14 - 2012-10-11 07:46 - 00154112 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Storage.Compression.dll 2013-06-15 09:14 - 2012-10-11 07:45 - 01045504 ____A (Microsoft Corporation) C:\Windows\System32\usercpl.dll 2013-06-15 09:14 - 2012-10-11 07:45 - 00590848 ____A (Microsoft Corporation) C:\Windows\System32\SHCore.dll 2013-06-15 09:14 - 2012-10-11 07:45 - 00579584 ____A (Microsoft Corporation) C:\Windows\System32\StructuredQuery.dll 2013-06-15 09:14 - 2012-10-11 07:45 - 00505344 ____A (Microsoft Corporation) C:\Windows\System32\SpaceControl.dll 2013-06-15 09:14 - 2012-10-11 07:44 - 01265152 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll 2013-06-15 09:14 - 2012-10-11 07:44 - 00904192 ____A (Microsoft Corporation) C:\Windows\System32\MPSSVC.dll 2013-06-15 09:14 - 2012-10-11 07:44 - 00264704 ____A (Microsoft Corporation) C:\Windows\System32\ListSvc.dll 2013-06-15 09:14 - 2012-10-11 07:44 - 00259584 ____A (Microsoft Corporation) C:\Windows\System32\input.dll 2013-06-15 09:14 - 2012-10-11 07:43 - 02206208 ____A (Microsoft Corporation) C:\Windows\System32\dwmcore.dll 2013-06-15 09:14 - 2012-10-11 07:43 - 00244224 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll 2013-06-15 09:14 - 2012-10-11 07:43 - 00190976 ____A (Microsoft Corporation) C:\Windows\System32\bdesvc.dll 2013-06-15 09:14 - 2012-10-11 07:43 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll 2013-06-15 09:14 - 2012-10-11 07:42 - 00612416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2013-06-15 09:14 - 2012-10-11 07:20 - 00043008 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usbscan.sys 2013-06-15 09:14 - 2012-10-11 07:16 - 00286208 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\portcls.sys 2013-06-15 09:14 - 2012-10-11 07:07 - 01226752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2013-06-15 09:14 - 2012-10-11 07:07 - 00962560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2013-06-15 09:14 - 2012-10-11 07:07 - 00460800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2013-06-15 09:14 - 2012-10-11 07:07 - 00414720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2013-06-15 09:14 - 2012-10-11 07:07 - 00116224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Compression.dll 2013-06-15 09:14 - 2012-10-11 07:06 - 01841152 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2013-06-15 09:14 - 2012-10-11 07:06 - 00289280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-06-15 09:14 - 2012-10-11 07:06 - 00219648 ____A (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2013-06-15 09:14 - 2012-10-11 07:06 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2013-06-15 09:14 - 2012-10-11 07:06 - 00051712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2013-06-15 09:14 - 2012-10-11 02:45 - 00478424 ____A C:\Windows\SysWOW64\locale.nls 2013-06-15 09:14 - 2012-10-11 02:44 - 00478424 ____A C:\Windows\System32\locale.nls 2013-06-15 09:13 - 2012-10-11 07:46 - 00049664 ____A (Microsoft Corporation) C:\Windows\System32\BdeUISrv.exe 2013-06-15 09:13 - 2012-10-11 07:46 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\wfapigp.dll 2013-06-15 09:13 - 2012-10-11 07:45 - 00370176 ____A (Microsoft Corporation) C:\Windows\System32\SysFxUI.dll 2013-06-15 09:13 - 2012-10-11 07:45 - 00055808 ____A (Microsoft Corporation) C:\Windows\System32\PCPKsp.dll 2013-06-15 09:13 - 2012-10-11 07:44 - 00355328 ____A (Microsoft Corporation) C:\Windows\System32\mswsock.dll 2013-06-15 09:13 - 2012-10-11 07:44 - 00105984 ____A (Microsoft Corporation) C:\Windows\System32\icfupgd.dll 2013-06-15 09:13 - 2012-10-11 07:43 - 01836032 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-06-15 09:13 - 2012-10-11 07:43 - 01280000 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-06-15 09:13 - 2012-10-11 07:43 - 00757760 ____A (Microsoft Corporation) C:\Windows\System32\FirewallAPI.dll 2013-06-15 09:13 - 2012-10-11 07:43 - 00331776 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcore.dll 2013-06-15 09:13 - 2012-10-11 07:43 - 00118784 ____A (Microsoft Corporation) C:\Windows\System32\AppxSip.dll 2013-06-15 09:13 - 2012-10-11 07:43 - 00081920 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc.dll 2013-06-15 09:13 - 2012-10-11 07:23 - 00034816 ____A (Microsoft Corporation) C:\Windows\System32\microsoft-windows-pdc.dll 2013-06-15 09:13 - 2012-10-11 07:23 - 00007680 ____A (Microsoft Corporation) C:\Windows\System32\kbdhebl3.dll 2013-06-15 09:13 - 2012-10-11 07:19 - 00005632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\drmkaud.sys 2013-06-15 09:13 - 2012-10-11 07:18 - 00111616 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\drmk.sys 2013-06-15 09:13 - 2012-10-11 07:15 - 00074752 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mpsdrv.sys 2013-06-15 09:13 - 2012-10-11 07:07 - 00047616 ____A (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll 2013-06-15 09:13 - 2012-10-11 07:07 - 00019968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll 2013-06-15 09:13 - 2012-10-11 07:06 - 01420800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-06-15 09:13 - 2012-10-11 07:06 - 00550912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2013-06-15 09:13 - 2012-10-11 07:06 - 00270336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll 2013-06-15 09:13 - 2012-10-11 07:06 - 00060416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll 2013-06-15 09:13 - 2012-10-11 07:05 - 00099840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2013-06-15 09:13 - 2012-10-11 06:42 - 00007168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kbdhebl3.dll 2013-06-13 21:43 - 2013-04-03 01:37 - 00025088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-13 21:43 - 2013-04-03 01:12 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-13 17:41 - 2012-04-20 16:40 - 00196440 ____A (McAfee, Inc.) C:\Windows\System32\Drivers\HipShieldK.sys 2013-06-13 17:34 - 2013-05-16 00:37 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2013-06-13 17:34 - 2013-05-16 00:36 - 14320640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-13 17:34 - 2013-05-16 00:35 - 19230720 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-13 17:34 - 2013-05-16 00:35 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\UXInit.dll 2013-06-13 17:34 - 2013-05-14 15:14 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-13 17:34 - 2013-05-14 11:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-13 17:34 - 2013-04-29 00:30 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-13 17:34 - 2013-04-29 00:30 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-13 17:34 - 2013-04-29 00:30 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-13 17:34 - 2013-04-29 00:30 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-13 17:34 - 2013-04-29 00:30 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-13 17:34 - 2013-04-29 00:30 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-13 17:34 - 2013-04-29 00:30 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-13 17:34 - 2013-04-29 00:28 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-13 17:34 - 2013-04-29 00:28 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-13 17:34 - 2013-04-29 00:28 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-13 17:34 - 2013-04-29 00:28 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll 2013-06-13 17:34 - 2013-04-29 00:28 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-13 17:34 - 2013-04-29 00:28 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-13 17:34 - 2013-04-29 00:27 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-13 17:34 - 2013-04-29 00:27 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-13 17:34 - 2013-04-29 00:27 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-12 10:45 - 2013-07-09 09:30 - 00000992 ____A C:\Users\Public\Desktop\AVG 2013.lnk 2013-06-12 10:45 - 2013-06-28 22:04 - 00045856 ____A (AVG Technologies) C:\Windows\System32\Drivers\avgtpx64.sys 2013-06-12 10:45 - 2013-06-12 10:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\TuneUp Software 2013-06-12 10:45 - 2013-06-12 10:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\AVG2013 2013-06-12 10:43 - 2013-06-12 10:45 - 00000000 ____D C:\ProgramData\AVG2013 2013-06-12 10:43 - 2013-06-12 10:43 - 00000000 ___HD C:\$AVG 2013-06-12 10:43 - 2013-06-12 10:43 - 00000000 ____D C:\Program Files (x86)\AVG 2013-06-12 10:41 - 2013-07-10 09:45 - 00000000 ____D C:\ProgramData\MFAData 2013-06-12 10:41 - 2013-06-12 11:05 - 00000000 ____D C:\Users\Thomas\AppData\Local\Avg2013 2013-06-12 10:41 - 2013-06-12 10:41 - 00000000 ____D C:\Users\Thomas\AppData\Local\MFAData 2013-06-10 01:39 - 2013-06-10 01:40 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Meine Der Herr der Ringe™, Aufstieg des Hexenkönigs™-Dateien 2013-06-10 01:34 - 2013-06-10 01:34 - 00002276 ____A C:\Users\Public\Desktop\Aufstieg des Hexenkönigs™.lnk 2013-06-10 00:11 - 2013-06-10 00:11 - 00002306 ____A C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk 2013-06-10 00:01 - 2013-06-10 01:28 - 00000000 ____D C:\Program Files (x86)\Electronic Arts ==================== One Month Modified Files and Folders ======= 2013-07-10 09:45 - 2013-06-12 10:41 - 00000000 ____D C:\ProgramData\MFAData 2013-07-10 09:45 - 2012-12-26 23:46 - 00001839 ____A C:\Users\Public\Desktop\McAfee Internet Security.lnk 2013-07-10 09:44 - 2013-06-05 05:35 - 00000000 ____D C:\Program Files (x86)\Steam 2013-07-10 09:44 - 2012-12-27 07:57 - 00753134 ____A C:\Windows\System32\perfh007.dat 2013-07-10 09:44 - 2012-12-27 07:57 - 00155826 ____A C:\Windows\System32\perfc007.dat 2013-07-10 09:44 - 2012-07-26 09:28 - 01745416 ____A C:\Windows\System32\PerfStringBackup.INI 2013-07-10 09:42 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\sru 2013-07-10 09:41 - 2013-06-30 18:05 - 00000398 ____A C:\Windows\Tasks\Auto-Lyrics Update.job 2013-07-09 21:55 - 2013-07-09 21:55 - 00000000 ____D C:\FRST 2013-07-09 21:49 - 2013-07-09 21:48 - 01776221 ____A (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2013-07-09 20:39 - 2013-07-09 20:39 - 00000880 ____A C:\Users\Thomas\Desktop\JRT.txt 2013-07-09 20:36 - 2013-07-09 10:30 - 00000000 ____D C:\Windows\ERUNT 2013-07-09 20:30 - 2013-06-20 09:36 - 00000000 ____D C:\Users\Thomas\AppData\Local\HTC MediaHub 2013-07-09 20:29 - 2012-07-26 09:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-09 20:27 - 2013-07-09 20:27 - 00016382 ____A C:\AdwCleaner[S1].txt 2013-07-09 20:27 - 2013-07-09 20:27 - 00000121 ____A C:\Windows\DeleteOnReboot.bat 2013-07-09 20:23 - 2013-07-09 20:23 - 00016734 ____A C:\AdwCleaner[R1].txt 2013-07-09 20:21 - 2013-07-09 11:37 - 00448512 ____A (OldTimer Tools) C:\Users\Thomas\Downloads\TFC.exe 2013-07-09 20:20 - 2013-07-09 20:19 - 00552389 ____A (Oleg N. Scherbakov) C:\Users\Thomas\Downloads\JRT.exe 2013-07-09 16:12 - 2012-09-13 20:32 - 00006354 ____A C:\Windows\PFRO.log 2013-07-09 14:58 - 2012-12-26 23:50 - 01578842 ____A C:\Windows\WindowsUpdate.log 2013-07-09 13:19 - 2013-07-09 13:19 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Malwarebytes 2013-07-09 13:16 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent 2013-07-09 13:15 - 2013-07-09 13:15 - 00001124 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-09 13:15 - 2013-07-09 13:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-07-09 13:15 - 2013-07-09 13:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-07-09 10:30 - 2013-07-09 10:30 - 00001327 ____A C:\DelFix.txt 2013-07-09 09:30 - 2013-07-09 09:30 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software 2013-07-09 09:30 - 2013-07-09 09:30 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software 2013-07-09 09:30 - 2013-06-12 10:45 - 00000992 ____A C:\Users\Public\Desktop\AVG 2013.lnk 2013-07-08 14:04 - 2012-12-26 23:15 - 00000000 ____D C:\Windows\SysWOW64\NV 2013-07-08 14:04 - 2012-12-26 23:15 - 00000000 ____D C:\Windows\System32\NV 2013-07-08 14:02 - 2013-07-08 14:01 - 00000000 ____D C:\Windows\LastGood.Tmp 2013-07-08 13:16 - 2012-07-26 07:26 - 00262144 __ASH C:\Windows\System32\config\BBI 2013-07-08 13:00 - 2013-06-30 18:05 - 00000000 ____D C:\Program Files (x86)\Auto-Lyrics 2013-07-08 12:59 - 2013-06-05 03:04 - 00000000 ____D C:\ProgramData\eBay 2013-07-08 12:59 - 2012-12-26 23:42 - 00000000 ____D C:\Program Files (x86)\SugarSync 2013-07-08 12:59 - 2012-07-26 10:12 - 00000000 __RHD C:\Users\Public\Libraries 2013-07-08 12:59 - 2012-07-26 09:52 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-08 12:58 - 2013-06-15 11:01 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\WebApp 2013-07-08 12:58 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\Cursors 2013-07-08 12:57 - 2012-07-26 10:12 - 00000000 __RSD C:\Windows\Media 2013-07-08 12:57 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2013-07-08 12:57 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\L2Schemas 2013-07-08 12:55 - 2012-12-26 23:23 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-07-08 12:55 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData 2013-07-08 12:55 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\SysWOW64\InstallShield 2013-07-08 12:55 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\WinMetadata 2013-07-08 12:55 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\Recovery 2013-07-08 12:55 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\migwiz 2013-07-08 12:55 - 2012-07-26 07:38 - 00000000 ___AD C:\Windows\System32\oobe 2013-07-08 12:54 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\registration 2013-07-07 14:43 - 2012-12-26 23:10 - 00000000 ____D C:\Intel 2013-07-07 14:40 - 2013-07-07 14:40 - 00818944 ____A C:\Users\Thomas\Downloads\adblockplus-2.2.4.xpi.zip 2013-07-07 14:40 - 2013-07-07 14:37 - 00533906 ____A C:\Users\Thomas\Downloads\noscript-2.6.6.7.zip 2013-07-07 14:35 - 2013-07-07 14:35 - 00000000 ____D C:\Users\Thomas\AppData\Local\Secunia PSI 2013-07-07 14:35 - 2013-07-07 14:35 - 00000000 ____D C:\Program Files (x86)\Secunia 2013-07-07 14:34 - 2013-07-07 14:34 - 03270960 ____A (Secunia) C:\Users\Thomas\Downloads\PSISetup7009.exe 2013-07-05 16:50 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\NDF 2013-07-04 19:38 - 2013-07-04 19:38 - 00000425 ____A C:\Users\Thomas\Desktop\CD-Laufwerk - Verknüpfung.lnk 2013-07-03 20:10 - 2012-07-26 07:26 - 00262144 __ASH C:\Windows\System32\config\ELAM 2013-07-01 16:37 - 2012-07-26 09:21 - 00052503 ____A C:\Windows\setupact.log 2013-07-01 16:35 - 2013-07-01 16:35 - 00000000 ___HD C:\Windows\System32\CanonIJ Uninstaller Information 2013-07-01 16:35 - 2013-07-01 16:35 - 00000000 ___HD C:\ProgramData\CanonBJ 2013-07-01 16:34 - 2013-07-01 16:34 - 00000000 ___HD C:\Program Files\CanonBJ 2013-06-30 18:05 - 2013-06-09 20:57 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-06-30 11:03 - 2013-06-30 11:03 - 00243800 ____A C:\Users\Thomas\Downloads\Setup.exe 2013-06-29 15:49 - 2013-06-29 15:48 - 00000000 ____D C:\Users\Thomas\Desktop\ViTALiTY 2013-06-29 15:22 - 2013-06-29 15:22 - 00001222 ____A C:\Users\Public\Desktop\Soulstorm.lnk 2013-06-29 15:22 - 2013-06-05 05:34 - 00356551 ____A C:\Windows\DirectX.log 2013-06-29 15:11 - 2013-06-07 03:24 - 00000000 ____D C:\Program Files (x86)\THQ 2013-06-29 15:11 - 2012-12-26 23:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-06-28 22:04 - 2013-06-12 10:45 - 00045856 ____A (AVG Technologies) C:\Windows\System32\Drivers\avgtpx64.sys 2013-06-27 00:46 - 2013-06-27 00:46 - 00248632 ____A (AVG Technologies CZ, s.r.o.) C:\Windows\System32\Drivers\avgwfpa.sys 2013-06-25 22:18 - 2013-06-25 22:18 - 00002184 ____A C:\Users\Public\Desktop\Medieval II Total War Teutonic.lnk 2013-06-25 21:56 - 2013-06-25 21:56 - 00002184 ____A C:\Users\Public\Desktop\Medieval II Total War Crusades.lnk 2013-06-24 17:01 - 2013-06-24 17:01 - 00002194 ____A C:\Users\Public\Desktop\Medieval II Total War Britannia.lnk 2013-06-24 16:45 - 2013-06-24 16:45 - 00002184 ____A C:\Users\Public\Desktop\Medieval II Total War Americas.lnk 2013-06-24 16:34 - 2013-06-24 16:34 - 00002133 ____A C:\Users\Public\Desktop\Medieval II Total War.lnk 2013-06-24 16:19 - 2013-06-24 16:19 - 00000000 ____D C:\Program Files (x86)\SEGA 2013-06-23 21:06 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache 2013-06-21 18:01 - 2013-06-05 21:22 - 00027387 ____A C:\Windows\avmfwlanci.log 2013-06-20 11:36 - 2013-06-20 11:36 - 00239949 ____A C:\Users\Thomas\Documents\commerzbanking.oxps 2013-06-20 09:42 - 2013-06-20 09:42 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\HTC Sync 2013-06-20 09:42 - 2013-06-20 09:42 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\HTC 2013-06-20 09:41 - 2013-06-20 09:41 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Apple Computer 2013-06-20 09:41 - 2013-06-20 09:41 - 00000000 ____D C:\Users\Thomas\AppData\Local\Apple Computer 2013-06-20 09:39 - 2013-06-15 14:24 - 00292592 ____A C:\Windows\System32\FNTCACHE.DAT 2013-06-20 09:37 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing 2013-06-20 09:36 - 2013-06-20 09:36 - 00002042 ____A C:\Users\Public\Desktop\HTC Sync Manager.lnk 2013-06-20 09:36 - 2013-06-20 09:36 - 00000000 ____D C:\Users\Thomas\Documents\HTC 2013-06-20 09:36 - 2013-06-20 09:36 - 00000000 ____D C:\ProgramData\Motorola 2013-06-20 09:36 - 2013-06-20 08:56 - 00000000 ____D C:\Program Files (x86)\HTC 2013-06-20 09:36 - 2012-12-26 23:06 - 00039240 ____A C:\Windows\DPINST.LOG 2013-06-20 09:35 - 2013-06-20 09:35 - 00000000 ____D C:\Program Files (x86)\Spirent Communications 2013-06-20 09:33 - 2013-06-20 09:33 - 00000000 ____D C:\Users\Thomas\AppData\Local\Downloaded Installations 2013-06-20 08:56 - 2013-06-20 08:56 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2013-06-20 08:55 - 2013-06-20 08:55 - 00000000 ____D C:\ProgramData\HTC 2013-06-17 10:57 - 2013-06-17 10:57 - 04378864 ____A (Piriform Ltd) C:\Users\Thomas\Downloads\ccsetup402.exe 2013-06-16 13:07 - 2013-06-05 03:03 - 00000000 ____D C:\Users\Thomas\AppData\Local\VirtualStore 2013-06-15 12:30 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore 2013-06-15 12:30 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2013-06-15 12:30 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2013-06-15 12:30 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\SysWOW64\Dism 2013-06-15 12:29 - 2012-07-26 07:38 - 00000000 ____D C:\Windows\System32\Dism 2013-06-15 12:26 - 2013-06-15 12:26 - 00000000 ____D C:\3093f9b6edc53011f0 2013-06-15 12:26 - 2013-06-05 22:31 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\Documents\Lenovo 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\Documents\CyberLink 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Lenovo 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\CyberLink 2013-06-15 10:52 - 2013-06-15 10:52 - 00000000 ____D C:\ProgramData\Lenovo 2013-06-15 10:52 - 2012-12-26 23:43 - 00000000 ____D C:\ProgramData\CyberLink 2013-06-13 17:50 - 2012-12-26 23:44 - 00000000 ____D C:\Program Files (x86)\McAfee 2013-06-12 11:05 - 2013-06-12 10:41 - 00000000 ____D C:\Users\Thomas\AppData\Local\Avg2013 2013-06-12 10:45 - 2013-06-12 10:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\TuneUp Software 2013-06-12 10:45 - 2013-06-12 10:45 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\AVG2013 2013-06-12 10:45 - 2013-06-12 10:43 - 00000000 ____D C:\ProgramData\AVG2013 2013-06-12 10:44 - 2012-07-26 10:12 - 00000000 ___HD C:\Windows\ELAMBKUP 2013-06-12 10:43 - 2013-06-12 10:43 - 00000000 ___HD C:\$AVG 2013-06-12 10:43 - 2013-06-12 10:43 - 00000000 ____D C:\Program Files (x86)\AVG 2013-06-12 10:41 - 2013-06-12 10:41 - 00000000 ____D C:\Users\Thomas\AppData\Local\MFAData 2013-06-10 01:40 - 2013-06-10 01:39 - 00000000 ____D C:\Users\Thomas\AppData\Roaming\Meine Der Herr der Ringe™, Aufstieg des Hexenkönigs™-Dateien 2013-06-10 01:34 - 2013-06-10 01:34 - 00002276 ____A C:\Users\Public\Desktop\Aufstieg des Hexenkönigs™.lnk 2013-06-10 01:28 - 2013-06-10 00:01 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2013-06-10 00:11 - 2013-06-10 00:11 - 00002306 ____A C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-09 09:35 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-07-2013 01 Ran by Thomas at 2013-07-10 09:45:55 Running from C:\Users\Thomas\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Age of Mythology - The Titans Expansion (x32) Age of Mythology (x32) Amazon Browser App (x32 Version: 1.0.0.0) Aufstieg des Hexenkönigs™ (x32) Auto-Lyrics (x32) AVG 2013 (Version: 13.0.3204) AVG 2013 (Version: 13.0.3349) AVG 2013 (Version: 2013.0.3349) Benutzerhandbuch (x32 Version: 1.0.0.9) Canon MP830 MP Drivers Crusader Kings II (x32) Dawn of War - Dark Crusade (x32 Version: 1.00.0000) Dawn of War - Soulstorm (x32 Version: 1.00.0000) DawnOfWar (x32 Version: 1.00.00000) Die Schlacht um Mittelerde(tm) (x32) Die Schlacht um Mittelerde™ II (x32) Dolby Home Theater v4 (x32 Version: 7.2.8000.16) dows-Treiberpaket - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (Version: 06/15/2012 8.1.0.1) Energy Management (x32 Version: 8.0.2.4) HTC Driver Installer (x32 Version: 4.2.0.001) HTC Sync Manager (x32 Version: 2.0.60.0) Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10) Intel PROSet Wireless Intel(R) Management Engine Components (x32 Version: 8.1.0.1252) Intel(R) Processor Graphics (x32 Version: 9.17.10.2867) Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.5.4.0423) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.6.1209.0268) Intel(R) Rapid Storage Technology (x32 Version: 11.5.0.1207) Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149) Intel® PROSet/Wireless WiFi-Software (Version: 15.05.6000.1620) Intel® Trusted Connect Service Client (Version: 1.24.388.1) Intelligent Touchpad (x32 Version: 2.00.0012.0723) IPTInstaller (x32 Version: 4.0.8) Lenovo EasyCamera (x32 Version: 6.2.8400.10182) Lenovo OneKey Recovery (Version: 8.0.0.0710) Lenovo OneKey Recovery (x32 Version: 8.0.0.0710) Lenovo PowerDVD10 (x32 Version: 10.0.4331.52) Lenovo YouCam (x32 Version: 4.1.3127) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) McAfee Internet Security (x32 Version: 11.6.511) Medieval II Total War (x32 Version: 1.03.000) Medieval II Total War : Kingdoms : Americas (x32 Version: 1.03.000) Medieval II Total War : Kingdoms : Britannia (x32 Version: 1.03.000) Medieval II Total War : Kingdoms : Crusades (x32 Version: 1.03.000) Medieval II Total War : Kingdoms : Teutonic (x32 Version: 1.03.000) Microsoft Office (x32 Version: 14.0.6120.5004) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) MSXML4 Parser (x32 Version: 1.0.0) NVIDIA Grafiktreiber 305.46 (Version: 305.46) NVIDIA Install Application (Version: 2.1002.82.513) NVIDIA Optimus 1.10.8 (Version: 1.10.8) NVIDIA PhysX (x32 Version: 9.12.0613) NVIDIA PhysX-Systemsoftware 9.12.0613 (Version: 9.12.0613) NVIDIA Systemsteuerung 305.46 (Version: 305.46) NVIDIA Update 1.10.8 (Version: 1.10.8) NVIDIA Update Components (Version: 1.10.8) Onekey Theater (x32 Version: 3.0.1.0) Power2Go (x32 Version: 5.6.0.9109) Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6767) Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.39029) Shared C Run-time for x64 (Version: 10.0.0) Sid Meier's Civilization V (x32) Steam (x32 Version: 1.0.0.0) Stronghold 3 (x32) SugarSync Manager (x32 Version: 1.9.61.90905) Synaptics Pointing Device Driver (Version: 16.2.10.13) UserGuide (x32 Version: 1.0.0.9) Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1) Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (Version: 06/19/2012 10.13.29.733) ==================== Restore Points ========================= 09-07-2013 08:30:18 Ende der Bereinigung ==================== Hosts content: ========================== 2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation) Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents Task: {1E5E0D99-5611-4D1A-AC8F-DFA68C676047} - System32\Tasks\0 => C:\program files\internet explorer\iexplore.exe [2013-02-21] (Microsoft Corporation) Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance Task: {23122CDF-24D4-4326-883F-5D9B2E377FEF} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation) Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon Task: {4F4C9C88-85C4-41E0-BF25-17F6BF035613} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required Task: {5EB54BCF-3F7A-440C-9E89-FF6626CA40BF} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation) Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation) Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Task: {70E2D6E2-A735-41C1-9840-4AF62A6417DB} - System32\Tasks\OFFICE2010ACT => C:\ProgramData\Microsoft\Windows\OFFICEICON.vbs [2012-03-08] () Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update Task: {789C564D-BD15-4611-AD09-8D167C007CAE} - System32\Tasks\DealPly => C:\Users\Thomas\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance Task: {8570AD90-E9B2-42BB-84D9-8008C49C6358} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode) Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses Task: {92E4AC0B-B924-47EB-9545-C2454D820DA1} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic Task: {9B537965-6575-4D97-B8B8-016FFEBB9BF0} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2248297257-1772839257-1761684045-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {9CBBD45F-69A7-4C84-8D2E-61186E03B367} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation) Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask Task: {ADD1ADC2-F5CA-4F1D-AF15-C54053C01F39} - System32\Tasks\DealPlyUpdate => C:\Program No File Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan Task: {B1E794FF-CEC0-4FF2-971E-4955BEC6F995} - System32\Tasks\EPUpdater => C:\Users\Thomas\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork Task: {D40021BA-F114-44F8-9243-367C6E447C56} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2248297257-1772839257-1761684045-1002 Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical Task: {DC3EF048-355E-494C-93BE-FF0C32C63F5B} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\WINDOWS\System32\lpksetup.exe [2012-09-20] (Microsoft Corporation) Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery Task: {E447B401-2723-4AC4-AC4F-43F953676CF6} - System32\Tasks\Auto-Lyrics Update => C:\Program Files (x86)\Auto-Lyrics\alUpdater.exe [2013-06-22] (Mansoft AutoLyrics) Task: {E44F0E11-654B-48DB-B99A-8CD6107FBF3F} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\WINDOWS\system32\sc.exe [2012-07-26] (Microsoft Corporation) Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask Task: {E881BB25-54C0-4B48-B81D-E38A8474CA6A} - System32\Tasks\4801 => C:\Windows\System32\wscript.exe [2012-07-26] (Microsoft Corporation) Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation) Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM Task: C:\WINDOWS\Tasks\Auto-Lyrics Update.job => C:\Program Files (x86)\Auto-Lyrics\alUpdater.exe ==================== Faulty Device Manager Devices ============= Name: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter Description: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Intel Corporation Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (07/09/2013 04:13:17 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: ZeroConfigService.exe, Version: 15.5.5.0, Zeitstempel: 0x5060e311 Name des fehlerhaften Moduls: MurocApi.dll, Version: 15.5.5.0, Zeitstempel: 0x5060e22c Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000265e0 ID des fehlerhaften Prozesses: 0x638 Startzeit der fehlerhaften Anwendung: 0xZeroConfigService.exe0 Pfad der fehlerhaften Anwendung: ZeroConfigService.exe1 Pfad des fehlerhaften Moduls: ZeroConfigService.exe2 Berichtskennung: ZeroConfigService.exe3 Vollständiger Name des fehlerhaften Pakets: ZeroConfigService.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ZeroConfigService.exe5 Error: (07/09/2013 01:34:02 PM) (Source: Application Hang) (User: ) Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 888 Startzeit: 01ce7c92f7fd7165 Endzeit: 391 Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Berichts-ID: 7108c93f-e88b-11e2-be8f-bc0543069360 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (07/09/2013 01:33:59 PM) (Source: Application Hang) (User: ) Description: Programm IEXPLORE.EXE, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1ab4 Startzeit: 01ce7c93136aa8ee Endzeit: 141 Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Berichts-ID: 6f3c9df5-e88b-11e2-be8f-bc0543069360 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (07/09/2013 00:55:00 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest. Error: (07/09/2013 00:23:44 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: ismagent.exe, Version: 1.14.1.36458, Zeitstempel: 0x4fbe2d9c Name des fehlerhaften Moduls: dlnashext.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5010975d Ausnahmecode: 0xc0000005 Fehleroffset: 0x6ed7deed ID des fehlerhaften Prozesses: 0x1888 Startzeit der fehlerhaften Anwendung: 0xismagent.exe0 Pfad der fehlerhaften Anwendung: ismagent.exe1 Pfad des fehlerhaften Moduls: ismagent.exe2 Berichtskennung: ismagent.exe3 Vollständiger Name des fehlerhaften Pakets: ismagent.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ismagent.exe5 Error: (07/09/2013 00:23:35 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: ismagent.exe, Version: 1.14.1.36458, Zeitstempel: 0x4fbe2d9c Name des fehlerhaften Moduls: dlnashext.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5010975d Ausnahmecode: 0xc00001a5 Fehleroffset: 0x6ed976d4 ID des fehlerhaften Prozesses: 0x1888 Startzeit der fehlerhaften Anwendung: 0xismagent.exe0 Pfad der fehlerhaften Anwendung: ismagent.exe1 Pfad des fehlerhaften Moduls: ismagent.exe2 Berichtskennung: ismagent.exe3 Vollständiger Name des fehlerhaften Pakets: ismagent.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ismagent.exe5 Error: (07/09/2013 10:44:20 AM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 710 Startzeit: 01ce7c7091c13029 Endzeit: 4294967295 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: b01e6285-e873-11e2-be8e-bc0543069360 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (07/09/2013 10:44:17 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Tom) Description: Das Paket „DefaultBrowser_NOPUBLISHERID“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/09/2013 10:43:50 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Tom) Description: Das Paket „DefaultBrowser_NOPUBLISHERID“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/09/2013 09:36:31 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". System errors: ============= Error: (07/10/2013 09:44:32 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/10/2013 09:44:32 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Error: (07/09/2013 08:28:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst McAfee McShield konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (07/09/2013 08:27:49 PM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (07/09/2013 04:13:30 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/09/2013 04:11:04 PM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (07/09/2013 00:21:20 PM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (07/09/2013 11:38:22 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BrowserDefendert" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts. Error: (07/09/2013 09:31:08 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/09/2013 09:31:08 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht. Microsoft Office Sessions: ========================= Error: (07/09/2013 04:13:17 PM) (Source: Application Error)(User: ) Description: ZeroConfigService.exe15.5.5.05060e311MurocApi.dll15.5.5.05060e22cc000000500000000000265e063801ce7cae6bfbb06aC:\Program Files\Intel\WiFi\bin\ZeroConfigService.exeC:\Program Files\Intel\WiFi\bin\MurocApi.dllb32f6335-e8a1-11e2-be90-bc0543069360 Error: (07/09/2013 01:34:02 PM) (Source: Application Hang)(User: ) Description: IEXPLORE.EXE10.0.9200.1653788801ce7c92f7fd7165391C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE7108c93f-e88b-11e2-be8f-bc0543069360 Error: (07/09/2013 01:33:59 PM) (Source: Application Hang)(User: ) Description: IEXPLORE.EXE10.0.9200.165371ab401ce7c93136aa8ee141C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE6f3c9df5-e88b-11e2-be8f-bc0543069360 Error: (07/09/2013 00:55:00 PM) (Source: SideBySide)(User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestF:\esetsmartinstaller_enu.exe Error: (07/09/2013 00:23:44 PM) (Source: Application Error)(User: ) Description: ismagent.exe1.14.1.364584fbe2d9cdlnashext.dll_unloaded0.0.0.05010975dc00000056ed7deed188801ce7c8e58ec6140C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exedlnashext.dlla1d20101-e881-11e2-be8f-bc0543069360 Error: (07/09/2013 00:23:35 PM) (Source: Application Error)(User: ) Description: ismagent.exe1.14.1.364584fbe2d9cdlnashext.dll_unloaded0.0.0.05010975dc00001a56ed976d4188801ce7c8e58ec6140C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exedlnashext.dll9c12e4b4-e881-11e2-be8f-bc0543069360 Error: (07/09/2013 10:44:20 AM) (Source: Application Hang)(User: ) Description: iexplore.exe10.0.9200.1653771001ce7c7091c130294294967295C:\Program Files\Internet Explorer\iexplore.exeb01e6285-e873-11e2-be8e-bc0543069360 Error: (07/09/2013 10:44:17 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Tom) Description: DefaultBrowser_NOPUBLISHERID Error: (07/09/2013 10:43:50 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Tom) Description: DefaultBrowser_NOPUBLISHERID Error: (07/09/2013 09:36:31 AM) (Source: SideBySide)(User: ) Description: Microsoft.VC90.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"c:\program files (x86)\HTC\htc sync manager\HTC Sync\FDAgentForOutlook64.exe ==================== Memory info =========================== Percentage of memory in use: 38% Total physical RAM: 3951.52 MB Available physical RAM: 2441.67 MB Total Pagefile: 4911.52 MB Available Pagefile: 2796.81 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:418.43 GB) (Free:341.87 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.94 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 61F3F3B9) Partition: GPT Partition Type ==================== End Of Log ============================ |
10.07.2013, 09:15 | #152 |
/// the machine /// TB-Ausbilder | Hilfe! Trojaner Generic Befall alles gut
__________________
__________________ |
10.07.2013, 09:20 | #153 |
| Hilfe! Trojaner Generic Befall ok! sind wir dann mit allem fertig!
__________________ |
10.07.2013, 10:51 | #154 |
/// the machine /// TB-Ausbilder | Hilfe! Trojaner Generic Befall Jap Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Hilfe! Trojaner Generic Befall |
anmelden, aufzusetzen, befall, computer, default, drücke, engine, entferne, entfernen, entfernung, festplatte, generic, hilfe!, homepage, melde, melden, neu, platte, reparieren, search, system, temp, troja, trojaner, trojaners |