| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Verdacht auf unerwünschte ProgrammeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.07.2013, 22:06
| #1 |
 |  Verdacht auf unerwünschte Programme Guten Abend liebes Trojaner-Board, seit ein paar Tagen benutze ich wieder meinen Laptop und habe erst verspätet festgestellt, dass das Antivirenprogramm abgelaufen ist und ich wohl ungeschützt im Internet unterwegs war. Nun habe ich mir Microsoft Security Essentials runtergeladen und meinen PC scannen lassen, wurde nichts gefunden, aber dennoch bin ich mir unsicher ob nicht doch was drauf ist. Nun habe ich Angst das ich mir unerwünschte Programme auf den Rechner geholt habe. Meine CPU Auslastung schwank zwischen 50% - 80%. Was auch ich auch sehr merkwürdig finde, sobald ich den Taskmanager öffne, schließen sich immer exakt zwei Prozesse. Kann mir bitte jemand helfen und sich das genauer angucken? Ich möchte noch anmerken das ich ein kompletter Computer Laie bin, mit Downloads meine Probleme habe, da ich mir häufig sehr unsicher bin ob ich auch alles richtig mache, bin also schnell verunsichert was sowas betrifft. lg Isei |
|
07.07.2013, 22:19
| #2 |
| /// the machine /// TB-Ausbilder    | Verdacht auf unerwünschte Programme hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
07.07.2013, 22:51
| #3 |
| | Verdacht auf unerwünschte Programme Guten Abend schrauber, danke schonmal das du mir hilfst und drüber schaust was da so los ist =)
__________________Ein paar Fragen habe ich allerdings noch. Muss ich meinen Virenscanner ausmachen? Oder einfach alles so lassen wie es ist und das Programm ausführen? Tut mir leid wenn ich schon jetzt mit solchen Fragen anfange..aber hier geht die Unsicherheit schon los X.x |
|
08.07.2013, 08:05
| #4 |
| /// the machine /// TB-Ausbilder | Verdacht auf unerwünschte Programme Bei jedem Scan/Fix von uns das Av-Programm temporär deaktivieren 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.07.2013, 15:19
| #5 |
| | Verdacht auf unerwünschte Programme Hi, habe mich gerade schlau gemacht wie ich mein Windows Security Essentials ausschalte. Anscheinend zwei Task Prozesse beenden und den Echtzeitschutz deaktivieren. Muss ich auch die Firewall ausschalten, die ist doch auch ein Antivirenprogramm? Soll meine Internetverbindung, wenn wirklich jeder Schutz aus ist gekappt werden oder muss die Internetverbindung erhalten bleiben? |
|
08.07.2013, 18:20
| #6 |
| /// the machine /// TB-Ausbilder | Verdacht auf unerwünschte Programme Nur das AV-Programm während dem Scan beenden, da passiert nix
__________________ --> Verdacht auf unerwünschte Programme |
|
08.07.2013, 18:37
| #7 |
| | Verdacht auf unerwünschte Programme Alles klar, Programm läuft =) |
|
08.07.2013, 18:43
| #8 |
| /// the machine /// TB-Ausbilder | Verdacht auf unerwünschte Programme ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.07.2013, 18:51
| #9 |
| | Verdacht auf unerwünschte Programme FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013
Ran by User (administrator) on 08-07-2013 19:34:17
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
() C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2799912 2011-06-10] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM\...\Run: [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [43320 2011-09-30] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
MountPoints2: G - G:\setup_vmc_lite.exe /checkApplicationPresence
MountPoints2: {a37e14c3-16d8-11e2-b819-80c16e3d2d04} - G:\setup_vmc_lite.exe /checkApplicationPresence
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [343168 2011-09-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" [169528 2011-10-08] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [574008 2011-07-11] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [x]
HKLM-x32\...\Run: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent [2412032 2009-09-18] (Vodafone)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {6C91B17E-AC61-4699-B3F2-76696F767409} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {6C91B17E-AC61-4699-B3F2-76696F767409} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKCU - {1EF67E13-7859-4F3E-8E90-4060348FA7D8} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=2a6b1e81-8aca-435c-96f7-76b4d216da9b&apn_sauid=26D203DB-C1A6-45C6-8535-EA0E9E69371D
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {6C91B17E-AC61-4699-B3F2-76696F767409} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 82.212.62.62 78.42.43.62
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\gje159pj.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\gje159pj.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-09-28] (Advanced Micro Devices, Inc.)
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [682040 2011-02-16] (Hewlett-Packard)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
R2 VMCService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [9216 2009-09-18] (Vodafone)
==================== Drivers (Whitelisted) ====================
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 clwvd; system32\DRIVERS\clwvd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-08 19:30 - 2013-07-08 19:30 - 00000000 ____D C:\FRST
2013-07-08 19:27 - 2013-07-08 19:27 - 01934636 ____A (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-07-08 18:03 - 2013-07-08 18:03 - 00000000 ____D C:\ProgramData\Synaptics
2013-07-08 01:04 - 2013-07-08 01:04 - 00000000 ____D C:\Program Files (x86)\Skype
2013-07-07 20:29 - 2013-07-08 19:13 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-07 20:29 - 2013-07-07 21:14 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-07 20:29 - 2013-07-07 20:29 - 00000000 ____D C:\Windows\System32\Macromed
2013-07-07 20:29 - 2013-07-07 20:29 - 00000000 ____D C:\Users\User\AppData\Local\Macromedia
2013-07-07 15:59 - 2013-07-07 15:59 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-07-07 15:59 - 2013-07-07 15:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-07-07 15:57 - 2013-07-07 16:05 - 00001912 ____A C:\Windows\epplauncher.mif
2013-07-07 15:44 - 2013-07-07 15:45 - 13503464 ____A (Microsoft Corporation) C:\Users\User\Downloads\mseinstall.exe
2013-07-07 15:42 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-07-07 15:42 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-03 22:21 - 2013-07-03 22:21 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-07-03 22:21 - 2013-07-03 22:21 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-07-03 22:21 - 2013-07-03 22:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-03 22:21 - 2013-07-03 22:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-03 22:21 - 2013-07-03 22:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-07-03 22:21 - 2013-07-03 22:21 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-07-03 22:21 - 2013-07-03 22:21 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-03 22:21 - 2013-07-03 22:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-07-03 22:21 - 2013-07-03 22:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-03 22:21 - 2013-07-03 22:21 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-03 22:19 - 2013-07-03 22:19 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-07-03 22:17 - 2013-07-03 22:27 - 00010321 ____A C:\Windows\IE10_main.log
2013-07-01 16:48 - 2013-07-01 16:48 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-01 15:36 - 2013-07-01 15:37 - 00000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\User\AppData\Local\Mozilla
2013-07-01 15:35 - 2013-07-01 16:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-01 15:35 - 2013-07-01 15:35 - 00000000 ____D C:\ProgramData\Mozilla
2013-07-01 15:33 - 2013-07-01 16:47 - 21703480 ____A (Mozilla) C:\Users\User\Downloads\Firefox Setup 22.0.exe
2013-07-01 14:52 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-07-01 14:52 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-07-01 14:52 - 2013-04-10 07:24 - 00983912 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-07-01 14:52 - 2013-04-10 07:24 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-07-01 14:52 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-07-01 14:52 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-07-01 14:52 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-07-01 14:52 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-07-01 14:52 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-07-01 14:52 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-07-01 14:52 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-07-01 14:52 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-07-01 14:52 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-07-01 14:52 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-07-01 14:52 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-07-01 14:52 - 2013-02-15 08:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-07-01 14:52 - 2013-02-15 08:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-07-01 14:52 - 2013-02-15 08:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-07-01 14:52 - 2013-02-15 06:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-07-01 14:52 - 2013-02-15 06:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-07-01 14:52 - 2013-02-15 05:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-07-01 14:50 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-07-01 14:50 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-07-01 14:50 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-07-01 14:50 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-07-01 14:50 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-07-01 14:50 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-07-01 14:50 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-07-01 14:50 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-07-01 14:50 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-07-01 14:50 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-07-01 14:50 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-07-01 14:50 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-07-01 14:50 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-07-01 14:50 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-07-01 14:50 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-07-01 14:50 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-07-01 14:50 - 2013-03-19 08:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-07-01 14:50 - 2013-03-19 07:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-07-01 14:50 - 2013-03-19 07:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-07-01 14:50 - 2013-03-19 07:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-07-01 14:50 - 2013-03-19 06:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-07-01 14:50 - 2013-03-19 05:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-07-01 14:50 - 2013-01-24 08:01 - 00223752 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fvevol.sys
==================== One Month Modified Files and Folders =======
2013-07-08 19:30 - 2013-07-08 19:30 - 00000000 ____D C:\FRST
2013-07-08 19:27 - 2013-07-08 19:27 - 01934636 ____A (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-07-08 19:13 - 2013-07-07 20:29 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-08 18:03 - 2013-07-08 18:03 - 00000000 ____D C:\ProgramData\Synaptics
2013-07-08 16:12 - 2011-12-25 01:50 - 01485355 ____A C:\Windows\WindowsUpdate.log
2013-07-08 16:12 - 2009-07-14 06:45 - 00031856 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-08 16:12 - 2009-07-14 06:45 - 00031856 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-08 16:07 - 2011-10-23 01:15 - 00697314 ____A C:\Windows\System32\perfh007.dat
2013-07-08 16:07 - 2011-10-23 01:15 - 00148320 ____A C:\Windows\System32\perfc007.dat
2013-07-08 16:07 - 2009-07-14 07:13 - 01613996 ____A C:\Windows\System32\PerfStringBackup.INI
2013-07-08 16:02 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-08 16:02 - 2009-07-14 06:51 - 00058586 ____A C:\Windows\setupact.log
2013-07-08 01:04 - 2013-07-08 01:04 - 00000000 ____D C:\Program Files (x86)\Skype
2013-07-08 01:04 - 2011-10-22 16:10 - 00000000 ____D C:\ProgramData\Skype
2013-07-08 01:03 - 2012-09-28 12:37 - 00000000 ____D C:\Users\User\AppData\Roaming\SoftGrid Client
2013-07-08 00:59 - 2013-03-31 12:52 - 00000340 ____A C:\Windows\Tasks\HPCeeScheduleForUSER-HP$.job
2013-07-07 22:44 - 2013-05-22 13:15 - 00000000 ____D C:\Users\User\Desktop\Hundetherapie
2013-07-07 22:43 - 2012-10-23 18:46 - 00000000 ____D C:\Users\User\Desktop\Bilder Wanderung 23.09.2012
2013-07-07 21:14 - 2013-07-07 20:29 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-07 21:14 - 2011-10-22 15:57 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-07 20:29 - 2013-07-07 20:29 - 00000000 ____D C:\Windows\System32\Macromed
2013-07-07 20:29 - 2013-07-07 20:29 - 00000000 ____D C:\Users\User\AppData\Local\Macromedia
2013-07-07 20:28 - 2012-10-25 09:03 - 00000000 ____D C:\Users\User\AppData\Local\Adobe
2013-07-07 16:05 - 2013-07-07 15:57 - 00001912 ____A C:\Windows\epplauncher.mif
2013-07-07 15:59 - 2013-07-07 15:59 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-07-07 15:59 - 2013-07-07 15:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-07-07 15:57 - 2010-11-21 05:47 - 00466448 ____A C:\Windows\PFRO.log
2013-07-07 15:45 - 2013-07-07 15:44 - 13503464 ____A (Microsoft Corporation) C:\Users\User\Downloads\mseinstall.exe
2013-07-03 22:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-07-03 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-07-03 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-07-03 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-07-03 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-07-03 22:27 - 2013-07-03 22:17 - 00010321 ____A C:\Windows\IE10_main.log
2013-07-03 22:21 - 2013-07-03 22:21 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-03 22:21 - 2013-07-03 22:21 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-07-03 22:21 - 2013-07-03 22:21 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-07-03 22:21 - 2013-07-03 22:21 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-03 22:21 - 2013-07-03 22:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-07-03 22:21 - 2013-07-03 22:21 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-07-03 22:21 - 2013-07-03 22:21 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-07-03 22:21 - 2013-07-03 22:21 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-07-03 22:21 - 2013-07-03 22:21 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-07-03 22:21 - 2013-07-03 22:21 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-07-03 22:21 - 2013-07-03 22:21 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-07-03 22:21 - 2013-07-03 22:21 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-07-03 22:21 - 2013-07-03 22:21 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-07-03 22:19 - 2013-07-03 22:19 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-07-03 22:19 - 2013-07-03 22:19 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-07-03 22:16 - 2011-12-25 01:59 - 01591890 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-01 16:48 - 2013-07-01 16:48 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-07-01 16:48 - 2013-07-01 15:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-01 16:47 - 2013-07-01 15:33 - 21703480 ____A (Mozilla) C:\Users\User\Downloads\Firefox Setup 22.0.exe
2013-07-01 15:37 - 2013-07-01 15:36 - 00000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2013-07-01 15:36 - 2013-07-01 15:36 - 00000000 ____D C:\Users\User\AppData\Local\Mozilla
2013-07-01 15:35 - 2013-07-01 15:35 - 00000000 ____D C:\ProgramData\Mozilla
2013-07-01 15:15 - 2013-05-22 11:51 - 00000328 ____A C:\Windows\Tasks\HPCeeScheduleForUser.job
2013-07-01 15:15 - 2009-07-14 06:45 - 00275856 ____A C:\Windows\System32\FNTCACHE.DAT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2012-12-16 13:38
==================== End Of Log ============================
Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-07-2013
Ran by User at 2013-07-08 19:45:52
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader X (10.1.0) MUI (x32 Version: 10.1.0)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629)
AMD APP SDK Runtime (Version: 2.5.775.2)
AMD Catalyst Install Manager (Version: 3.0.847.0)
AMD Fuel (Version: 2011.0928.607.9079)
AMD Media Foundation Decoders (Version: 1.0.60928.0618)
AMD Steady Video Plug-In (Version: 1.00.0000)
AMD System Monitor (x32 Version: 1.0.9)
AMD VISION Engine Control Center (x32 Version: 2011.0928.607.9079)
Bejeweled 3 (x32 Version: 2.2.0.98)
Cake Mania (x32 Version: 2.2.0.98)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0928.607.9079)
Catalyst Control Center InstallProxy (x32 Version: 2011.0928.607.9079)
Catalyst Control Center Localization All (x32 Version: 2011.0928.607.9079)
CCC Help Chinese Standard (x32 Version: 2011.0928.0606.9079)
CCC Help Chinese Traditional (x32 Version: 2011.0928.0606.9079)
CCC Help Czech (x32 Version: 2011.0928.0606.9079)
CCC Help Danish (x32 Version: 2011.0928.0606.9079)
CCC Help Dutch (x32 Version: 2011.0928.0606.9079)
CCC Help English (x32 Version: 2011.0928.0606.9079)
CCC Help Finnish (x32 Version: 2011.0928.0606.9079)
CCC Help French (x32 Version: 2011.0928.0606.9079)
CCC Help German (x32 Version: 2011.0928.0606.9079)
CCC Help Greek (x32 Version: 2011.0928.0606.9079)
CCC Help Hungarian (x32 Version: 2011.0928.0606.9079)
CCC Help Italian (x32 Version: 2011.0928.0606.9079)
CCC Help Japanese (x32 Version: 2011.0928.0606.9079)
CCC Help Korean (x32 Version: 2011.0928.0606.9079)
CCC Help Norwegian (x32 Version: 2011.0928.0606.9079)
CCC Help Polish (x32 Version: 2011.0928.0606.9079)
CCC Help Portuguese (x32 Version: 2011.0928.0606.9079)
CCC Help Russian (x32 Version: 2011.0928.0606.9079)
CCC Help Spanish (x32 Version: 2011.0928.0606.9079)
CCC Help Swedish (x32 Version: 2011.0928.0606.9079)
CCC Help Thai (x32 Version: 2011.0928.0606.9079)
CCC Help Turkish (x32 Version: 2011.0928.0606.9079)
ccc-utility64 (Version: 2011.0928.607.9079)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
Cradle of Rome 2 (x32 Version: 2.2.0.98)
D3DX10 (x32 Version: 15.4.2368.0902)
ESU for Microsoft Windows 7 SP1 (x32 Version: 2.1.1)
Evernote v. 4.2.3 (x32 Version: 4.2.3.22)
Farm Frenzy (x32 Version: 2.2.0.98)
Farmscapes (x32 Version: 2.2.0.98)
FATE (x32 Version: 2.2.0.97)
Final Drive Fury (x32 Version: 2.2.0.95)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Hewlett-Packard ACLM.NET v1.1.2.0 (x32 Version: 1.00.0000)
HP Auto (Version: 1.0.12935.3667)
HP Client Services (Version: 1.1.12938.3539)
HP Customer Experience Enhancements (x32 Version: 6.0.1.8)
HP Documentation (x32 Version: 1.1.0.0)
HP Games (x32 Version: 1.0.2.5)
HP Launch Box (Version: 1.0.12)
HP On Screen Display (x32 Version: 1.3.5)
HP Power Manager (x32 Version: 1.4.4)
HP Quick Launch (x32 Version: 2.5.2)
HP QuickWeb (x32 Version: 3.1.1.10197)
HP Recovery Manager (x32 Version: 2.0.0)
HP Security Assistant (Version: 1.0.12)
HP Setup (x32 Version: 9.0.15076.3891)
HP Setup Manager (x32 Version: 1.2.14901.3869)
HP Software Framework (x32 Version: 4.5.10.1)
HP Support Assistant (x32 Version: 6.1.12.1)
IDT Audio (x32 Version: 1.0.6341.0)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Java 7 Update 17 (x32 Version: 7.0.170)
Java Auto Updater (x32 Version: 2.1.9.0)
Jewel Match 3 (x32 Version: 2.2.0.98)
Jewel Quest II (x32 Version: 2.2.0.97)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Mahjongg Artifacts (x32 Version: 2.2.0.95)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5139.5005)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
opensource (x32 Version: 1.0.14960.3876)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Polar Bowler (x32 Version: 2.2.0.97)
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98)
Realtek Ethernet Controller Driver (x32 Version: 7.40.126.2011)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.83)
REALTEK Wireless LAN Driver (x32 Version: 1.00.11.0706)
Skype™ 5.10 (x32 Version: 5.10.116)
swMSM (x32 Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 15.3.11.0)
Torchlight (x32 Version: 2.2.0.98)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Virtual Families (x32 Version: 2.2.0.98)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Vodafone Mobile Connect Lite (x32 Version: 9.4.4.17702)
Wedding Dash (x32 Version: 2.2.0.95)
WildTangent Games App (HP Games) (x32 Version: 4.0.5.32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Zuma's Revenge (x32 Version: 2.2.0.98)
==================== Restore Points =========================
16-12-2012 11:45:30 Geplanter Prüfpunkt
31-03-2013 11:05:22 Windows Update
31-03-2013 11:23:18 Windows Update
31-03-2013 12:17:56 Installed Java 7 Update 17
30-06-2013 13:17:27 Konfiguriert YouCam
01-07-2013 12:46:57 Removed Java 7 Update 17
01-07-2013 12:53:00 Windows Update
03-07-2013 20:08:31 Windows Update
06-07-2013 08:15:18 Removed Skype™ 5.10
06-07-2013 08:38:49 Windows Update
07-07-2013 23:03:11 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {00038F1E-E19D-46D8-93CD-6CFA8C460836} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {175CC8AD-8B08-490B-9090-A15E7547A5CE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-09-09] (Hewlett-Packard Company)
Task: {18B74951-42B4-48F0-8BE9-EF32B57B9896} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {45C3597E-A90A-41EC-A8CF-1968311C39FE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe [2011-09-09] (Hewlett-Packard Company)
Task: {778AD719-4E03-4D51-925E-25987DF71022} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => C:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {865BB281-B7B5-4B5B-9E33-0D344A406F45} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe [2011-12-15] (Hewlett-Packard)
Task: {8EE56746-A471-4BB4-89BB-E2959063ED19} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {979B784F-3B39-4872-8515-D50A54672992} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {A477A677-DFF8-49C4-9E9F-A2DF9D43935E} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {A6E93F32-6405-4ED3-A81C-72BB4ED89083} - System32\Tasks\HPCeeScheduleForUSER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {C4793B00-D492-4D34-9547-AADE7198ED31} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {EDE49610-4978-4B72-94DF-45A04D2DD428} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-09-09] (Hewlett-Packard Company)
Task: {EDE6E672-2935-4E6B-B501-826D7A3355AF} - System32\Tasks\User_Feed_Synchronization-{E0AEB7FD-8237-4390-AE58-8FF228E66C39} => C:\Windows\system32\msfeedssync.exe [2013-07-03] (Microsoft Corporation)
Task: {F1628DC9-6235-4F28-A265-13871907C414} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-07] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\HPCeeScheduleForUSER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/08/2013 04:12:22 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (07/08/2013 04:02:39 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/08/2013 04:02:14 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue
Error: (07/08/2013 01:03:00 AM) (Source: VMCService) (User: )
Description: GetProcessOwner
Error: (07/07/2013 07:28:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/07/2013 07:28:57 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue
Error: (07/07/2013 06:27:17 PM) (Source: VMCService) (User: )
Description: GetProcessOwner
Error: (07/07/2013 03:58:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/07/2013 03:58:20 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue
Error: (07/07/2013 03:57:23 PM) (Source: Microsoft Security Client Setup) (User: User-HP)
Description: HRESULT:0x8004FF0A
Description:Microsoft Security Essentials installation was canceled. You canceled the Security Essentials installation on your computer. Error code:0x8004FF0A.
System errors:
=============
Error: (07/08/2013 04:12:15 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.153.1459.0
Aktualisierungsquelle: %NT-AUTORITÄT59
Aktualisierungsphase: 4.2.0223.00
Quellpfad: 4.2.0223.01
Signaturtyp: %NT-AUTORITÄT602
Aktualisierungstyp: %NT-AUTORITÄT604
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: %NT-AUTORITÄT605
Vorherige Modulversion: %NT-AUTORITÄT606
Fehlercode: %NT-AUTORITÄT607
Fehlerbeschreibung: %NT-AUTORITÄT608
Error: (07/07/2013 04:04:38 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %User-HP60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.153.1459.0
Aktualisierungsquelle: %User-HP51
Aktualisierungsphase: 4.2.0223.00
Quellpfad: 4.2.0223.01
Signaturtyp: %User-HP602
Aktualisierungstyp: %User-HP604
Benutzer: User-HP\User
Aktuelle Modulversion: %User-HP605
Vorherige Modulversion: %User-HP606
Fehlercode: %User-HP607
Fehlerbeschreibung: %User-HP608
Error: (07/07/2013 04:04:38 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %User-HP60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.153.1459.0
Aktualisierungsquelle: %User-HP51
Aktualisierungsphase: 4.2.0223.00
Quellpfad: 4.2.0223.01
Signaturtyp: %User-HP602
Aktualisierungstyp: %User-HP604
Benutzer: User-HP\User
Aktuelle Modulversion: %User-HP605
Vorherige Modulversion: %User-HP606
Fehlercode: %User-HP607
Fehlerbeschreibung: %User-HP608
Error: (06/29/2013 01:20:00 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst VMCService erreicht.
Error: (06/29/2013 00:09:43 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (03/31/2013 02:02:20 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst HPWMISVC erreicht.
Error: (03/31/2013 01:59:55 PM) (Source: Microsoft-Windows-LanguagePackSetup) (User: NT-AUTORITÄT)
Description: Fehler bei der CBS-Clientinitialisierung. Letzter Fehler: 0x8007045b
Error: (03/31/2013 01:23:03 PM) (Source: DCOM) (User: )
Description: {AD3EDBCA-0901-415B-82E9-C16D3B65E38C}
Error: (03/31/2013 00:52:34 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst HPWMISVC erreicht.
Error: (11/08/2012 11:18:46 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst HPWMISVC erreicht.
Microsoft Office Sessions:
=========================
Error: (07/08/2013 04:12:22 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (07/08/2013 04:02:39 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/08/2013 04:02:14 PM) (Source: VMCService)(User: )
Description: conflictManagerTypeValue
Error: (07/08/2013 01:03:00 AM) (Source: VMCService)(User: )
Description: GetProcessOwner
Error: (07/07/2013 07:28:59 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/07/2013 07:28:57 PM) (Source: VMCService)(User: )
Description: conflictManagerTypeValue
Error: (07/07/2013 06:27:17 PM) (Source: VMCService)(User: )
Description: GetProcessOwner
Error: (07/07/2013 03:58:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/07/2013 03:58:20 PM) (Source: VMCService)(User: )
Description: conflictManagerTypeValue
Error: (07/07/2013 03:57:23 PM) (Source: Microsoft Security Client Setup)(User: User-HP)
Description: HRESULT:0x8004FF0A
Description:Microsoft Security Essentials installation was canceled. You canceled the Security Essentials installation on your computer. Error code:0x8004FF0A.
==================== Memory info ===========================
Percentage of memory in use: 31%
Total physical RAM: 5609.41 MB
Available physical RAM: 3824.65 MB
Total Pagefile: 11217 MB
Available Pagefile: 9180.36 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:441.08 GB) (Free:391.23 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:20.52 GB) (Free:2.19 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:1.08 GB) FAT32 (Disk=0 Partition=4)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 43BE8158)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)
==================== End Of Log ============================
Soll das Programm nun drauf bleiben oder soll ichs wieder löschen? |
|
08.07.2013, 21:11
| #10 |
| /// the machine /// TB-Ausbilder | Verdacht auf unerwünschte Programme Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST LOg bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.07.2013, 21:31
| #11 |
| | Verdacht auf unerwünschte Programme AdwCleaner: Code:
ATTFilter # AdwCleaner v2.304 - Datei am 08/07/2013 um 22:23:43 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : User - USER-HP
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\User\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16618
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE --> hxxp://www.google.com
-\\ Mozilla Firefox v22.0 (de)
*************************
AdwCleaner[S1].txt - [1932 octets] - [08/07/2013 22:23:43]
########## EOF - C:\AdwCleaner[S1].txt - [1992 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.7 (07.08.2013:2)
OS: Windows 7 Home Premium x64
Ran by User on 08.07.2013 at 22:39:21,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{1EF67E13-7859-4F3E-8E90-4060348FA7D8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6C91B17E-AC61-4699-B3F2-76696F767409}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6C91B17E-AC61-4699-B3F2-76696F767409}
~~~ Files
Successfully deleted: [File] C:\Windows\prefetch\ASKPARTNERCOBRANDINGTOOL.EXE-F4180543.pf
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\gje159pj.default\minidumps [1 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.07.2013 at 22:47:12,01
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Geändert von Isei (08.07.2013 um 21:50 Uhr) |
|
08.07.2013, 21:42
| #12 |
| /// the machine /// TB-Ausbilder | Verdacht auf unerwünschte Programme ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.07.2013, 21:56
| #13 |
| | Verdacht auf unerwünschte Programme Habe eine Meldung bekommen beim zweiten mal starten von Farbar Recovery Scan Tool. Ist immernoch vom ersten Scan drauf mitsamt dem Logfile. Folgende Meldung habe ich bekommen: Your Version of FRST64 is outdated. It is strongly recommended to download the latest version. Click yes to download the latest version. Click no to continue without updating FRST64. Was soll ich nun machen? |
|
09.07.2013, 07:10
| #14 |
| /// the machine /// TB-Ausbilder | Verdacht auf unerwünschte Programme Na updaten bitte
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.07.2013, 12:36
| #15 |
| | Verdacht auf unerwünschte Programme Hallo schrauber. Ich wurde auf diese seite weitergeleitet zum downloaden. hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Muss ich jetzt genau das ausführen??? Außerdem habe ich das Gefühl mein Adblocker funktioniert nun nicht mehr, auf der Seite kriege ich jede Werbung angezeigt, was ich sehr komisch finde. Auf den anderen Seiten die ich getestet habe ging alles wie gewohnt, Werbung wurde ausgeblendet. |
|
| Themen zu Verdacht auf unerwünschte Programme |
| antivirenprogramm, auslastung, computer, cpu, cpu auslastung, essen, festgestellt, guten, internet, laptop, merkwürdig, microsoft, nichts, probleme, programm, programme, rechner, scan, scannen, schließen, schließen sich, schnell, security, taskmanager, unterwegs, verdacht |
Linear-Darstellung
