|
Plagegeister aller Art und deren Bekämpfung: win32.downloader.gen - Entfernung mit AdwCleaner ausreichend?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
06.09.2013, 23:30 | #1 |
| win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? Hallo, ich bin neu hier und habe mich jetzt extra wegen einem Plagegeist namens "win32.downloader.gen" angemeldet. Mein Virenscanner von Trend Micro hat nichts gefunden, SpyBot Search & Destroy aber eben diese eine Malware und zwar in der Datei "C:\END". Entfernung hat mit diesem Program nicht geklappt (wininit nicht möglich). Die betroffene Datei ist vor ca. einer Woche entstanden, was zeitlich gesehen ungefähr mit dem Download einiger Codecs (von Chip.de) zusammenfällt. Nachdem ich mich hier eingelesen hatte, habe ich zunächst den TeaTimer von SS&D deaktiviert und dann das Programm AdwCleaner heruntergeladen. Dieses hat auch prompt einige Ergebnisse geliefert, die ich dann alle entfernt habe. Bei erneutem Suchen nach einem Neustart finden jetzt weder SS&D noch AdwC noch etwas. Bedeutet das, dass nun alles wieder im Reinen ist? Passwörter werde ich nach einer gesicherten Bereinigung aber auf jeden Fall ändern. Hier noch das Log-File von AdwCleaner: Code:
ATTFilter # AdwCleaner v3.002 - Bericht erstellt am 06/09/2013 um 23:36:33 # Updated 01/09/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : # Gestartet von : C:\Users\FB\Downloads\adwcleaner_3002.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\FB\AppData\Local\Temp\OCS Ordner Gelöscht : C:\Users\FB\AppData\Roaming\DesktopIconForAmazon Ordner Gelöscht : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\ey4oncak.Standard-Benutzer\jetpack Datei Gelöscht : C:\END Datei Gelöscht : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\ey4oncak.Standard-Benutzer\foxydeal.sqlite ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [firejump@firejump.net] Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\heoldelcflnigdllmlopiefhkkobendj Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780} Schlüssel Gelöscht : HKCU\Software\Conduit Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKLM\Software\DeviceVM Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16660 -\\ Mozilla Firefox v12.0 (de) [ Datei : C:\Users\FB\AppData\Roaming\Mozilla\Firefox\Profiles\vx9hefpm.default\prefs.js ] [ Datei : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\ey4oncak.Standard-Benutzer\prefs.js ] ************************* AdwCleaner[R0].txt - [2377 octets] - [06/09/2013 23:35:15] AdwCleaner[S0].txt - [2200 octets] - [06/09/2013 23:36:33] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2260 octets] ########## Geändert von matsuyama (06.09.2013 um 23:59 Uhr) |
07.09.2013, 07:08 | #2 |
/// the machine /// TB-Ausbilder | win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
07.09.2013, 11:55 | #3 |
| win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? Toll, dass du mir hilfst! Danke schonmal
__________________FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2013 Ran by FB on 07-09-2013 11:19:18 Running from C:\Users\FB\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\AMSP_LogServer.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe () C:\Windows\Samsung\PanelMgr\SSMMgr.exe (Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe () C:\Windows\Samsung\PanelMgr\caller64.exe (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMDiag.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mim.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations) HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.) HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-23] (CANON INC.) HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-17] (CANON INC.) HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374328 2013-05-29] (Trend Micro Inc.) HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [209712 2013-02-04] (Trend Micro Inc.) HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.7\ICQ.exe [127040 2011-12-26] (ICQ, LLC.) HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation) HKLM-x32\...\Run: [Ulead AutoDetector v2] - C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2006-11-29] (Ulead Systems, Inc.) HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-01-19] () HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-09-08] (Apple Inc.) HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [180269 2011-12-25] (RealNetworks, Inc.) HKLM-x32\...\Run: [MimBoot] - C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimboot.exe [11776 2005-03-09] (Musicmatch, Inc.) HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_MX\TrayServer_de.exe [90112 2008-08-07] (MAGIX AG) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://vaioportal.sony.eu/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox SearchScopes: HKCU - {3287C2E4-68A5-491B-9659-15DC8AA85D40} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms} SearchScopes: HKCU - {E3B53517-CACC-4784-89E0-17B7B186E236} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe64.dll (Trend Micro Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg32.dll (Trend Micro Inc.) BHO-x32: TSToolbarBHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.) BHO-x32: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll () BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - TrendMicro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe64.dll (Trend Micro Inc.) Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.) Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - No File Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - No File Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.) Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg32.dll (Trend Micro Inc.) Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.) Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\FB\AppData\Roaming\Mozilla\Firefox\Profiles\vx9hefpm.default FF Homepage: hxxp://www.t-online.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2027 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprjplug;version=1.0.2.2088 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1040 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @TrendMicro.com/FFExtension - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\FB\AppData\Roaming\Mozilla\Firefox\Profiles\vx9hefpm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension FF HKLM-x32\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\ FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\ FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2012-04-26] (Adobe Systems) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros) S2 CCALib8; C:\Program Files (x86)\Canon\CAL\CALMAIN.exe [96341 2005-09-30] (Canon Inc.) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] () R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x] ==================== Drivers (Whitelisted) ==================== S1 acedrv06; C:\Windows\system32\drivers\acedrv06.sys [147456 2011-12-25] () R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S3 pfc; C:\Windows\SysWow64\drivers\pfc.sys [10368 2006-01-19] (Padus, Inc.) S2 SSPORT; C:\Windows\SysWow64\Drivers\SSPORT.sys [11576 2009-04-23] (Samsung Electronics) R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [108584 2012-12-21] (Trend Micro Inc.) R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [174016 2012-12-21] (Trend Micro Inc.) R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [46392 2012-08-24] (Trend Micro Inc.) R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [94520 2012-12-07] (Trend Micro Inc.) R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [77184 2012-12-21] (Trend Micro Inc.) R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [210232 2012-07-06] (Trend Micro Inc.) R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105744 2012-05-02] (Trend Micro Inc.) S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x] S3 MxlW2k; No ImagePath S3 pfc; system32\drivers\pfc.sys [x] S2 SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [x] U2 TMAgent; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-07 11:17 - 2013-09-07 11:18 - 01948604 _____ (Farbar) C:\Users\FB\Downloads\FRST64.exe 2013-09-07 00:10 - 2013-09-06 23:38 - 00002348 _____ C:\Users\Internet\Downloads\AdwCleaner[S0].txt 2013-09-07 00:10 - 2013-09-06 23:34 - 01037134 _____ C:\Users\Internet\Downloads\adwcleaner_3002.exe 2013-09-06 23:38 - 2013-09-06 23:38 - 00002348 _____ C:\Users\FB\Downloads\AdwCleaner[S0].txt 2013-09-06 23:35 - 2013-09-07 00:47 - 00000000 ____D C:\AdwCleaner 2013-09-06 23:34 - 2013-09-06 23:34 - 01037134 _____ C:\Users\FB\Desktop\adwcleaner_3002.exe 2013-09-05 00:10 - 2013-09-05 00:11 - 00000000 ____D C:\mm15 2013-09-05 00:06 - 2013-09-05 00:07 - 00000000 ____D C:\Windows\SysWOW64\C2MP 2013-09-05 00:05 - 2013-09-05 00:05 - 21916168 _____ (Windows 7 - Codec Pack) C:\Users\FB\Downloads\windows.7.codec.pack.v4.0.8.setup.exe 2013-09-04 23:58 - 2013-09-04 23:58 - 00000000 ____D C:\Users\FB\Downloads\lame3.99.5 2013-09-04 23:55 - 2013-09-04 23:55 - 00650657 _____ C:\Users\FB\Downloads\lame3.99.5.zip 2013-09-03 20:28 - 2013-08-02 19:29 - 00217176 _____ C:\Windows\SysWOW64\unrar.dll 2013-09-03 19:15 - 2013-09-03 19:15 - 00000000 ____D C:\Users\Internet\Downloads\lame3.99.5 2013-08-30 21:00 - 2013-08-30 21:01 - 00000000 ____D C:\Users\FB\Documents\Freemake 2013-08-30 21:00 - 2013-08-30 21:01 - 00000000 ____D C:\ProgramData\Freemake 2013-08-30 21:00 - 2013-08-30 21:00 - 00001320 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk 2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Users\FB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Program Files (x86)\Freemake 2013-08-30 20:54 - 2013-08-30 20:55 - 28267424 _____ (Ellora Assets Corporation ) C:\Users\Internet\Downloads\FreemakeVideoConverter_4.0.4.0.exe 2013-08-30 01:20 - 2011-06-24 16:31 - 00703488 _____ C:\Windows\system32\xvidcore.dll 2013-08-30 01:20 - 2011-05-23 09:49 - 00173568 _____ C:\Windows\system32\xvid.ax 2013-08-30 01:04 - 2013-08-30 01:05 - 00234544 _____ C:\Windows\RegBootClean64.exe 2013-08-29 21:36 - 2013-08-29 21:36 - 00039896 _____ C:\Windows\SysWOW64\DiscHandler.exe 2013-08-15 02:04 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-15 02:04 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-15 02:04 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-15 02:04 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-15 02:04 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-15 02:04 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-15 02:04 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-15 02:04 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-15 02:04 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-15 02:04 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-15 02:04 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-15 02:04 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-15 02:04 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-15 02:04 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-15 02:03 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-15 01:57 - 2013-08-15 01:59 - 00000000 ____D C:\Windows\system32\MRT 2013-08-15 00:45 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-15 00:45 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-15 00:45 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-15 00:45 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-15 00:45 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-15 00:45 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-15 00:45 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-15 00:45 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-15 00:44 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-15 00:44 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-15 00:44 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-15 00:44 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-15 00:44 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-15 00:44 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-15 00:44 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-15 00:44 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-15 00:44 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-15 00:44 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-15 00:44 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-15 00:44 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-15 00:44 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-15 00:44 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-15 00:44 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-15 00:44 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-15 00:44 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-15 00:44 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-15 00:44 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys ==================== One Month Modified Files and Folders ======= 2013-09-07 11:18 - 2013-09-07 11:17 - 01948604 _____ (Farbar) C:\Users\FB\Downloads\FRST64.exe 2013-09-07 11:18 - 2011-12-14 17:52 - 01548929 _____ C:\Windows\WindowsUpdate.log 2013-09-07 11:15 - 2011-12-14 18:35 - 00122039 _____ C:\Windows\setupact.log 2013-09-07 00:47 - 2013-09-06 23:35 - 00000000 ____D C:\AdwCleaner 2013-09-07 00:20 - 2009-07-14 06:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-07 00:20 - 2009-07-14 06:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-07 00:17 - 2011-08-08 22:00 - 00708282 _____ C:\Windows\system32\perfh007.dat 2013-09-07 00:17 - 2011-08-08 22:00 - 00151886 _____ C:\Windows\system32\perfc007.dat 2013-09-07 00:17 - 2009-07-14 07:13 - 01643448 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-07 00:12 - 2011-08-08 12:20 - 00000000 ____D C:\ProgramData\NVIDIA 2013-09-07 00:12 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-06 23:38 - 2013-09-07 00:10 - 00002348 _____ C:\Users\Internet\Downloads\AdwCleaner[S0].txt 2013-09-06 23:38 - 2013-09-06 23:38 - 00002348 _____ C:\Users\FB\Downloads\AdwCleaner[S0].txt 2013-09-06 23:34 - 2013-09-07 00:10 - 01037134 _____ C:\Users\Internet\Downloads\adwcleaner_3002.exe 2013-09-06 23:34 - 2013-09-06 23:34 - 01037134 _____ C:\Users\FB\Desktop\adwcleaner_3002.exe 2013-09-06 14:17 - 2013-03-29 16:11 - 00000306 __RSH C:\ProgramData\ntuser.pol 2013-09-05 16:57 - 2011-12-28 16:06 - 00000000 ____D C:\Uni 2013-09-05 01:28 - 2011-02-11 01:03 - 01621342 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-09-05 01:20 - 2012-01-13 01:34 - 00305036 _____ C:\test.xml 2013-09-05 00:45 - 2011-12-25 01:59 - 00000000 ____D C:\Users\Public\Documents\MAGIX_MusicMaker15Premium 2013-09-05 00:11 - 2013-09-05 00:10 - 00000000 ____D C:\mm15 2013-09-05 00:07 - 2013-09-05 00:06 - 00000000 ____D C:\Windows\SysWOW64\C2MP 2013-09-05 00:05 - 2013-09-05 00:05 - 21916168 _____ (Windows 7 - Codec Pack) C:\Users\FB\Downloads\windows.7.codec.pack.v4.0.8.setup.exe 2013-09-04 23:58 - 2013-09-04 23:58 - 00000000 ____D C:\Users\FB\Downloads\lame3.99.5 2013-09-04 23:55 - 2013-09-04 23:55 - 00650657 _____ C:\Users\FB\Downloads\lame3.99.5.zip 2013-09-03 20:00 - 2012-01-19 03:44 - 00000000 ____D C:\Users\Internet\AppData\Roaming\Mp3tag 2013-09-03 19:27 - 2011-12-26 18:37 - 00000000 ____D C:\Users\Internet\AppData\Roaming\Skype 2013-09-03 19:15 - 2013-09-03 19:15 - 00000000 ____D C:\Users\Internet\Downloads\lame3.99.5 2013-09-02 01:34 - 2011-12-15 17:38 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-08-31 14:28 - 2011-12-14 19:11 - 01419430 _____ C:\Windows\PFRO.log 2013-08-30 22:14 - 2011-12-15 17:48 - 00000099 _____ C:\Users\Public\LMDebug.log 2013-08-30 21:01 - 2013-08-30 21:00 - 00000000 ____D C:\Users\FB\Documents\Freemake 2013-08-30 21:01 - 2013-08-30 21:00 - 00000000 ____D C:\ProgramData\Freemake 2013-08-30 21:01 - 2011-12-24 22:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-30 21:00 - 2013-08-30 21:00 - 00001320 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk 2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Users\FB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Program Files (x86)\Freemake 2013-08-30 20:55 - 2013-08-30 20:54 - 28267424 _____ (Ellora Assets Corporation ) C:\Users\Internet\Downloads\FreemakeVideoConverter_4.0.4.0.exe 2013-08-30 01:11 - 2012-12-10 20:14 - 00000000 ____D C:\Program Files\DivX 2013-08-30 01:11 - 2012-12-10 20:11 - 00000000 ____D C:\ProgramData\DivX 2013-08-30 01:05 - 2013-08-30 01:04 - 00234544 _____ C:\Windows\RegBootClean64.exe 2013-08-30 01:05 - 2011-12-14 19:36 - 00000000 ____D C:\ProgramData\Trend Micro 2013-08-29 23:24 - 2011-12-25 01:41 - 00000000 ____D C:\Users\FB\AppData\Local\CrashDumps 2013-08-29 21:36 - 2013-08-29 21:36 - 00039896 _____ C:\Windows\SysWOW64\DiscHandler.exe 2013-08-28 21:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-28 19:33 - 2011-12-25 16:33 - 00000000 ____D C:\Users\Internet\AppData\Local\VirtualStore 2013-08-28 19:24 - 2013-01-05 01:56 - 00021504 ___SH C:\Users\Internet\Thumbs.db 2013-08-15 01:59 - 2013-08-15 01:57 - 00000000 ____D C:\Windows\system32\MRT 2013-08-15 01:57 - 2011-12-14 20:31 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-07 02:39 ==================== End Of Log ============================ --- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-09-2013 Ran by FB at 2013-09-07 11:20:05 Running from C:\Users\FB\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2) ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2) Adobe AIR (x32 Version: 2.5.1.17730) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader X (10.1.6) MUI (x32 Version: 10.1.6) Advertising Center (x32 Version: 0.0.0.1) Alps Pointing-device for VAIO Apple Application Support (x32 Version: 1.3.2) Apple Software Update (x32 Version: 2.1.1.116) ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.142) ArcSoft WebCam Companion 4 (x32 Version: 4.0.21.392) Atheros WiFi Driver Installation (x32 Version: 3.0) Bing Bar (x32 Version: 7.0.850.0) Bluetooth Win7 Suite (64) (Version: 7.3.0.100) Cambridge English Pronouncing Dictionary - 17th Edition (x32) Canon Camera Access Library (x32 Version: 8.1.1.17) Canon Camera Support Core Library (x32 Version: 7.3.1.6) Canon Camera Window DC_DV 5 for ZoomBrowser EX (x32 Version: 5.4.5.17) Canon Camera Window DC_DV 6 for ZoomBrowser EX (x32 Version: 6.2.0.8) Canon Camera Window MC 6 for ZoomBrowser EX (x32 Version: 6.1.0.7) Canon G.726 WMP-Decoder (x32 Version: 1.0.1.3) CANON iMAGE GATEWAY Task (x32 Version: 1.1.0.2) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32) Canon Internet Library for ZoomBrowser EX (x32 Version: 1.4.1.3) Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 2.2.0.13) Canon MP Navigator EX 3.0 (x32) Canon MP640 series Benutzerregistrierung (x32) Canon MP640 series MP Drivers Canon RAW Image Task for ZoomBrowser EX (x32 Version: 2.3.0.11) Canon RemoteCapture Task for ZoomBrowser EX (x32 Version: 1.5.0.5) Canon Utilities Easy-PhotoPrint EX (x32) Canon Utilities My Printer (x32) Canon Utilities Solution Menu (x32) Canon Utilities ZoomBrowser EX (x32 Version: 5.6.0.27) CD-LabelPrint (x32) Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6612.1000) Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2) Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2) Corel WinDVD (x32 Version: 10.0.5.800) D3DX10 (x32 Version: 15.4.2368.0902) D-Fend Reloaded 1.2.1 (deinstallieren) (x32 Version: 1.2.1) DolbyFiles (x32 Version: 2.0) exant HD Audio (Version: 8.54.0.53) Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.27.0) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2) Freemake Video Converter Version 4.0.4 (x32 Version: 4.0.4) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922) Galerie foto Windows Live (x32 Version: 15.4.3502.0922) ICQ 7.7 Build #6082 Banner Remover 1.0 (x32) ICQ7.7 (x32 Version: 7.7) ImagXpress (x32 Version: 7.0.74.0) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Management Engine Components (x32 Version: 7.0.0.1144) Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046) Interlok driver setup x64 (Version: 5.8.13) Jack Orlando Director's Cut (x32 Version: 1.01) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Junk Mail filter update (x32 Version: 15.4.3502.0922) Lucky Luke (x32) MAGIX Burn routines (x32 Version: 9.0.0.193) MAGIX Foto Manager 2006 (D) (x32 Version: 3.3.0.89) MAGIX Goya burnR 1.3.1.3 (D) (x32 Version: 1.3.1.3) MAGIX Music Maker 15 Premium 15.0.0.19 (D) (x32 Version: 15.0.0.19) MAGIX Music Manager 2006 (D) (x32 Version: 7.2.0.133) MAGIX Online Druck Service (D) (x32 Version: 2.3.2.0) MAGIX Screenshare (x32 Version: 4.3.6.1987) MAGIX Screenshare 4.3.6.1987 (D) (x32 Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6) MAGIX Video deluxe MX (x32 Version: 11.0.0.38) Media Gallery (Version: 1.5.0.16020) Media Markt Fotoservice 4.4 (x32) MediaInfo Lite 0.7.52 (x32 Version: 0.7.52) Menu Templates - Starter Kit (x32 Version: 9.0.4.0) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0) Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0) Microsoft PowerPoint Viewer (x32 Version: 14.0.6029.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft XML Parser (x32 Version: 8.0.7820.0) Movie Templates - Starter Kit (x32 Version: 9.0.4.0) Mozilla Firefox 12.0 (x86 de) (x32 Version: 12.0) Mp3tag v2.49b (x32 Version: v2.49b) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Musicmatch® Jukebox (x32 Version: 10.00.2058) Nero 9 (x32) Nero BurningROM (x32 Version: 9.0.0.0) Nero BurnRights (x32 Version: 2.99.6.100) Nero ControlCenter (x32 Version: 9.0.0.1) Nero CoverDesigner (x32 Version: 4.0.3.100) Nero CoverDesigner Help (x32 Version: 4.0.0.0) Nero DiscSpeed (x32 Version: 4.99.5.105) Nero DriveSpeed (x32 Version: 3.99.5.105) Nero Express (x32 Version: 9.0.0.0) Nero InfoTool (x32 Version: 5.99.5.105) Nero Installer (x32 Version: 2.0.0.1) Nero WaveEditor (x32 Version: 5.0.10.0) Nero WaveEditor Help (x32 Version: 5.0.10.0) NeroBurningROM (x32 Version: 9.0.6.100) NeroExpress (x32 Version: 9.0.6.100) Nokia Connectivity Cable Driver (Version: 7.1.32.69) NVIDIA 3D Vision Treiber 268.31 (Version: 268.31) NVIDIA Grafiktreiber 268.31 (Version: 268.31) NVIDIA HD-Audiotreiber 1.2.22.1 (Version: 1.2.22.1) NVIDIA Install Application (Version: 2.265.41.0) NVIDIA PhysX (x32 Version: 9.10.0514) NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6831) NVIDIA Systemsteuerung 268.31 (Version: 268.31) Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2) Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2) PDF-Viewer (Version: 2.5.210.0) PMB (x32 Version: 5.5.02.12220) PMB VAIO Edition Plug-in (Version: 1.5.10.05300) PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06010) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922) PowerDVD (x32) ProjectX 0.90.4.00 (x32) ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.10) QUICKfind (x32) QuickTime (x32 Version: 7.68.75.0) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922) RealPlayer (x32) Realtek PCIE Card Reader (x32 Version: 6.1.7600.77) Remote Keyboard (x32 Version: 1.1.1.03020) Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070) RollerCoaster Tycoon (x32) Skype™ 5.10 (x32 Version: 5.10.116) Sony Corporation (Version: 1.0.0) Spybot - Search & Destroy (x32 Version: 1.6.2) SSLx64 (Version: 1.0.0) SSLx86 (x32 Version: 1.0.0) Text-To-Speech-Runtime (x32 Version: 1.0.0.0) Trend Micro Titanium (Version: 6.00) Trend Micro Titanium Maximum Security (Version: 6.0) Ulead PhotoImpact 12 (x32 Version: 12.0) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2) VAIO - Media Gallery (x32 Version: 1.5.0.16020) VAIO - PMB VAIO Edition Guide (x32 Version: 1.6.00.06030) VAIO - PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06140) VAIO - Remote Play mit PlayStation®3 (x32 Version: 1.1.0.15070) VAIO - Remote-Tastatur (x32 Version: 1.0.1.03020) VAIO Care (x32 Version: 6.4.2.11150) VAIO Control Center (x32 Version: 4.5.0.03040) VAIO Data Restore Tool (x32 Version: 1.6.0.13140) VAIO Easy Connect (x32 Version: 1.1.2.01120) VAIO Event Service (x32 Version: 5.5.0.03040) VAIO Gate (x32 Version: 2.4.0.06210) VAIO Gate Default (x32 Version: 2.4.0.03240) VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280) VAIO Hero Screensaver - Summer 2011 Screensaver (x32) VAIO Improvement (x32 Version: 1.0.0.14150) VAIO Improvement Validation (Version: 1.0.4.01190) VAIO Quick Web Access (x32 Version: 1.4.5.3) VAIO Sample Contents (x32 Version: 1.4.2.09010) VAIO Smart Network (x32 Version: 3.5.0.02280) VAIO Update (x32 Version: 5.6.1.02150) VAIO Update Merge Module x64 (Version: 5.6.10270) VAIO Update Merge Module x64 (Version: 5.7.13130) VAIO-Handbuch (x32 Version: 2.0.0.02250) VAIO-Support für Übertragungen (x32 Version: 1.4.0.14230) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) VCCx86 (x32 Version: 1.0.0) VESx64 (Version: 1.0.0) VESx86 (x32 Version: 1.0.0) VIx64 (Version: 1.0.0) VIx86 (x32 Version: 1.0.0) VLC media player 1.1.11 (x32 Version: 1.1.11) VSNx64 (Version: 1.0.0) VU5x64 (Version: 1.0.0) VU5x86 (x32 Version: 1.0.0) VU5x86 (x32 Version: 1.1.0) VWSTx86 (x32 Version: 1.0.0) Wartung Samsung CLP-620 Series (x32) Winamp (x32 Version: 5.623 ) Windows 7 Codec Pack 4.0.8 (x32 Version: 4.0.8) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3508.1109) Windows Live Fotogaléria (x32 Version: 15.4.3502.0922) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Fotogalleri (x32 Version: 15.4.3502.0922) Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922) Windows Live Fotótár (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2) Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2) Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922) Windows Liven sähköposti (x32 Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922) Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8) WinRAR Archivierer (x32) WinZip (x32) Zip Motion Block Video codec (Remove Only) (x32) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922) Елемент керування Windows Live Mesh ActiveX для віддалених підключень (x32 Version: 15.4.5722.2) Основи Windows Live (x32 Version: 15.4.3502.0922) Основные компоненты Windows Live (x32 Version: 15.4.3502.0922) Почта Windows Live (x32 Version: 15.4.3502.0922) Фотоальбом Windows Live (x32 Version: 15.4.3502.0922) Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922) Фотоколекція Windows Live (x32 Version: 15.4.3502.0922) Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2) ==================== Restore Points ========================= 20-07-2013 20:59:01 Geplanter Prüfpunkt 14-08-2013 19:08:19 Geplanter Prüfpunkt 14-08-2013 23:56:51 Windows Update 28-08-2013 19:23:15 Geplanter Prüfpunkt 31-08-2013 00:27:37 Windows Update 04-09-2013 23:23:15 Windows Update 06-09-2013 21:52:26 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started Task: {085F6BA5-CEF7-4C1F-8472-A65B60D6465E} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-06-21] (Sony Corporation) Task: {157D4A64-77E8-4553-87B1-F2196B16C191} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {1E7980E3-6134-4BA6-949E-4688C6CACCB6} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-06-21] (Sony Corporation) Task: {1FF9EABE-0EB3-49C9-96EF-034FAE155119} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2012-01-17] (Sony Corporation) Task: {326E9784-81A9-4BF7-84C8-DAF61F4E75EF} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation) Task: {34F9E854-C091-4ACA-884B-25DF8501A9CF} - System32\Tasks\{C26025EE-9285-4207-9D18-87321ED98F43} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?page=tsProgressBar Task: {39FFB469-EA83-4B9B-AB64-1F58EFAB3E31} - System32\Tasks\SONY\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-06-21] (Sony Corporation) Task: {3C01D04B-727F-4D4F-AF2C-0370F7CA7AC7} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: {43297928-8ED1-45F4-A5CD-ABDA33D091CE} - System32\Tasks\User_Feed_Synchronization-{F78E29C5-8F9D-4657-9811-7592FE64263A} => C:\Windows\system32\msfeedssync.exe [2013-03-22] (Microsoft Corporation) Task: {7BA89835-CE8A-4130-AF22-24B59BD25CCD} - System32\Tasks\{AAAFA468-C255-4BA7-A9B9-66A62036F2E0} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?page=tsProgressBar Task: {8B7EDE0A-182E-434A-B58F-C1C48FE24035} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient Task: {A34FE6CA-99E7-4437-9E61-8FD155AA0D58} - System32\Tasks\{FE13566C-2A31-4B86-A6AA-603836F9A097} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?page=tsProgressBar Task: {A42D5450-11A5-4AB1-BE37-08C26178792D} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {B5B73758-28F8-42EF-92A7-C84F5BFE15BA} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation) Task: {BB3D5157-6164-4564-AED7-C17F1246AF8A} - System32\Tasks\{57E86CE9-7BB6-4A9D-8D9D-00D4B20F4FCF} => D:\setup.exe Task: {D4D6E397-2C97-41F5-B630-40E8E0E6707B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.) Task: {E958A119-3ECA-49A8-A7DE-A2796D1AFD87} - System32\Tasks\{913DC0BB-5FB2-4858-8C7E-30F136A4CD1F} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMain ==================== Loaded Modules (whitelisted) ============= 2011-08-08 12:19 - 2011-08-08 11:06 - 08105576 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2011-12-25 20:04 - 2005-06-07 13:26 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2011-08-08 13:09 - 2011-06-21 11:55 - 00069120 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIOGateShellExt.dll 2013-04-08 13:10 - 2013-02-04 16:11 - 00174728 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\tmdshell.dll 2012-01-16 21:53 - 2012-01-16 21:53 - 00331776 _____ (Florian Heidenreich) C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll 2011-02-17 09:52 - 2011-02-17 05:06 - 00107376 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\Vxdif.dll 2011-02-17 09:52 - 2011-02-17 05:06 - 00219504 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.DLL 2011-02-17 09:52 - 2011-02-17 05:06 - 00039792 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\EzAuto.dll 2011-02-17 09:52 - 2011-02-17 05:06 - 01415536 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApRes.dll 2011-02-17 09:52 - 2011-02-17 05:06 - 00279408 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\EzLaunch.DLL 2011-12-15 17:31 - 2009-03-23 19:00 - 00113152 _____ (CANON INC.) C:\Program Files\Canon\MyPrinter\cnmpu.dll 2011-12-15 17:31 - 2009-04-06 19:00 - 00065536 _____ (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMyRes.dll 2013-03-29 16:10 - 2012-05-02 21:27 - 00049664 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_49.dll 2013-03-29 16:10 - 2012-05-02 21:24 - 00064512 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_49.dll 2013-03-29 16:11 - 2012-07-13 14:22 - 00141280 ____N (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilJsonHandle.dll 2013-03-29 16:11 - 2012-07-13 13:35 - 00098032 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilDebugLog.dll 2013-03-29 16:11 - 2012-07-13 13:36 - 00582632 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilInstallation.dll 2013-03-29 16:11 - 2012-07-13 13:35 - 00093400 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilComponentInfo.dll 2013-03-29 16:11 - 2012-07-13 13:36 - 00090816 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilMsgBuffer.dll 2013-03-29 16:11 - 2012-07-13 13:35 - 00030552 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilGenericLoader.dll 2013-03-29 16:11 - 2012-07-13 13:36 - 00016136 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilThread.dll 2013-03-29 16:10 - 2012-07-13 13:32 - 00382312 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\outer_AMSP_ClientLibrary.dll 2013-03-29 16:11 - 2012-07-13 13:36 - 00107808 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilIPC.dll 2013-03-29 16:11 - 2012-07-13 13:36 - 00138208 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilRPC.dll 2013-03-29 17:03 - 2012-10-19 19:52 - 00046272 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\SkypeInstaller.dll 2011-02-17 09:52 - 2011-02-17 05:06 - 00107376 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\VXDIF.DLL 2011-08-08 13:14 - 2011-11-15 11:27 - 00083104 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCUtility.dll 2011-08-08 13:14 - 2011-11-02 16:40 - 00059528 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Care\KeyUtilities.dll 2011-08-08 13:14 - 2011-02-14 14:23 - 00022720 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Care\Metrics.dll 2011-08-08 13:09 - 2011-06-21 11:55 - 00080896 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Gate\x64\VAIOGateNotifications.dll 2011-08-08 12:22 - 2011-02-15 09:26 - 00041984 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\viaggregator.dll 2013-08-15 00:44 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-01-09 19:49 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\kernel32.dll 2013-01-09 19:49 - 2012-11-30 06:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNELBASE.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\USER32.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.dll 2009-07-14 01:25 - 2009-07-14 03:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\syswow64\LPK.dll 2013-01-09 19:51 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\syswow64\USP10.dll 2012-02-16 12:59 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\syswow64\msvcrt.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.dll 2009-07-14 01:11 - 2009-07-14 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2013-08-15 00:44 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\syswow64\RPCRT4.dll 2012-07-11 14:19 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SspiCli.dll 2009-07-14 01:12 - 2009-07-14 03:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPTBASE.dll 2013-05-15 16:45 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.dll 2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\SHLWAPI.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.dll 2011-12-14 20:02 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.dll 2013-08-15 00:45 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPT32.dll 2010-11-21 05:23 - 2010-11-21 05:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\syswow64\MSASN1.dll 2013-08-15 00:45 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.dll 2009-07-14 01:28 - 2009-07-14 03:15 - 00828928 _____ (Microsoft Corporation) C:\Windows\syswow64\MSCTF.dll 2011-12-14 20:02 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\syswow64\CFGMGR32.dll 2010-11-21 05:23 - 2010-11-21 05:23 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.dll 2011-12-14 20:02 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\syswow64\DEVOBJ.dll 2009-07-14 01:44 - 2009-07-14 03:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\syswow64\CLBCatQ.DLL 2009-07-14 01:33 - 2009-07-14 03:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00269824 _____ (Microsoft Corporation) C:\Windows\syswow64\WLDAP32.dll 2010-11-21 05:23 - 2010-11-21 05:23 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.dll 2009-07-14 01:12 - 2009-07-14 03:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\syswow64\NSI.dll 2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.DLL 2012-04-11 13:40 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\imagehlp.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00119808 _____ (Microsoft Corporation) C:\Windows\syswow64\IMM32.dll 2011-08-08 12:23 - 2011-01-22 15:15 - 00096768 _____ (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SnyUtils.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00079360 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESStorageProtect.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00056832 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESUSBKeyboard.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00062464 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESSuEvent.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00108032 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESTransform.dll 2011-08-08 12:23 - 2011-01-22 15:15 - 00018432 _____ (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SonyInfo.dll 2011-08-08 12:22 - 2011-02-15 09:26 - 00034816 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Improvement\viaggregator.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00225280 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESPerform.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00084992 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESRemoteKey.dll 2009-07-14 01:37 - 2009-07-14 03:15 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CRYPTSP.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcRtRemote.dll 2011-08-08 12:23 - 2011-01-22 15:15 - 00109568 _____ (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SSLProxyCOM.dll 2011-09-08 16:17 - 2011-09-08 16:17 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVCP100.dll 2011-09-08 16:17 - 2011-09-08 16:17 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVCR100.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SXS.DLL 2011-08-08 12:26 - 2011-03-04 17:05 - 00192512 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\CommonSetting.dll 2013-01-09 19:49 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNEL32.dll 2013-05-15 16:45 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\shell32.dll 2013-08-15 18:52 - 2013-08-15 18:52 - 00019968 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\898df551d58233f57a678406a6eb470d\IAStorDataMgrSvc.ni.exe 2013-08-15 18:52 - 2013-08-15 18:52 - 00219136 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\6293ff10d662de11fd55cca92f9acd45\IAStorDataMgr.ni.dll 2013-08-15 18:52 - 2013-08-15 18:52 - 00475136 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\ebdb3050959d9be47d33d2c77d6cc291\IAStorUtil.ni.dll 2013-08-15 18:52 - 2013-08-15 18:52 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\cd9a4b4dbc1a4b564ebed696e18cadb6\IsdiInterop.ni.dll 2011-08-08 12:12 - 2010-09-13 18:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2013-07-14 18:45 - 2013-07-14 18:45 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\34002b75cd0faab68bf8079299c1aa46\IAStorCommon.ni.dll 2011-08-08 12:42 - 2008-09-04 17:06 - 00055808 _____ (ArcSoft, Inc.) C:\Windows\system\ArcSoftKsUFilter.dll 2011-08-08 12:20 - 2011-02-01 12:57 - 01892352 _____ (Apache Software Foundation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00071168 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsg.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00035840 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsgHook.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00301568 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESCommonUI.dll 2011-08-08 12:26 - 2011-03-05 16:42 - 00089600 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESAppMon.dll 2011-12-14 20:02 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\oleaut32.dll 2013-08-15 02:04 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\wininet.dll 2009-07-14 01:15 - 2009-07-14 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\syswow64\normaliz.DLL 2013-08-15 02:04 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\syswow64\iertutil.dll 2013-08-15 00:45 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\crypt32.dll 2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\psapi.dll 2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.dll 2010-11-27 00:25 - 2010-11-27 00:25 - 00013312 _____ (Sony Corporation) C:\Program Files (x86)\Sony\PMB\XpStorageDevice_WinXp2k.dll 2013-08-15 02:04 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\WININET.dll 2013-08-15 02:04 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\syswow64\urlmon.dll 2010-10-28 22:50 - 2010-10-28 22:50 - 00303616 _____ (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcherLOC.DLL 2009-07-14 02:03 - 2009-07-14 03:15 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINMM.dll 2011-12-15 17:09 - 2006-08-15 01:20 - 00098304 ____N (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\u32Comm.dll 2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\comdlg32.dll 2011-12-15 17:09 - 2004-07-26 18:11 - 00028672 ____N () C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\DetMethod.dll 2011-12-15 17:09 - 2004-11-29 10:59 - 00036864 ____N (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor_Res.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00394240 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\CoreDll.dll 2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\shlwapi.DLL 2011-12-26 19:08 - 2005-03-09 20:10 - 00061440 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimSessionManager.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00363008 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimDB.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00023040 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\AttributeInfo.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00025600 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\ThreadUtils.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00033792 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\UsageBracketing.dll 2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll 2009-07-13 23:03 - 2009-07-14 03:15 - 01589248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll 2009-07-13 23:04 - 2009-07-14 03:15 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll 2009-07-13 23:03 - 2009-07-14 03:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll 2009-07-13 23:03 - 2009-07-14 03:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJINT40.DLL 2011-12-26 19:08 - 2005-03-09 20:10 - 00143360 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\DeviceManager.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00086528 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\EventMgr.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00811008 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimJobs.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00069632 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\licmgr.dll 2011-12-26 19:08 - 2005-02-11 17:20 - 00122880 _____ () C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mmgit.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00057344 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mmdrm.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00051200 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\TrackUtils.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00034816 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\ObjectManager.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00024064 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortalServices2.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00270976 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Enforce.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00765952 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Crypt.dll 2011-12-26 19:08 - 2005-03-09 20:11 - 00092672 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMReg.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00551936 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\SkinnedCtrls.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00079360 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\FileTagObj.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00115200 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\LocalDisk_Factory.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00100864 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Stream_Factory.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00118784 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\CdDvd_Factory.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00133120 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Portable_Factory.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00081920 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Stream_DO.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00056320 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Metadatacache.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00100352 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\TOD_Factory.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00460288 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortableAgent.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00025600 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortableDevice2.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00011776 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortableDevice.dll 2011-12-26 19:08 - 2005-02-11 17:20 - 00897152 _____ (MUSICMATCH, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mmlicmgr.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00107008 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\TOD_DO.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00181760 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\WavMp3Tag.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00090112 _____ (TODO: <Company name>) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\GraphicsUtils.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00164352 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\components\stingray.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00035840 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\FileCacheMgr.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00454144 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\BasicObjs.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00033792 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\components\mxlobj.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00270336 _____ (MusicMatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMSAL32.DLL 2011-12-26 19:08 - 2005-03-09 20:10 - 00034816 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\DummyTagObj.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00037376 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\WinMsgObject.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00199680 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\WmaObj.dll 2009-07-13 23:04 - 2009-07-14 03:15 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00206848 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\LocalDisk_DO.dll 2011-12-26 19:09 - 2005-02-08 13:04 - 00331776 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Plugins\Portable2004\WMDM\MDPlugin.dll 2010-11-21 05:25 - 2010-11-21 05:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINHTTP.dll 2012-01-31 18:25 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00054784 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PlaylistFileObj.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00061952 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PlaylistM3UFileObj.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00047104 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PlaylistPLSFileObj.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00041472 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMInet.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00093696 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\NetUtilsDLL.dll 2011-12-26 19:08 - 2005-03-09 20:10 - 00077824 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMHttp.dll 2012-05-18 18:41 - 2012-04-21 03:16 - 00838584 _____ (sqlite.org) C:\Program Files (x86)\Mozilla Firefox\mozsqlite3.dll 2012-05-18 18:41 - 2012-04-21 03:16 - 01952696 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-08-06 18:32 - 2013-03-12 04:57 - 00906264 ____N (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension\components\TmBpFf.dll 2011-04-24 08:01 - 2011-04-24 08:01 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2010-11-21 05:24 - 2010-11-21 05:24 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll 2011-12-14 20:02 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll ==================== Alternate Data Streams (whitelisted) ========== AlternateDataStreams: C:\Users\Internet\Cookies:XvJd6vJ0cakcPsRMel0 AlternateDataStreams: C:\Users\Internet\Thumbs.db:encryptable ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/07/2013 07:46:15 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: CALMAIN.exe, Version: 8.1.0.14, Zeitstempel: 0x433d11f9 Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00009966 ID des fehlerhaften Prozesses: 0xa48 Startzeit der fehlerhaften Anwendung: 0xCALMAIN.exe0 Pfad der fehlerhaften Anwendung: CALMAIN.exe1 Pfad des fehlerhaften Moduls: CALMAIN.exe2 Berichtskennung: CALMAIN.exe3 Error: (09/07/2013 00:14:12 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 11:52:06 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 11:39:14 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 11:15:12 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 02:19:07 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/05/2013 05:27:12 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: CALMAIN.exe, Version: 8.1.0.14, Zeitstempel: 0x433d11f9 Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00009966 ID des fehlerhaften Prozesses: 0xa0c Startzeit der fehlerhaften Anwendung: 0xCALMAIN.exe0 Pfad der fehlerhaften Anwendung: CALMAIN.exe1 Pfad des fehlerhaften Moduls: CALMAIN.exe2 Berichtskennung: CALMAIN.exe3 Error: (09/05/2013 01:42:31 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/05/2013 00:14:05 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/04/2013 09:39:43 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (09/07/2013 11:15:19 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (09/07/2013 07:46:15 AM) (Source: Service Control Manager) (User: ) Description: Dienst "Canon Camera Access Library 8" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (09/07/2013 00:12:44 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: acedrv06 Error: (09/07/2013 00:12:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/07/2013 00:12:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/07/2013 00:12:26 AM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\MxlW2k.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/07/2013 00:12:26 AM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\drivers\pfc.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (09/07/2013 00:10:50 AM) (Source: DCOM) (User: ) Description: {D0AAD3D6-EB93-4363-A24E-2C3D80CDBAC7} Error: (09/06/2013 11:50:36 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: acedrv06 Error: (09/06/2013 11:50:36 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Microsoft Office Sessions: ========================= Error: (09/07/2013 07:46:15 AM) (Source: Application Error)(User: ) Description: CALMAIN.exe8.1.0.14433d11f9msvcrt.dll7.0.7601.177444eeaf722c000000500009966a4801ceab4e35eae5c3C:\Program Files (x86)\Canon\CAL\CALMAIN.exeC:\Windows\syswow64\msvcrt.dllcee3521d-1780-11e3-85ba-78843cedd408 Error: (09/07/2013 00:14:12 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 11:52:06 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 11:39:14 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 11:15:12 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/06/2013 02:19:07 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/05/2013 05:27:12 PM) (Source: Application Error)(User: ) Description: CALMAIN.exe8.1.0.14433d11f9msvcrt.dll7.0.7601.177444eeaf722c000000500009966a0c01ceaa2cd40998e3C:\Program Files (x86)\Canon\CAL\CALMAIN.exeC:\Windows\syswow64\msvcrt.dlla2aff130-163f-11e3-8a49-78843cedd408 Error: (09/05/2013 01:42:31 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/05/2013 00:14:05 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/04/2013 09:39:43 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2013-09-07 00:12:25.964 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-07 00:12:25.917 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 23:50:18.574 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 23:50:18.527 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 23:37:27.165 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 23:37:27.118 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 23:13:27.210 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 23:13:27.164 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 14:17:20.900 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-09-06 14:17:20.838 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 26% Total physical RAM: 8173.86 MB Available physical RAM: 6011.82 MB Total Pagefile: 16345.9 MB Available Pagefile: 13933.13 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:684.53 GB) (Free:114.4 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: A9D7A0A0) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=685 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Was ist das jetzt wieder? |
07.09.2013, 14:51 | #4 | |
/// the machine /// TB-Ausbilder | win32.downloader.gen - Entfernung mit AdwCleaner ausreichend?Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
07.09.2013, 17:20 | #5 |
| win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? Hm irgendwie werden die Probleme immer mehr ... wg dem Downloadproblem hatte ich den Schreibschutz-Haken des Temp-Ordners entfernt und ihn für alle Benutzer verfügbar gemacht, was aber nichts gebracht hat. Wenn ich jetzt irgendwelche Dateien wie zB Bilder öffnen will, erscheint eine Melsung, dass ich keibe ausreichwnde Berechtigung dazu hätte. In der Ordnerbeschreibung stand, dass die Datei von einem anderen Computer sei. Die Sicherungskopie funktioniert auf einem anderen PC allerdings einwqndfrei. Außerdem kam vorhin auch bei Firefox eine Fehlermeldung (irgendwas mit Schutz konnte nicht geladen werden). Werde dann wohl einfach alles neuinstallieren, dann ist auf jeden Fall wieder alles sauber. |
07.09.2013, 21:21 | #6 |
/// the machine /// TB-Ausbilder | win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? hi, Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8) Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
__________________ --> win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? |
Themen zu win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? |
ausreichend, chip.de, datei, deaktiviert, entfernt, entfernung, ergebnisse, geliefert, malware, micro, namens, neu, neustart, nicht möglich, nichts, passwörter, programm, registrierungsdatenbank, scan, scanner, search, spybot, suche, teatimer, trend, virenscan, virenscanner, win, woche |