| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: "Lag" bei allen Aktionen, die Windows-Basiert sindWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
04.10.2013, 00:30
| #1 |
 |  "Lag" bei allen Aktionen, die Windows-Basiert sind Hallo! Seit vorgestern habe ich ein merkwürdiges Problem: Läuft der Computer einige Zeit lang (d.h. ~3-4 Stunden ohne Restart), dann ist es plötzlich so, dass Aktionen wie Rechtsklick, Öffnen von Fenstern, Öffnen von Programmen am Desktop, Öffnen des Taskmanagers etc., etwas "laggt", d.h. es dauert ~5-10 Sekunden, bis die jeweilige Aktion ausgeführt wird. Es ist kein "Stecken", d.h. ich kann die Maus weiterhin einwandfrei bewegen, es passiert halt einfach 5-10 Sekunden lang nichts. Ein Neustart behebt das Problem. Die Leistung ist nicht eingeschränkt, alle Sekundärprogramme, die nichts mit Windows zu tun haben (Spiele, VLC, Opera, was auch immer) funktionieren einwandfrei und mit gewohnter Geschwindigkeit. Dort ist auch kein "Lag". Ein beenden von explorer.exe per Task-Manager behebt das Problem nicht. Ein Neustart ist in diesem Fall nicht mehr möglich, ohne den PC per 5-Sekunden halten (oder Netzstecker ziehen) mit Gewalt neu zu starten. Das Abmelden dauert einfach unendlich lange (zuerst zeigt er mir noch an, dass "auf Hintergrundprogramme gewartet wird", obwohl in der Liste gar keine Programme aufscheinen!) Ich habe vor kurzer Zeit AVG2014 installiert. Kann es damit etwas zu tun haben? Ich kann es nicht deinstallieren (offenbar ist die Installation korrupt!). Ich bin gerade dabei, mit dem AVG Remover das rauszulöschen. Ich bin niemand, der sich auf zwielichtigen Seiten rumtreibt und deshalb sicher auch nicht so anfällig für Trojaner etc., ausserdem werden an meinem PC keine fremden USB-Sticks angesteckt. Ich bin am Wochenende nicht da, d.h. kann evtl. erst wieder am Montag / Sonntag Abend Logs etc. posten Danke im Voraus! Edit: System ist Windows 7 64 Bit, alle neuesten Updates sollten installiert sein  Edit 2: Ergebnis eines Malwarebytes Scans: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.10.03.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16686 03.10.2013 23:36:22 MBAM-log-2013-10-04 (00-08-43).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 530769 Laufzeit: 15 Minute(n), 11 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKCU\Software\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 5 C:\Users\---\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RHBYGPW\any-gif-animator[1].exe (PUP.Optional.Somoto) -> Keine Aktion durchgeführt. C:\Users\---\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HSWEFDXO\__100[1].exe (PUP.Optional.Amonetize.A) -> Keine Aktion durchgeführt. C:\Users\---\AppData\Local\Temp\any-gif-animator.exe (PUP.Optional.Somoto) -> Keine Aktion durchgeführt. C:\Users\---\AppData\Local\Temp\sam__2268_il2369263.exe (PUP.Optional.Amonetize.A) -> Keine Aktion durchgeführt. C:\Users\---\AppData\Local\Temp\is1070216317\FunmoodsLatest.exe (PUP.FunMoods) -> Keine Aktion durchgeführt. (Ende) Edit 3: Da bei fast allen anderen Postern ein FRST Log benötigt wird, poste ich auch eins. Ich hab aber die von Malwarebytes erkannten infizierten Dateien gelöscht (s.o.) Bevor mich jemand verurteilt: Ich verwende Daemon Tools ausschliesslich, um gekaufte CDs als Image auf dem PC speichern zu können und damit dann (bezahlte!) Computerspiele / Programme spielen / nutzen zu können.  FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by [Username] (administrator) on Computername on 04-10-2013 01:15:53
Running from C:\Users\[Username]\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\ifxspmgt.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\ifxtcs.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\No-IP\ducservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(The Eraser Project) C:\Program Files\Eraser\Eraser.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIGKE.EXE
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
() C:\Program Files (x86)\No-IP\DUC40.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Infineon Technologies AG) C:\Program Files (x86)\Infineon\Security Platform Software\IfxPsdSv.exe
(Beepa P/L) D:\Programme\Fraps\fraps.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Logitech, Inc.) C:\Program Files (x86)\Logitech\SetPointG\SetPointII.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Authentec) C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Beepa P/L) D:\Programme\Fraps\fraps64.dat
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-21] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2905912 2012-06-28] (Synaptics Incorporated)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1020064 2012-02-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-02-13] (Atheros Commnucations)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [RunDLLEntry] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry
HKLM\...\Run: [EvtMgr6] - C:\Program Files (x86)\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Eraser] - C:\PROGRA~1\Eraser\Eraser.exe [980920 2012-05-22] (The Eraser Project)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoAutorun] 1
HKCU\...\Run: [DAEMON Tools Pro Agent] - C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [840000 2011-01-13] (DT Soft Ltd)
HKCU\...\Run: [EPSON B42WD Series] - C:\Windows\TEMP\E_S5772.tmp [140 2012-12-13] ()
HKCU\...\Run: [NoIPDUCv4] - C:\Program Files (x86)\No-IP\DUC40.exe [270336 2013-01-24] ()
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000
MountPoints2: J - J:\AutoRun.exe
MountPoints2: {21054386-73af-11e2-98b4-001e101f7f74} - J:\AutoRun.exe
MountPoints2: {781955aa-1472-11e3-bee3-0090f5d838fe} - J:\AutoRun.exe
MountPoints2: {8bc6727a-1179-11e3-b861-083e8e8daa77} - J:\AutoRun.exe
MountPoints2: {8bc672aa-1179-11e3-b861-0090f5d838fe} - E:\AutoRun.exe
MountPoints2: {9e7794f9-743d-11e2-8b99-083e8e8daa77} - J:\AutoRun.exe
MountPoints2: {b57ebb78-74ff-11e2-90b7-083e8e8daa77} - J:\AutoRun.exe
MountPoints2: {d4e1a749-3c73-11e2-a6e3-806e6f6e6963} - D:\autorun.exe
MountPoints2: {d6c28a85-72fa-11e2-a5e4-0090f5d838fe} - E:\AutoRun.exe
MountPoints2: {e3a92640-43f8-11e2-be12-806e6f6e6963} - I:\Install.exe
MountPoints2: {ead30768-76c1-11e2-9f8a-001e101f8924} - E:\AutoRun.exe
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe [1517056 2011-08-29] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-12-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4851760 2013-09-15] (AVG Technologies CZ, s.r.o.)
Startup: C:\Users\[Username]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fraps.lnk
ShortcutTarget: Fraps.lnk -> D:\Programme\Fraps\fraps.exe (Beepa P/L)
Startup: C:\Users\[Username]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thunderbird.lnk
ShortcutTarget: Thunderbird.lnk -> C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.live.com/1rewlive4startup/home
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD9C3A47256E4CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = www.google.at
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = www.google.at
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = www.google.at
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\IEBHO.dll (AuthenTec Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Winsock: Catalog9 01 %SYSTEMROOT%\system32\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 %SYSTEMROOT%\system32\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 %SYSTEMROOT%\system32\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 %SYSTEMROOT%\system32\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 05 %SYSTEMROOT%\system32\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 06 %SYSTEMROOT%\system32\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 17 %SYSTEMROOT%\system32\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 05 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 06 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 17 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.2
Tcpip\..\Interfaces\{26DB8BEE-6352-4EEE-A2A4-2493D926BEE4}: [NameServer]208.67.222.222,208.67.222.220
Tcpip\..\Interfaces\{635CA50A-9B2A-4569-B8CB-08058ECA7196}: [NameServer]208.67.222.222,208.67.222.220
FireFox:
========
FF ProfilePath: C:\Users\[Username]\AppData\Roaming\Mozilla\Firefox\Profiles\6oyxhswl.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\[Username]\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
==================== Services (Whitelisted) =================
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-09-03] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-22] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-02-06] ()
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [299848 2011-11-03] (AuthenTec, Inc)
R2 IFXSpMgtSrv; C:\Program Files (x86)\Infineon\Security Platform Software\ifxspmgt.exe [1160480 2010-02-23] (Infineon Technologies AG)
R2 IFXTCS; C:\Program Files (x86)\Infineon\Security Platform Software\ifxtcs.exe [992544 2010-02-23] (Infineon Technologies AG)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165144 2012-05-15] (Intel Corporation)
R2 NoIPDUCService4; C:\Program Files (x86)\No-IP\ducservice.exe [11264 2013-01-24] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 PersonalSecureDriveService; C:\Program Files (x86)\Infineon\Security Platform Software\IfxPsdSv.exe [214304 2010-02-23] (Infineon Technologies AG)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-12-26] ()
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [35328 2012-05-22] ()
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [490496 2012-07-23] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [92792 2007-11-06] (CACE Technologies)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [183896 2013-07-08] (Sandboxie Holdings, LLC)
S2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [x]
==================== Drivers (Whitelisted) ====================
R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [3364720 2012-07-23] (Qualcomm Atheros, Inc.)
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [139352 2013-07-31] (SlySoft, Inc.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2012-07-23] (Qualcomm Atheros, Inc.)
S3 NPF; C:\Windows\System32\drivers\npf.sys [40464 2007-11-06] (CACE Technologies)
R1 PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [44576 2010-01-25] (Infineon Technologies AG)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [199384 2013-07-08] (Sandboxie Holdings, LLC)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-12] (Duplex Secure Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R2 WinRing0_1_2_0; C:\Users\[Username]\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0x64.sys [14544 2012-12-11] (OpenLibSys.org)
U3 ar8i7icy; C:\Windows\System32\Drivers\ar8i7icy.sys [0 ] (Advanced Micro Devices)
S1 ArcCtrl; system32\drivers\ArcCtrl.sys [x]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\1.3\temp\FairplayKD.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 vpnva; system32\DRIVERS\vpnva64.sys [x]
U3 uxldapog; \??\C:\Users\[Username]\AppData\Local\Temp\uxldapog.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-04 00:18 - 2013-10-04 00:18 - 00000948 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-10-04 00:18 - 2013-10-04 00:18 - 00000000 ___HD C:\$AVG
2013-10-04 00:18 - 2013-10-04 00:18 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\AVG2014
2013-10-04 00:18 - 2013-10-04 00:18 - 00000000 ____D C:\ProgramData\AVG2014
2013-10-04 00:17 - 2013-10-04 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-10-04 00:15 - 2013-10-04 00:21 - 00000000 ____D C:\ProgramData\MFAData
2013-10-04 00:15 - 2013-10-04 00:18 - 00000000 ____D C:\Users\[Username]\AppData\Local\Avg2014
2013-10-04 00:15 - 2013-10-04 00:15 - 00000000 ____D C:\Users\[Username]\AppData\Local\MFAData
2013-10-03 23:36 - 2013-10-03 23:36 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\Malwarebytes
2013-10-03 23:35 - 2013-10-03 23:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-03 23:35 - 2013-10-03 23:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-03 23:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-02 01:56 - 2013-10-02 12:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-02 00:59 - 2013-10-02 00:59 - 03820328 _____ C:\Users\[Username]\Downloads\battlelog-web-plugins_2.3.0_119.exe
2013-10-02 00:59 - 2013-10-02 00:59 - 03820328 _____ C:\Users\[Username]\Downloads\battlelog-web-plugins_2.3.0_119(1).exe
2013-09-25 11:08 - 2013-09-25 11:08 - 03819328 _____ C:\Users\[Username]\Downloads\battlelog-web-plugins_2.3.0_118.exe
2013-09-12 03:02 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-12 03:02 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-12 03:02 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-12 03:02 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-12 03:02 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-12 03:02 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-12 03:02 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-12 03:02 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 03:02 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 03:02 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-12 03:02 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-12 03:02 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 03:02 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-12 03:02 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 18:17 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 18:17 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 18:17 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 18:17 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 18:17 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 18:17 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 18:17 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 18:17 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 18:17 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 18:17 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 18:17 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 18:17 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 18:17 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 18:17 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 18:17 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 18:17 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 18:17 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 18:17 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 18:17 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 18:17 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 18:17 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 18:17 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 18:17 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 18:17 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 18:17 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 18:17 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 18:17 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 20:48 - 2013-09-11 19:25 - 00000040 ___SH C:\ProgramData\.zreglib
2013-09-09 20:47 - 2013-09-09 20:47 - 00000000 ____D C:\ProgramData\SlySoft
2013-09-09 20:47 - 2013-09-09 20:47 - 00000000 ____D C:\Program Files (x86)\SlySoft
2013-09-09 20:35 - 2013-09-09 20:42 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\ArcSoft
2013-09-09 20:35 - 2013-09-09 20:35 - 00000000 ____D C:\Users\[Username]\AppData\Local\ArcSoft
2013-09-09 20:35 - 2013-09-09 20:35 - 00000000 ____D C:\ProgramData\ArcSoft
2013-09-09 20:35 - 2007-05-30 15:14 - 00004096 _____ C:\Windows\system32\Drivers\VirtualizerDDK.sys
2013-09-09 20:34 - 2013-09-09 20:34 - 00000000 ____D C:\Users\[Username]\AppData\Local\Downloaded Installations
2013-09-09 20:22 - 2013-09-09 20:33 - 00000000 ____D C:\ProgramData\sMedio
2013-09-09 20:14 - 2013-09-09 20:14 - 00000000 ____D C:\ProgramData\Protexis
2013-09-09 20:13 - 2013-09-09 20:22 - 00000000 ____D C:\ProgramData\Corel
2013-09-09 20:13 - 2013-09-09 20:14 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-09-09 20:13 - 2013-09-09 20:13 - 00000000 ____D C:\Program Files (x86)\Corel
2013-09-09 20:13 - 2010-11-16 16:24 - 00015672 _____ (InterVideo) C:\Windows\system32\Drivers\regi.sys
2013-09-09 19:59 - 2013-09-09 19:59 - 00000000 ____D C:\Users\[Username]\Documents\CyberLink
2013-09-09 19:59 - 2013-09-09 19:59 - 00000000 ____D C:\Users\[Username]\AppData\Local\Cyberlink SoftDMA
2013-09-09 19:52 - 2013-09-09 20:09 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-09 19:52 - 2013-09-09 20:01 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\Users\Public\CyberLink
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\Users\[Username]\AppData\Local\MediaServer
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\Users\[Username]\AppData\Local\CyberLink
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\ProgramData\PDVD
2013-09-09 19:50 - 2013-09-09 19:52 - 00000000 ____D C:\ProgramData\install_clap
2013-09-09 19:49 - 2013-09-26 12:26 - 00001518 _____ C:\Windows\Sandboxie.ini
2013-09-09 19:49 - 2013-09-23 21:56 - 00001009 _____ C:\Users\[Username]\Desktop\Sandboxed Web Browser.lnk
2013-09-09 19:49 - 2013-09-09 19:49 - 00000000 ____D C:\Program Files\Sandboxie
2013-09-08 22:11 - 2013-09-08 22:11 - 00031544 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2013-09-08 16:06 - 2013-06-15 14:54 - 00001028 _____ C:\Users\[Username]\Desktop\soiedls.rar
2013-09-05 23:34 - 2013-09-05 23:34 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-05 18:46 - 2013-09-05 18:46 - 00001914 _____ C:\Users\Public\Desktop\LUMIX Map Tool.lnk
2013-09-05 18:46 - 2013-09-05 18:46 - 00000000 ____D C:\Program Files (x86)\Panasonic
==================== One Month Modified Files and Folders =======
2013-10-04 00:55 - 2012-12-02 13:37 - 01478426 _____ C:\Windows\WindowsUpdate.log
2013-10-04 00:53 - 2013-10-04 00:53 - 01954124 _____ (Farbar) C:\Users\[Username]\Desktop\FRST64.exe
2013-10-04 00:53 - 2013-10-04 00:53 - 00000000 ____D C:\FRST
2013-10-04 00:44 - 2013-06-09 11:59 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\vlc
2013-10-04 00:35 - 2012-12-03 11:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-04 00:30 - 2009-07-14 06:45 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-04 00:30 - 2009-07-14 06:45 - 00021248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-04 00:29 - 2012-12-12 02:15 - 00000600 _____ C:\Users\[Username]\AppData\Roaming\winscp.rnd
2013-10-04 00:29 - 2009-11-19 21:30 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\NoNameScript
2013-10-04 00:28 - 2012-12-04 03:24 - 00000000 ____D C:\Program Files (x86)\mIRC
2013-10-04 00:27 - 2011-04-12 09:43 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-10-04 00:27 - 2011-04-12 09:43 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-10-04 00:27 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-04 00:23 - 2010-11-21 05:47 - 00046550 _____ C:\Windows\PFRO.log
2013-10-04 00:23 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-04 00:23 - 2009-07-14 06:51 - 00080999 _____ C:\Windows\setupact.log
2013-10-04 00:21 - 2013-10-04 00:15 - 00000000 ____D C:\ProgramData\MFAData
2013-10-04 00:18 - 2013-10-04 00:18 - 00000948 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-10-04 00:18 - 2013-10-04 00:18 - 00000000 ___HD C:\$AVG
2013-10-04 00:18 - 2013-10-04 00:18 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\AVG2014
2013-10-04 00:18 - 2013-10-04 00:18 - 00000000 ____D C:\ProgramData\AVG2014
2013-10-04 00:18 - 2013-10-04 00:15 - 00000000 ____D C:\Users\[Username]\AppData\Local\Avg2014
2013-10-04 00:17 - 2013-10-04 00:17 - 00000000 ____D C:\Program Files (x86)\AVG
2013-10-04 00:15 - 2013-10-04 00:15 - 00000000 ____D C:\Users\[Username]\AppData\Local\MFAData
2013-10-03 23:46 - 2012-12-19 17:03 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-03 23:46 - 2012-12-18 01:50 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-03 23:42 - 2012-12-18 01:50 - 00290184 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-03 23:36 - 2013-10-03 23:36 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\Malwarebytes
2013-10-03 23:35 - 2013-10-03 23:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-03 23:35 - 2013-10-03 23:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-03 22:56 - 2012-12-04 03:26 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\Skype
2013-10-03 18:37 - 2012-12-12 02:18 - 00000600 _____ C:\Users\[Username]\AppData\Local\PUTTY.RND
2013-10-03 18:32 - 2013-04-29 15:43 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\.minecraft
2013-10-03 14:39 - 2009-11-19 21:13 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\FileZilla
2013-10-02 15:13 - 2012-12-03 03:55 - 00000000 ____D C:\Users\[Username]\AppData\Local\CrashDumps
2013-10-02 15:05 - 2012-12-04 03:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 12:38 - 2013-10-02 01:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-02 12:38 - 2013-06-16 00:04 - 00000000 ____D C:\Users\[Username]\AppData\Local\Mozilla
2013-10-02 00:59 - 2013-10-02 00:59 - 03820328 _____ C:\Users\[Username]\Downloads\battlelog-web-plugins_2.3.0_119.exe
2013-10-02 00:59 - 2013-10-02 00:59 - 03820328 _____ C:\Users\[Username]\Downloads\battlelog-web-plugins_2.3.0_119(1).exe
2013-10-02 00:59 - 2012-12-19 17:05 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2013-09-30 16:11 - 2013-08-29 12:45 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\Amazon
2013-09-30 16:11 - 2013-08-29 12:34 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-09-26 12:26 - 2013-09-09 19:49 - 00001518 _____ C:\Windows\Sandboxie.ini
2013-09-26 00:23 - 2013-07-31 00:08 - 00012332 _____ C:\Users\[Username]\Desktop\pbgame.htm
2013-09-25 11:08 - 2013-09-25 11:08 - 03819328 _____ C:\Users\[Username]\Downloads\battlelog-web-plugins_2.3.0_118.exe
2013-09-24 22:34 - 2013-09-24 22:29 - 00000088 _____ C:\Users\[Username]\Desktop\Packet Loss.txt
2013-09-23 21:56 - 2013-09-09 19:49 - 00001009 _____ C:\Users\[Username]\Desktop\Sandboxed Web Browser.lnk
2013-09-23 00:35 - 2012-12-12 16:35 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-23 00:35 - 2012-12-03 11:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-23 00:35 - 2012-12-03 11:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-23 00:35 - 2012-12-03 11:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-22 23:49 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-19 01:12 - 2013-04-02 15:35 - 00000000 ____D C:\Users\[Username]\AppData\Local\Windows Live
2013-09-14 15:41 - 2013-09-14 15:41 - 01503339 _____ C:\Users\[Username]\Desktop\samp03xsvr_R2.tar.gz
2013-09-12 09:16 - 2012-12-02 13:39 - 00000000 ___RD C:\Users\[Username]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-12 09:16 - 2012-12-02 13:39 - 00000000 ___RD C:\Users\[Username]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 09:16 - 2009-07-14 06:45 - 00339928 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-12 03:02 - 2013-08-15 17:58 - 00000000 ____D C:\Windows\system32\MRT
2013-09-12 03:01 - 2012-12-02 22:05 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 19:25 - 2013-09-09 20:48 - 00000040 ___SH C:\ProgramData\.zreglib
2013-09-09 20:51 - 2013-09-09 20:51 - 00000000 ____D C:\Users\[Username]\Documents\AnyDVDHD
2013-09-09 20:47 - 2013-09-09 20:47 - 00001068 _____ C:\Users\Public\Desktop\AnyDVD.lnk
2013-09-09 20:47 - 2013-09-09 20:47 - 00000000 ____D C:\ProgramData\SlySoft
2013-09-09 20:47 - 2013-09-09 20:47 - 00000000 ____D C:\Program Files (x86)\SlySoft
2013-09-09 20:42 - 2013-09-09 20:35 - 00000000 ____D C:\Users\[Username]\AppData\Roaming\ArcSoft
2013-09-09 20:42 - 2012-12-02 13:53 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-09 20:35 - 2013-09-09 20:35 - 00000000 ____D C:\Users\[Username]\AppData\Local\ArcSoft
2013-09-09 20:35 - 2013-09-09 20:35 - 00000000 ____D C:\ProgramData\ArcSoft
2013-09-09 20:34 - 2013-09-09 20:34 - 00000000 ____D C:\Users\[Username]\AppData\Local\Downloaded Installations
2013-09-09 20:33 - 2013-09-09 20:22 - 00000000 ____D C:\ProgramData\sMedio
2013-09-09 20:33 - 2012-12-02 13:39 - 00000000 ____D C:\Users\[Username]
2013-09-09 20:22 - 2013-09-09 20:13 - 00000000 ____D C:\ProgramData\Corel
2013-09-09 20:14 - 2013-09-09 20:14 - 00000000 ____D C:\ProgramData\Protexis
2013-09-09 20:14 - 2013-09-09 20:13 - 00000040 ____H C:\Windows\system32\ivireg.ivr
2013-09-09 20:13 - 2013-09-09 20:13 - 00000000 ____D C:\Program Files (x86)\Corel
2013-09-09 20:09 - 2013-09-09 19:52 - 00000000 ____D C:\ProgramData\CyberLink
2013-09-09 20:01 - 2013-09-09 19:52 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2013-09-09 19:59 - 2013-09-09 19:59 - 00000000 ____D C:\Users\[Username]\Documents\CyberLink
2013-09-09 19:59 - 2013-09-09 19:59 - 00000000 ____D C:\Users\[Username]\AppData\Local\Cyberlink SoftDMA
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\Users\Public\CyberLink
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\Users\[Username]\AppData\Local\MediaServer
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\Users\[Username]\AppData\Local\CyberLink
2013-09-09 19:52 - 2013-09-09 19:52 - 00000000 ____D C:\ProgramData\PDVD
2013-09-09 19:52 - 2013-09-09 19:50 - 00000000 ____D C:\ProgramData\install_clap
2013-09-09 19:49 - 2013-09-09 19:49 - 00000000 ____D C:\Program Files\Sandboxie
2013-09-08 22:11 - 2013-09-08 22:11 - 00031544 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys
2013-09-05 23:34 - 2013-09-05 23:34 - 00000000 ____D C:\Program Files (x86)\MSECache
2013-09-05 23:34 - 2012-12-04 03:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-09-05 18:46 - 2013-09-05 18:46 - 00001914 _____ C:\Users\Public\Desktop\LUMIX Map Tool.lnk
2013-09-05 18:46 - 2013-09-05 18:46 - 00000000 ____D C:\Program Files (x86)\Panasonic
2013-09-04 15:23 - 1601-01-01 02:00 - 00823808 _____ C:\Users\[Username]\Desktop\pbsetup.exe
Files to move or delete:
====================
C:\Users\[Username]\jagex_cl_runescape_LIVE.dat
C:\Users\[Username]\random.dat
Some content of TEMP:
====================
C:\Users\[Username]\AppData\Local\Temp\20130218101706584jniverify.dll
C:\Users\[Username]\AppData\Local\Temp\7za.exe
C:\Users\[Username]\AppData\Local\Temp\AskSLib.dll
C:\Users\[Username]\AppData\Local\Temp\catalyst_mobility_64-bit_util.exe
C:\Users\[Username]\AppData\Local\Temp\COMAP.EXE
C:\Users\[Username]\AppData\Local\Temp\CRCCheck.exe
C:\Users\[Username]\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\[Username]\AppData\Local\Temp\drm_dialogs.dll
C:\Users\[Username]\AppData\Local\Temp\drm_dyndata_7340014.dll
C:\Users\[Username]\AppData\Local\Temp\installerdll28855192.dll
C:\Users\[Username]\AppData\Local\Temp\installerdll28883834.dll
C:\Users\[Username]\AppData\Local\Temp\jansi-64-git-Bukkit-1.4.7-R1.0-b2624jnks.dll
C:\Users\[Username]\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\[Username]\AppData\Local\Temp\LMkRstPt.exe
C:\Users\[Username]\AppData\Local\Temp\mirc634.exe
C:\Users\[Username]\AppData\Local\Temp\mirc727.exe
C:\Users\[Username]\AppData\Local\Temp\npp.6.3.Installer.exe
C:\Users\[Username]\AppData\Local\Temp\ResetDevice.exe
C:\Users\[Username]\AppData\Local\Temp\rootsupd.exe
C:\Users\[Username]\AppData\Local\Temp\Setup.exe
C:\Users\[Username]\AppData\Local\Temp\sfextra.dll
C:\Users\[Username]\AppData\Local\Temp\SIntf16.dll
C:\Users\[Username]\AppData\Local\Temp\SIntf32.dll
C:\Users\[Username]\AppData\Local\Temp\SIntfNT.dll
C:\Users\[Username]\AppData\Local\Temp\SkypeSetup.exe
C:\Users\[Username]\AppData\Local\Temp\sonarinst.exe
C:\Users\[Username]\AppData\Local\Temp\uninstall.exe
C:\Users\[Username]\AppData\Local\Temp\vcredist_x64.exe
C:\Users\[Username]\AppData\Local\Temp\vcredist_x86.exe
C:\Users\[Username]\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe
C:\Users\[Username]\AppData\Local\Temp\xmlUpdater.exe
C:\Users\[Username]\AppData\Local\Temp\_is4F48.exe
C:\Users\[Username]\AppData\Local\Temp\_is536D.exe
C:\Users\[Username]\AppData\Local\Temp\_isF42B.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-01 13:25
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Username at 2013-10-04 01:03:48
Running from C:\Users\Username\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
µTorrent (x32 Version: 3.2.2.28595)
3DMark 11 (x32 Version: 1.0.3)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
AMD Accelerated Video Transcoding (Version: 12.5.100.21202)
AMD APP SDK Runtime (Version: 10.0.1084.2)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.71202.0304)
AnyDVD (x32 Version: 7.3.2.0)
ARMA 2 Operation Arrowhead Uninstall (x32)
ArmA 2 Uninstall (x32)
Atheros Bluetooth Suite (64) (Version: 7.4.0.122)
AuthenTec Fingerprint Driver (Version: 1.6.2.0350)
AuthenTec TrueSuite (Version: 5.2.0.642)
AVG 2014 (Version: 14.0.3604)
AVG 2014 (Version: 14.0.4142)
AVG 2014 (Version: 2014.0.4142)
Battlefield 3™ (x32 Version: 1.0.0.0)
Battlelog Web Plugins (x32 Version: 2.3.0)
BattlEye for OA Uninstall (x32)
BattlEye Uninstall (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.1202.303.5362)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1202.303.5362)
Catalyst Control Center Localization All (x32 Version: 2012.1202.303.5362)
CCC Help Chinese Standard (x32 Version: 2012.1202.0302.5362)
CCC Help Chinese Traditional (x32 Version: 2012.1202.0302.5362)
CCC Help Czech (x32 Version: 2012.1202.0302.5362)
CCC Help Danish (x32 Version: 2012.1202.0302.5362)
CCC Help Dutch (x32 Version: 2012.1202.0302.5362)
CCC Help English (x32 Version: 2012.1202.0302.5362)
CCC Help Finnish (x32 Version: 2012.1202.0302.5362)
CCC Help French (x32 Version: 2012.1202.0302.5362)
CCC Help German (x32 Version: 2012.1202.0302.5362)
CCC Help Greek (x32 Version: 2012.1202.0302.5362)
CCC Help Hungarian (x32 Version: 2012.1202.0302.5362)
CCC Help Italian (x32 Version: 2012.1202.0302.5362)
CCC Help Japanese (x32 Version: 2012.1202.0302.5362)
CCC Help Korean (x32 Version: 2012.1202.0302.5362)
CCC Help Norwegian (x32 Version: 2012.1202.0302.5362)
CCC Help Polish (x32 Version: 2012.1202.0302.5362)
CCC Help Portuguese (x32 Version: 2012.1202.0302.5362)
CCC Help Russian (x32 Version: 2012.1202.0302.5362)
CCC Help Spanish (x32 Version: 2012.1202.0302.5362)
CCC Help Swedish (x32 Version: 2012.1202.0302.5362)
CCC Help Thai (x32 Version: 2012.1202.0302.5362)
CCC Help Turkish (x32 Version: 2012.1202.0302.5362)
ccc-utility64 (Version: 2012.1202.303.5362)
CD Wave Editor version 1.97 (x32 Version: 1.97)
CodeBlocks (HKCU Version: 10.05)
CodeStuff Starter (x32 Version: 5.6.2.9)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
Crysis(R) (x32 Version: 1.00.0000)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Pro (x32 Version: 4.40.0312.0214)
DayZ Commander (x32 Version: 0.9.124)
Druckerdeinstallation für EPSON B42WD Series
Eclipse IDE for Java Developers 4.2.1 (HKCU Version: SR1)
Eraser 6.0.10.2620 (Version: 6.0.2620)
eReg (x32 Version: 1.20.138.34)
ESN Sonar (x32 Version: 0.70.4)
Exact Audio Copy 1.0beta3 (x32 Version: 1.0beta3)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2)
FLAC 1.2.1b (remove only) (x32 Version: 1.2.1b)
Fotogalerie (x32 Version: 16.4.3505.0912)
Fraps (remove only) (x32)
Futuremark SystemInfo (x32 Version: 4.12.0)
GeoGebra 4.2 (x32 Version: 4.2.3.0)
Google Earth (x32 Version: 7.0.1.8244)
GTA San Andreas (x32 Version: 1.00.00001)
Hotkey 6.0058 (x32 Version: 6.0058)
Infineon TPM Professional Package (Version: 3.7.000)
Inkscape 0.48.4 (x32 Version: 0.48.4)
Intel(R) Management Engine Components (x32 Version: 8.0.12.1498)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.5.235)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 11 (x32 Version: 7.0.110)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.0)
Java SE Development Kit 7 Update 13 (64-bit) (Version: 1.7.0.130)
Logitech SetPoint 6.32 (Version: 6.32.20)
LUMIX Map Tool (x32 Version: 1.00.0000)
MakeMKV v1.8.0 (x32 Version: v1.8.0)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
MATLAB R2012b (Version: 8.0)
Media Player Codec Pack 4.2.4 (x32 Version: 4.2.4)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.2.3.0)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
mIRC (x32 Version: 6.34)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MPC-HC 1.6.6.6957 (3975d54) (64-bit) (Version: 1.6.6.6957)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MTA:SA v1.3.1 (x32 Version: v1.3.1)
NNScript (HKCU Version: 4.22)
No-IP DUC (x32 Version: 4.0.1)
Notepad++ (x32 Version: 6.3)
NVIDIA PhysX (x32 Version: 9.10.0513)
Opera 12.16 (x32 Version: 12.16.1860)
Origin (x32 Version: 9.1.3.2637)
Paint Shop Pro 6.02 EVAL (x32)
Paint.NET v3.5.10 (Version: 3.60.0)
PandoraRecovery (Remove Only) (x32)
PDF Architect (x32 Version: 1.1.83.9982)
PDFCreator (x32 Version: 1.7.0)
Photo Gallery (x32 Version: 16.4.3505.0912)
PunkBuster Services (x32 Version: 0.986)
Qualcomm Atheros Killer Network Manager (Version: 6.1.0.395)
Qualcomm Atheros Killer Network Manager (x32 Version: 6.1.0.395)
Realtek Ethernet Controller Driver (x32 Version: 7.54.309.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6581)
Realtek PCIE Card Reader (x32 Version: 6.2.8400.27024)
Recuva (Version: 1.48)
Sandboxie 4.04 (64-bit) (Version: 4.04)
Skype™ 6.6 (x32 Version: 6.6.106)
Sound Blaster X-Fi MB 2 (x32 Version: 1.04.00)
SpeedFan (remove only) (x32)
Steam (x32 Version: 1.0.0.0)
SUPER © v2012.build.54 (Nov 18, 2012) Version v2012.build.54 (x32 Version: v2012.build.54)
SUPER © v2013.build.57+Recorder (2013/07/13) Version v2013.buil (x32 Version: v2013.build.57+Recorder)
Synaptics Pointing Device Driver (Version: 16.2.4.0)
Team Fortress 2 (x32)
TeamSpeak 3 Client (Version: 3.0.10)
TeraCopy 2.27
THE Rename 2.1.6 (x32 Version: 2.1.6)
TrueCrypt (x32 Version: 7.1a)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)
Visual Studio 2012 x86 Redistributables (x32 Version: 14.0.0.1)
VLC media player 2.0.8 (x32 Version: 2.0.8)
WebCam Installer (x32 Version: 4.04)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
WinPcap 4.0.2 (x32 Version: 4.0.0.1040)
WinRAR archiver (x32)
WinSCP 5.1.2 (x32 Version: 5.1.2)
Wireshark 1.0.5 (x32 Version: 1.0.5)
==================== Restore Points =========================
03-10-2013 21:39:03 Entfernt Paragon Backup & Recovery™ 2012 Free.
03-10-2013 22:17:45 Installed AVG 2014
03-10-2013 22:18:01 Installed AVG 2014
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {A1AD9E9D-5620-491F-97B4-01EF6F80FE17} - System32\Tasks\MATLAB R2012b Startup Accelerator => C:\Program Files\MATLAB\R2012b\bin\win64\MATLABStartupAccelerator.exe [2012-07-20] ()
Task: {B3D59B75-ADEB-4B6A-83B5-F2F68CD73F03} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {C702C758-4586-41AD-9D0E-1E69195F7FB7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-23] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\MATLAB R2012b Startup Accelerator.job => C:\Program Files\MATLAB\R2012b\bin\win64\MATLABStartupAccelerator.exe
==================== Loaded Modules (whitelisted) =============
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-12-04 18:18 - 2006-12-11 03:14 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2012-12-04 03:27 - 2011-10-26 18:41 - 00126464 _____ () C:\Program Files\TeraCopy\TeraCopy64.dll
2011-11-03 04:09 - 2011-11-03 04:09 - 00087880 _____ () C:\Program Files\AuthenTec TrueSuite\ssutil.dll
2011-11-03 04:08 - 2011-11-03 04:08 - 00556360 _____ () C:\Program Files\AuthenTec TrueSuite\DataManager.dll
2012-12-02 21:17 - 2010-06-08 14:23 - 00236544 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2013-01-24 08:34 - 2013-01-24 08:34 - 00067584 _____ () C:\Program Files (x86)\No-IP\ducapi.dll
2009-06-06 15:50 - 2009-06-06 15:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2013-08-07 15:48 - 2013-08-07 15:48 - 02244504 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-08-07 15:48 - 2013-08-07 15:48 - 00158104 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-08-07 15:48 - 2013-08-07 15:48 - 00022424 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2012-12-04 04:10 - 2012-11-21 07:26 - 00008704 _____ () C:\Users\Username\AppData\Roaming\Thunderbird\Profiles\wzs8mnjd.default\extensions\mintrayr@tn123.ath.cx\lib\tray_x86-msvc.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00835584 _____ () C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00093696 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00094208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00057344 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00096256 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00062976 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00067072 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00158208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00312832 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00038912 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00073728 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll
2012-12-02 14:00 - 2013-07-12 19:39 - 00101888 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll
2013-09-11 19:35 - 2013-09-11 19:35 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
2013-08-15 23:57 - 2013-08-15 23:57 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll
2012-12-02 21:16 - 2011-11-29 21:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-12-02 13:56 - 2012-05-10 09:03 - 01198872 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Username\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Username\AppData\Roaming:NT
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: H:\
Description: PCIE Card Reader
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: Realtek
Service: WUDFRd
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/04/2013 00:23:22 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 11:32:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 11:19:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avgwdsvc.exe, Version: 14.0.0.4140, Zeitstempel: 0x523f5c67
Name des fehlerhaften Moduls: avgwd.dll, Version: 14.0.0.4134, Zeitstempel: 0x5236233a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00082905
ID des fehlerhaften Prozesses: 0xb48
Startzeit der fehlerhaften Anwendung: 0xavgwdsvc.exe0
Pfad der fehlerhaften Anwendung: avgwdsvc.exe1
Pfad des fehlerhaften Moduls: avgwdsvc.exe2
Berichtskennung: avgwdsvc.exe3
Error: (10/03/2013 11:19:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 06:07:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avgwdsvc.exe, Version: 14.0.0.4140, Zeitstempel: 0x523f5c67
Name des fehlerhaften Moduls: avgwd.dll, Version: 14.0.0.4134, Zeitstempel: 0x5236233a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00082905
ID des fehlerhaften Prozesses: 0xb4c
Startzeit der fehlerhaften Anwendung: 0xavgwdsvc.exe0
Pfad der fehlerhaften Anwendung: avgwdsvc.exe1
Pfad des fehlerhaften Moduls: avgwdsvc.exe2
Berichtskennung: avgwdsvc.exe3
Error: (10/03/2013 06:07:36 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 01:55:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avgwdsvc.exe, Version: 14.0.0.4140, Zeitstempel: 0x523f5c67
Name des fehlerhaften Moduls: avgwd.dll, Version: 14.0.0.4134, Zeitstempel: 0x5236233a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00082905
ID des fehlerhaften Prozesses: 0xb48
Startzeit der fehlerhaften Anwendung: 0xavgwdsvc.exe0
Pfad der fehlerhaften Anwendung: avgwdsvc.exe1
Pfad des fehlerhaften Moduls: avgwdsvc.exe2
Berichtskennung: avgwdsvc.exe3
Error: (10/03/2013 01:55:00 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 01:44:30 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 934
Startzeit: 01cec001846f4575
Endzeit: 0
Anwendungspfad: C:\Windows\Explorer.EXE
Berichts-ID: 28df3eb0-2c21-11e3-8d21-0090f5d838fe
Error: (10/03/2013 08:26:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: avgwdsvc.exe, Version: 14.0.0.4140, Zeitstempel: 0x523f5c67
Name des fehlerhaften Moduls: avgwd.dll, Version: 14.0.0.4134, Zeitstempel: 0x5236233a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00082905
ID des fehlerhaften Prozesses: 0xb3c
Startzeit der fehlerhaften Anwendung: 0xavgwdsvc.exe0
Pfad der fehlerhaften Anwendung: avgwdsvc.exe1
Pfad des fehlerhaften Moduls: avgwdsvc.exe2
Berichtskennung: avgwdsvc.exe3
System errors:
=============
Error: (10/04/2013 00:23:21 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ArcCtrl
UimBus
Uim_IM
Uim_VIM
Error: (10/04/2013 00:23:16 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{d4e1a745-3c73-11e2-a6e3-806e6f6e6963}" können nicht gelesen werden.
Error: (10/03/2013 11:32:12 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ArcCtrl
Error: (10/03/2013 11:32:10 PM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{d4e1a745-3c73-11e2-a6e3-806e6f6e6963}" können nicht gelesen werden.
Error: (10/03/2013 11:31:40 PM) (Source: DCOM) (User: )
Description: {06622D85-6856-4460-8DE1-A81921B41C4B}
Error: (10/03/2013 11:19:42 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ArcCtrl
Error: (10/03/2013 11:19:42 PM) (Source: Service Control Manager) (User: )
Description: Dienst "AVG WatchDog" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/03/2013 11:19:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AVGIDSAgent" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (10/03/2013 11:19:25 PM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{d4e1a745-3c73-11e2-a6e3-806e6f6e6963}" können nicht gelesen werden.
Error: (10/03/2013 11:19:24 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 03.10.2013 um 23:18:25 unerwartet heruntergefahren.
Microsoft Office Sessions:
=========================
Error: (10/04/2013 00:23:22 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 11:32:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 11:19:41 PM) (Source: Application Error)(User: )
Description: avgwdsvc.exe14.0.0.4140523f5c67avgwd.dll14.0.0.41345236233ac000000500082905b4801cec07e3cd82f26C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exeC:\Program Files (x86)\AVG\AVG2014\avgwd.dll83c8ce6e-2c71-11e3-b3a1-0090f5d838fe
Error: (10/03/2013 11:19:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 06:07:47 PM) (Source: Application Error)(User: )
Description: avgwdsvc.exe14.0.0.4140523f5c67avgwd.dll14.0.0.41345236233ac000000500082905b4c01cec052aa947c2bC:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exeC:\Program Files (x86)\AVG\AVG2014\avgwd.dllf1726e07-2c45-11e3-a4d9-0090f5d838fe
Error: (10/03/2013 06:07:36 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 01:55:12 PM) (Source: Application Error)(User: )
Description: avgwdsvc.exe14.0.0.4140523f5c67avgwd.dll14.0.0.41345236233ac000000500082905b4801cec02f619e30fdC:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exeC:\Program Files (x86)\AVG\AVG2014\avgwd.dlla86ff5c8-2c22-11e3-8463-0090f5d838fe
Error: (10/03/2013 01:55:00 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/03/2013 01:44:30 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.1756793401cec001846f45750C:\Windows\Explorer.EXE28df3eb0-2c21-11e3-8d21-0090f5d838fe
Error: (10/03/2013 08:26:54 AM) (Source: Application Error)(User: )
Description: avgwdsvc.exe14.0.0.4140523f5c67avgwd.dll14.0.0.41345236233ac000000500082905b3c01cec00184c7585fC:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exeC:\Program Files (x86)\AVG\AVG2014\avgwd.dllcb9861bf-2bf4-11e3-8d21-083e8e8daa77
==================== Memory info ===========================
Percentage of memory in use: 17%
Total physical RAM: 16344 MB
Available physical RAM: 13451.83 MB
Total Pagefile: 32686.18 MB
Available Pagefile: 29665.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:228.71 GB) (Free:11.07 GB) NTFS
Drive d: (Momentus) (Fixed) (Total:698.63 GB) (Free:107.6 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 72F533EE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: B1165DA1)
Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 238 GB) (Disk ID: 72F533EA)
Partition 1: (Not Active) - (Size=229 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (Size: 2 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=2 GB) - (Type=06)
==================== End Of Log ============================
Geändert von Arrows73 (03.10.2013 um 23:09 Uhr) |
|
04.10.2013, 00:52
| #2 |
| /// the machine /// TB-Ausbilder    | "Lag" bei allen Aktionen, die Windows-Basiert sind Hi,
__________________deinstalliere AVG komplett, dann nochmal testen.
__________________ |
|
04.10.2013, 00:53
| #3 |
| | "Lag" bei allen Aktionen, die Windows-Basiert sind Danke für die Antwort!
__________________Hab ich schon gemacht, die aktuelle Version, die auf den Logs zu sehen ist, ist bereits eine (diesmal funktionsfähige) Neuinstallation. Ich werde mal schauen, ob in den nächsten Tagen Probleme auftreten (bin wie gesagt erst am Montag wieder da) |
|
04.10.2013, 02:18
| #4 |
| /// the machine /// TB-Ausbilder | "Lag" bei allen Aktionen, die Windows-Basiert sind AVG steht halt extrem oft als Fehler drin. Teste mal.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu "Lag" bei allen Aktionen, die Windows-Basiert sind |
| avg, avg antivirus, beenden, branding, computer, dateien gelöscht, device driver, eingeschränkt, explorer.exe, farbar, farbar recovery scan tool, installation, launch, plug-in, plötzlich, programme, pup.funmoods, pup.optional.amonetize.a, pup.optional.regcleanerpro.a, pup.optional.somoto, rechtsklick, regclean, sekunden, spielen, systweak, task-manager, trojaner, vcredist, win64, windows |
Linear-Darstellung
