![]() |
|
Plagegeister aller Art und deren Bekämpfung: mail account sendet spamWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() mail account sendet spam Hallo Trojaner-board team, nach einiger Recherche habe ich diese Seite gefunden und ich bin sehr froh dass es online sowas gibt wo normale PC-user Hilfe finden können - dafür erstmal ein großes Danke! ![]() Bei mir hat sich wohl was eingeschlichen was Schindluder mit meinem t-online mail account betreibt und da ich den PC nicht nur privat sondern auch geschäftlich für meine kleine 1-Mann Firma nutze muss ich den wieder sicher machen: wer meine mailaccount Daten auslesen und missbrauchen kann macht auch vor Onlinebanking nicht halt und da wird es kritisch. ![]() Hab zwar selber versucht mit meinem avast! Virenprogramm das Problem zu lösen aber was auch immer da Blödsinn macht ist ganz schön hartnäckig und damit sind meine Kenntnisse am Ende. Hoffe Ihr könnt mir Helfen. Hier die logflies von FRST: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 Ran by Shira (administrator) on SHIRA-PC on 14-10-2013 10:51:00 Running from C:\Users\Shira\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Akamai Technologies, Inc.) C:\Users\Shira\AppData\Local\Akamai\netsession_win.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Akamai Technologies, Inc.) C:\Users\Shira\AppData\Local\Akamai\netsession_win.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Evoluent) C:\Program Files\Evoluent\VMouse\EvoMouseExec.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe () C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe (Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe (Dropbox, Inc.) C:\Users\Shira\AppData\Roaming\Dropbox\bin\Dropbox.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Opera Software) C:\Program Files (x86)\Opera\opera.exe (Valve Corporation) C:\Program Files (x86)\Steam\steam.exe (Re-Logic) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe (Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe (Re-Logic) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\TerrariaServer.exe () C:\Users\Shira\Downloads\Defogger.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor) HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1813928 2013-10-09] (Valve Corporation) HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Shira\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.) MountPoints2: {62394b46-b40e-11e2-8d64-806e6f6e6963} - D:\autorun.exe HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-10-16] (Intel Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software) HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [Aeria Ignite] - C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.) AppInit_DLLs-x32: c:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll [ ] () Startup: C:\Users\Shira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Shira\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Shira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?affID=121529&tt=gc_&babsrc=HP_ss&mntrId=E89FD43D7E4E7531 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xDB4C17D71C48CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?affID=121529&tt=gc_&babsrc=HP_ss_Btisdt7&mntrId=E89FD43D7E4E7531 SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=121529&tt=gc_&babsrc=SP_ss&mntrId=E89FD43D7E4E7531 BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.16.16\bh\delta.dll (Delta-search.com) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.16.16\deltaTlbr.dll (Delta-search.com) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Shira\AppData\Roaming\Mozilla\Firefox\Profiles\o51ve48u.default FF NewTab: hxxp://www.golsearch.com/?affID=121529&tt=gc_&babsrc=NT_ss_Btisdt6&mntrId=E89FD43D7E4E7531 FF SearchEngineOrder.1: Delta Search FF SelectedSearchEngine: Delta Search FF Homepage: hxxp://www.wetter.com/wetter_aktuell/wettervorhersage/3_tagesvorhersage/?id=DE0004503009|hxxp://www.diesiedleronline.de/de/spielen|hxxp://www.furaffinity.net/user/shiraseskai/|hxxp://www.transfur.com/Recent FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Shira\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus Pop-up Addon - C:\Users\Shira\AppData\Roaming\Mozilla\Firefox\Profiles\o51ve48u.default\Extensions\adblockpopups@jessehakanen.net FF Extension: DownloadHelper - C:\Users\Shira\AppData\Roaming\Mozilla\Firefox\Profiles\o51ve48u.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: adblockpopups - C:\Users\Shira\AppData\Roaming\Mozilla\Firefox\Profiles\o51ve48u.default\Extensions\adblockpopups@jessehakanen.net.xpi FF Extension: No Name - C:\Users\Shira\AppData\Roaming\Mozilla\Firefox\Profiles\o51ve48u.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Shira\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Shira\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Shira\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Shira\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Delta Toolbar) - C:\Users\Shira\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0 CHR Extension: (Gmail) - C:\Users\Shira\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Shira\AppData\Roaming\BabSolution\CR\delta2.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] () R3 EvoMouseDriverFilterHidUsb; C:\Windows\System32\DRIVERS\EvoMouseDriverFilterHidUsb.sys [25656 2010-06-23] (Evoluent) R3 EvoMouseDriverMini; C:\Windows\System32\drivers\EvoMouseDriverMini.sys [22584 2010-06-23] () R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-03-22] (Intel Corporation) S3 IpopTap; C:\Windows\System32\DRIVERS\IpopTap.sys [29696 2011-02-08] (The OpenVPN Project) S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [129856 2012-10-20] (Ray Hinchliffe) S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [129856 2012-10-20] (Ray Hinchliffe) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-14 10:50 - 2013-10-14 10:50 - 00000472 _____ C:\Users\Shira\Downloads\defogger_disable.log 2013-10-14 10:50 - 2013-10-14 10:50 - 00000000 ____D C:\FRST 2013-10-14 10:50 - 2013-10-14 10:50 - 00000000 _____ C:\Users\Shira\defogger_reenable 2013-10-14 10:49 - 2013-10-14 10:49 - 01954124 _____ (Farbar) C:\Users\Shira\Downloads\FRST64.exe 2013-10-14 10:46 - 2013-10-14 10:46 - 00050477 _____ C:\Users\Shira\Downloads\Defogger.exe 2013-10-14 08:24 - 2013-10-14 10:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-13 09:13 - 2013-10-13 09:23 - 214262072 _____ (COMODO) C:\Users\Shira\Downloads\cfw_installer.exe 2013-10-13 08:38 - 2013-10-13 08:39 - 00002144 _____ C:\Users\Shira\Desktop\TerrariaServer - Verknüpfung.lnk 2013-10-12 16:13 - 2013-10-12 16:13 - 00000000 ____D C:\Users\Shira\AppData\Local\LogMeIn 2013-10-12 16:13 - 2013-10-12 16:13 - 00000000 ____D C:\ProgramData\LogMeIn 2013-10-12 16:12 - 2013-10-14 07:13 - 00000000 ____D C:\Users\Shira\AppData\Local\LogMeIn Hamachi 2013-10-12 16:12 - 2013-10-12 16:12 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-10-12 16:11 - 2013-10-12 16:11 - 05849088 _____ C:\Users\Shira\Downloads\hamachi.msi 2013-10-12 15:29 - 2013-10-12 15:32 - 00000000 ____D C:\Users\Shira\AppData\Roaming\MoreTerra 2013-10-12 15:29 - 2013-10-12 15:29 - 00000000 ____D C:\Users\Shira\Downloads\MoreTerra1.11.3 2013-10-12 15:28 - 2013-10-12 15:28 - 00155472 _____ C:\Users\Shira\Downloads\MoreTerra1.11.3.zip 2013-10-11 23:10 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-11 23:10 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 23:10 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-11 23:10 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-11 23:10 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-11 23:10 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-11 23:10 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-11 23:10 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-11 23:10 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-11 23:10 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 23:10 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-11 23:10 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-11 18:46 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-11 18:46 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-11 18:46 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-11 18:46 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-11 18:46 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-11 18:46 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-11 18:46 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-11 18:46 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-11 18:46 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-11 18:46 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-11 18:46 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-11 18:46 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-11 18:46 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-11 18:46 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-11 18:46 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-11 18:46 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-11 18:46 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-11 18:46 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-11 18:46 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-11 18:46 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-11 18:46 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-11 18:46 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-11 18:46 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 18:46 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 18:46 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-11 18:46 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys 2013-10-11 18:46 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-11 18:46 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-11 18:46 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-11 18:46 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-11 18:46 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-11 18:46 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-11 18:46 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-11 18:46 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-11 18:46 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-11 18:46 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-11 18:46 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-11 18:46 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-11 18:46 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-11 18:46 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-11 18:46 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-11 18:46 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-11 18:46 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-11 18:46 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-11 18:46 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-11 18:46 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-07 08:53 - 2013-10-07 08:54 - 22131568 _____ (Mozilla) C:\Users\Shira\Downloads\Thunderbird_Setup_24.0.exe 2013-10-06 18:24 - 2013-10-07 10:20 - 00003420 _____ C:\Windows\System32\Tasks\BitGuard 2013-10-01 21:35 - 2013-10-01 21:35 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-10-01 06:44 - 2013-10-01 06:45 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Kalypso Media 2013-10-01 06:44 - 2013-10-01 06:44 - 00000000 ____D C:\ProgramData\Package Cache 2013-09-30 20:16 - 2013-09-30 20:16 - 00000222 _____ C:\Users\Shira\Desktop\Rise of Venice.url 2013-09-29 13:46 - 2013-09-29 13:46 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2013-09-29 06:14 - 2013-09-29 06:14 - 00035329 _____ C:\Users\Shira\Desktop\Fulgur.odt 2013-09-20 18:42 - 2013-09-20 18:42 - 00000222 _____ C:\Users\Shira\Desktop\Terraria.url 2013-09-17 19:27 - 2013-09-17 19:27 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Guild Wars 2 2013-09-16 21:13 - 2013-09-16 21:13 - 00000220 _____ C:\Users\Shira\Desktop\Sid Meier's Civilization V.url 2013-09-16 03:43 - 2013-09-18 06:04 - 00043493 _____ C:\Users\Shira\Desktop\Lost.odt ==================== One Month Modified Files and Folders ======= 2013-10-14 10:50 - 2013-10-14 10:50 - 00000472 _____ C:\Users\Shira\Downloads\defogger_disable.log 2013-10-14 10:50 - 2013-10-14 10:50 - 00000000 ____D C:\FRST 2013-10-14 10:50 - 2013-10-14 10:50 - 00000000 _____ C:\Users\Shira\defogger_reenable 2013-10-14 10:50 - 2013-05-03 18:36 - 00000000 ____D C:\Users\Shira 2013-10-14 10:49 - 2013-10-14 10:49 - 01954124 _____ (Farbar) C:\Users\Shira\Downloads\FRST64.exe 2013-10-14 10:49 - 2013-05-04 21:59 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Skype 2013-10-14 10:48 - 2013-05-03 19:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-14 10:46 - 2013-10-14 10:46 - 00050477 _____ C:\Users\Shira\Downloads\Defogger.exe 2013-10-14 10:30 - 2013-05-13 11:05 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-14 10:29 - 2009-07-14 06:45 - 00025376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-14 10:29 - 2009-07-14 06:45 - 00025376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-14 10:18 - 2013-10-14 08:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-10-14 10:18 - 2013-05-03 18:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-14 10:06 - 2013-05-03 18:33 - 01155257 _____ C:\Windows\WindowsUpdate.log 2013-10-14 07:56 - 2013-07-03 20:12 - 00000000 ____D C:\Program Files (x86)\Steam 2013-10-14 07:44 - 2013-05-04 21:31 - 00000000 ____D C:\Users\Shira\AppData\Local\Thunderbird 2013-10-14 07:13 - 2013-10-12 16:12 - 00000000 ____D C:\Users\Shira\AppData\Local\LogMeIn Hamachi 2013-10-14 07:13 - 2011-04-12 09:43 - 00697850 _____ C:\Windows\system32\perfh007.dat 2013-10-14 07:13 - 2011-04-12 09:43 - 00148644 _____ C:\Windows\system32\perfc007.dat 2013-10-14 07:13 - 2009-07-14 07:13 - 01616678 _____ C:\Windows\system32\PerfStringBackup.INI 2013-10-14 07:10 - 2013-05-13 11:05 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-10-14 07:10 - 2013-05-03 18:51 - 00000000 ___RD C:\Users\Shira\Dropbox 2013-10-14 07:10 - 2013-05-03 18:47 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Dropbox 2013-10-14 07:09 - 2013-04-29 09:32 - 00000000 ____D C:\ProgramData\NVIDIA 2013-10-14 07:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-14 07:09 - 2009-07-14 06:51 - 00072553 _____ C:\Windows\setupact.log 2013-10-13 16:40 - 2013-07-06 19:43 - 00000000 ____D C:\Users\Shira\AppData\Local\CrashDumps 2013-10-13 09:23 - 2013-10-13 09:13 - 214262072 _____ (COMODO) C:\Users\Shira\Downloads\cfw_installer.exe 2013-10-13 08:39 - 2013-10-13 08:38 - 00002144 _____ C:\Users\Shira\Desktop\TerrariaServer - Verknüpfung.lnk 2013-10-12 18:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-10-12 16:13 - 2013-10-12 16:13 - 00000000 ____D C:\Users\Shira\AppData\Local\LogMeIn 2013-10-12 16:13 - 2013-10-12 16:13 - 00000000 ____D C:\ProgramData\LogMeIn 2013-10-12 16:12 - 2013-10-12 16:12 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-10-12 16:11 - 2013-10-12 16:11 - 05849088 _____ C:\Users\Shira\Downloads\hamachi.msi 2013-10-12 15:32 - 2013-10-12 15:29 - 00000000 ____D C:\Users\Shira\AppData\Roaming\MoreTerra 2013-10-12 15:29 - 2013-10-12 15:29 - 00000000 ____D C:\Users\Shira\Downloads\MoreTerra1.11.3 2013-10-12 15:28 - 2013-10-12 15:28 - 00155472 _____ C:\Users\Shira\Downloads\MoreTerra1.11.3.zip 2013-10-12 15:25 - 2013-05-13 11:05 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-12 15:25 - 2013-05-13 11:05 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-12 06:06 - 2009-07-14 06:45 - 00294880 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-11 23:10 - 2013-06-26 07:34 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-11 23:10 - 2013-06-26 07:34 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-11 23:09 - 2013-04-29 09:24 - 01593636 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-10-07 10:37 - 2010-11-21 05:47 - 00024074 _____ C:\Windows\PFRO.log 2013-10-07 10:20 - 2013-10-06 18:24 - 00003420 _____ C:\Windows\System32\Tasks\BitGuard 2013-10-07 09:57 - 2013-05-13 11:05 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-10-07 09:57 - 2013-05-13 11:05 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-10-07 09:24 - 2013-07-03 20:27 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-10-07 08:55 - 2013-05-04 21:31 - 00002099 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-10-07 08:54 - 2013-10-07 08:53 - 22131568 _____ (Mozilla) C:\Users\Shira\Downloads\Thunderbird_Setup_24.0.exe 2013-10-02 09:13 - 2013-09-13 20:57 - 00000000 ____D C:\ProgramData\BitGuard 2013-10-01 21:35 - 2013-10-01 21:35 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-10-01 06:45 - 2013-10-01 06:44 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Kalypso Media 2013-10-01 06:44 - 2013-10-01 06:44 - 00000000 ____D C:\ProgramData\Package Cache 2013-10-01 06:44 - 2013-06-09 13:19 - 00000000 ____D C:\Users\Shira\Documents\My Games 2013-09-30 20:16 - 2013-09-30 20:16 - 00000222 _____ C:\Users\Shira\Desktop\Rise of Venice.url 2013-09-30 11:59 - 2013-05-03 19:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-09-30 11:59 - 2013-05-03 19:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-30 11:59 - 2013-05-03 19:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-09-29 13:46 - 2013-09-29 13:46 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2013-09-29 13:45 - 2013-05-05 14:19 - 00000000 ____D C:\Users\Shira\AppData\Roaming\TS3Client 2013-09-29 06:14 - 2013-09-29 06:14 - 00035329 _____ C:\Users\Shira\Desktop\Fulgur.odt 2013-09-23 01:28 - 2013-10-11 23:10 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-09-23 01:28 - 2013-10-11 23:10 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-09-23 01:27 - 2013-10-11 23:10 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-09-23 00:55 - 2013-10-11 23:10 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-23 00:55 - 2013-10-11 23:10 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-23 00:55 - 2013-10-11 23:10 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-23 00:54 - 2013-10-11 23:10 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-23 00:54 - 2013-10-11 23:10 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-21 05:38 - 2013-10-11 23:10 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-21 05:30 - 2013-10-11 23:10 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-09-21 04:48 - 2013-10-11 23:10 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-21 04:39 - 2013-10-11 23:10 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-09-20 18:42 - 2013-09-20 18:42 - 00000222 _____ C:\Users\Shira\Desktop\Terraria.url 2013-09-18 14:33 - 2013-05-03 19:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-09-18 14:33 - 2013-05-03 18:42 - 00000000 ____D C:\Users\Shira\AppData\Local\Mozilla 2013-09-18 06:04 - 2013-09-16 03:43 - 00043493 _____ C:\Users\Shira\Desktop\Lost.odt 2013-09-17 19:27 - 2013-09-17 19:27 - 00000000 ____D C:\Users\Shira\AppData\Roaming\Guild Wars 2 2013-09-17 19:27 - 2013-05-04 23:01 - 00000000 ____D C:\Users\Shira\Documents\Guild Wars 2 2013-09-17 01:33 - 2013-06-09 13:19 - 00000000 ____D C:\Users\Shira\AppData\Local\My Games 2013-09-17 01:32 - 2013-04-23 10:05 - 00586982 _____ C:\Windows\DirectX.log 2013-09-16 21:13 - 2013-09-16 21:13 - 00000220 _____ C:\Users\Shira\Desktop\Sid Meier's Civilization V.url 2013-09-16 11:12 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-09-15 13:19 - 2013-05-05 15:36 - 00000000 ____D C:\Users\Shira\dwhelper 2013-09-14 03:10 - 2013-10-11 18:46 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys Some content of TEMP: ==================== C:\Users\Shira\AppData\Local\Temp\drm_dyndata_7370014.dll C:\Users\Shira\AppData\Local\Temp\DSETUP.dll C:\Users\Shira\AppData\Local\Temp\dsetup32.dll C:\Users\Shira\AppData\Local\Temp\DXSETUP.exe C:\Users\Shira\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Shira\AppData\Local\Temp\Gw2.exe C:\Users\Shira\AppData\Local\Temp\IXP000.TMPFirefox_Setup_18.0.2.exe C:\Users\Shira\AppData\Local\Temp\SkypeSetup.exe C:\Users\Shira\AppData\Local\Temp\_is4D27.exe C:\Users\Shira\AppData\Local\Temp\_isB09E.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-11 19:00 ==================== End Of Log ============================ Und hier die "Addition" Datei: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013 Ran by Shira at 2013-10-14 10:51:16 Running from C:\Users\Shira\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C} AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== [translation missing: EVERemoveOnly] (x32) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Aeria Ignite (x32 Version: 1.13.3296) Akamai NetSession Interface (HKCU) avast! Free Antivirus (x32 Version: 8.0.1497.0) Bing Bar (x32 Version: 7.1.362.0) BitGuard (x32) Brother MFL-Pro Suite MFC-6490CW (x32 Version: 1.0.1.0) Canon Utilities ImageBrowser EX (x32 Version: 1.2.1.13) D3DX10 (x32 Version: 15.4.2368.0902) Delta Chrome Toolbar (x32) Delta toolbar (x32 Version: 1.8.16.16) Divinity: Dragon Commander (x32) Dropbox (HKCU Version: 2.0.22) EdenEternal-DE (x32) EVEMon (x32 Version: 1.8.1.4016) Evoluent Mouse Manager (Version: 3.9.1) Fotogalerie (x32 Version: 16.4.3503.0728) Galería de fotos (x32 Version: 16.4.3503.0728) Galeria fotografii (x32 Version: 16.4.3503.0728) Galerie de photos (x32 Version: 16.4.3503.0728) Google Chrome (x32 Version: 30.0.1599.69) Google Update Helper (x32 Version: 1.3.21.165) Guild Wars 2 (x32) Intel(R) Management Engine Components (x32 Version: 8.1.0.1252) Intel(R) Rapid Storage Technology (Version: 12.5.0.1066) Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.6.245) Intel® Trusted Connect Service Client (Version: 1.24.388.1) Junk Mail filter update (x32 Version: 16.4.3503.0728) LogMeIn Hamachi (x32 Version: 2.2.0.58) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office (x32 Version: 15.0.4454.1510) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106) Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0) Movie Maker (x32 Version: 16.4.3503.0728) MozBackup 1.5.1 (x32) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.0.1) Mozilla Thunderbird 24.0.1 (x86 en-US) (x32 Version: 24.0.1) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1108.0727) Mumble 1.2.4 (x32 Version: 1.2.4) NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22) NVIDIA 3D Vision Treiber 314.22 (Version: 314.22) NVIDIA Grafiktreiber 314.22 (Version: 314.22) NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1) NVIDIA Install Application (Version: 2.1002.115.743) NVIDIA PhysX (x32 Version: 9.12.1031) NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422) NVIDIA Systemsteuerung 314.22 (Version: 314.22) NVIDIA Update 1.12.12 (Version: 1.12.12) NVIDIA Update Components (Version: 1.12.12) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Opera 12.16 (x32 Version: 12.16.1860) Photo Common (x32 Version: 16.4.3503.0728) Photo Gallery (x32 Version: 16.4.3503.0728) Poczta usługi Windows Live (x32 Version: 16.4.3503.0728) Podstawowe programy Windows Live (x32 Version: 16.4.3503.0728) Raccolta foto (x32 Version: 16.4.3503.0728) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662) RifE 1.4 (x32) Rise of Venice (x32) Sid Meier's Civilization 4 - Beyond the Sword (x32 Version: 3.19) Sid Meier's Civilization 4 (x32 Version: 1.00.0000) Sid Meier's Civilization 4 (x32 Version: 1.74) Sid Meier's Civilization IV Colonization (x32 Version: 1.01) Sid Meier's Civilization V (x32) Skype™ 6.6 (x32 Version: 6.6.106) Steam (x32 Version: 1.0.0.0) TeamSpeak 3 Client (Version: 3.0.12) TeamViewer 8 (x32 Version: 8.0.19617) Terraria (x32) Torchlight 2 (x32 Version: 1.1.1.1) Unity Web Player (HKCU Version: ) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3) Windows Live Communications Platform (x32 Version: 16.4.3503.0728) Windows Live Essentials (x32 Version: 16.4.3503.0728) Windows Live Family Safety (Version: 16.4.3503.0728) Windows Live Family Safety (x32 Version: 16.4.3503.0728) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3503.0728) Windows Live Mail (x32 Version: 16.4.3503.0728) Windows Live Messenger (x32 Version: 16.4.3503.0728) Windows Live MIME IFilter (Version: 16.4.3503.0728) Windows Live Photo Common (x32 Version: 16.4.3503.0728) Windows Live PIMT Platform (x32 Version: 16.4.3503.0728) Windows Live SOXE (x32 Version: 16.4.3503.0728) Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728) Windows Live UX Platform (x32 Version: 16.4.3503.0728) Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728) Windows Live Writer (x32 Version: 16.4.3503.0728) Windows Live Writer Resources (x32 Version: 16.4.3503.0728) ==================== Restore Points ========================= 24-09-2013 15:18:07 Windows Update 27-09-2013 16:56:17 Windows Update 29-09-2013 11:46:00 Installed Microsoft XNA Framework Redistributable 4.0 01-10-2013 04:44:42 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 01-10-2013 04:44:52 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 02-10-2013 07:16:13 Windows Update 06-10-2013 16:28:52 Windows Update 11-10-2013 16:46:34 Windows Update 11-10-2013 21:07:18 Windows Update 12-10-2013 14:12:01 Installed LogMeIn Hamachi ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1472F326-85A2-4AE9-93F8-C9E6C718982F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-30] (Adobe Systems Incorporated) Task: {16A7F48F-2BD4-4D22-8CE0-CF12BB04F24C} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation) Task: {1F851BBD-CB9C-47AC-AACD-C5F77C76388C} - System32\Tasks\BitGuard => Sc.exe start BitGuard Task: {20BCD378-150E-4647-8B47-CA6A1625E4EC} - System32\Tasks\EPUpdater => C:\Users\Shira\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () Task: {5F1F9E8A-228B-4FDE-AB3D-107566082A73} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-13] (Google Inc.) Task: {8F0B56CC-757E-407F-B260-F014F0843B96} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-30] (AVAST Software) Task: {C194EDCC-E0D7-4FE9-A02C-78C483D15371} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-13] (Google Inc.) Task: {D5B277D5-E183-4ED6-9BEB-6DFC8EBFBD5B} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-13 20:27 - 2013-10-13 16:24 - 02105856 _____ () C:\Program Files\AVAST Software\Avast\defs\13101300\algo.dll 2013-07-13 14:49 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2013-06-25 16:51 - 2013-01-29 19:45 - 00112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll 2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Shira\AppData\Roaming\Dropbox\bin\libcef.dll 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2013-04-29 09:34 - 2012-06-25 11:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2013-05-03 19:31 - 2013-09-18 14:33 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-18 13:05 - 2013-09-18 13:05 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00835584 _____ () C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00093696 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00094208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00057344 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00096256 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00062976 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00067072 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00158208 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00312832 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00038912 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00073728 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll 2013-05-03 22:17 - 2013-07-08 07:03 - 00101888 _____ () C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll 2013-05-06 17:05 - 2013-08-22 00:18 - 00687104 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2013-06-06 14:06 - 2013-10-09 04:19 - 01121704 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2013-03-26 16:16 - 2013-09-11 00:20 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2012-12-11 09:51 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll 2012-12-11 09:51 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll 2012-12-11 09:51 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData:gs5sys AlternateDataStreams: C:\Users\All Users:gs5sys AlternateDataStreams: C:\Users\Shira:gs5sys AlternateDataStreams: C:\ProgramData\Anwendungsdaten:gs5sys AlternateDataStreams: C:\ProgramData\Application Data:gs5sys AlternateDataStreams: C:\ProgramData\Templates:gs5sys AlternateDataStreams: C:\ProgramData\Vorlagen:gs5sys AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys AlternateDataStreams: C:\Users\Shira\Anwendungsdaten:gs5sys AlternateDataStreams: C:\Users\Shira\Cookies:gs5sys AlternateDataStreams: C:\Users\Shira\Lokale Einstellungen:gs5sys AlternateDataStreams: C:\Users\Shira\Vorlagen:gs5sys AlternateDataStreams: C:\Users\Shira\Desktop\desktop.ini:gs5sys AlternateDataStreams: C:\Users\Shira\AppData\Local:gs5sys AlternateDataStreams: C:\Users\Shira\AppData\Roaming:gs5sys AlternateDataStreams: C:\Users\Shira\AppData\Local\Anwendungsdaten:gs5sys AlternateDataStreams: C:\Users\Shira\AppData\Local\Verlauf:gs5sys AlternateDataStreams: C:\Users\Shira\Documents\desktop.ini:gs5sys ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Faulty Device Manager Devices ============= Name: Hamachi Network Interface Description: Hamachi Network Interface Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: LogMeIn, Inc. Service: hamachi Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (10/14/2013 07:11:05 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/13/2013 04:39:46 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: AppData.exe, Version: 3.0.0.0, Zeitstempel: 0x5201ff47 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000c41f ID des fehlerhaften Prozesses: 0x1410 Startzeit der fehlerhaften Anwendung: 0xAppData.exe0 Pfad der fehlerhaften Anwendung: AppData.exe1 Pfad des fehlerhaften Moduls: AppData.exe2 Berichtskennung: AppData.exe3 Error: (10/13/2013 04:39:46 PM) (Source: .NET Runtime) (User: ) Description: Anwendung: AppData.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Net.WebException Stapel: bei System.Net.HttpWebRequest.EndGetResponse(System.IAsyncResult) bei Com.Realmforgestudios.Styx.Api.EndApiRequest(System.IAsyncResult) bei System.Net.LazyAsyncResult.Complete(IntPtr) bei System.Net.ContextAwareResult.CaptureOrComplete(System.Threading.ExecutionContext ByRef, Boolean) bei System.Net.ContextAwareResult.FinishPostingAsyncOp() bei System.Net.HttpWebRequest.BeginGetResponse(System.AsyncCallback, System.Object) bei Com.Realmforgestudios.Styx.Api.AsynchApiRequest(Parameters, RequestCallback) bei Com.Realmforgestudios.Styx.Ui.Standard.LoginInputEx.ClickContinue(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean) bei System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs) bei System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs) bei System.Windows.Controls.Primitives.ButtonBase.OnClick() bei System.Windows.Controls.Button.OnClick() bei System.Windows.Controls.Primitives.ButtonBase.OnMouseLeftButtonUp(System.Windows.Input.MouseButtonEventArgs) bei System.Windows.UIElement.OnMouseLeftButtonUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs) bei System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean) bei System.Windows.UIElement.ReRaiseEventAs(System.Windows.DependencyObject, System.Windows.RoutedEventArgs, System.Windows.RoutedEvent) bei System.Windows.UIElement.OnMouseUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs) bei System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean) bei System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs) bei System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs) bei System.Windows.Input.InputManager.ProcessStagingArea() bei System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs) bei System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport) bei System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32) bei System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef) bei System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object) bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.Dispatcher.WrappedInvoke(System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.Dispatcher.InvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32) bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr) bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef) bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame) bei System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame) bei System.Windows.Application.RunDispatcher(System.Object) bei System.Windows.Application.RunInternal(System.Windows.Window) bei System.Windows.Application.Run(System.Windows.Window) bei Com.Realmforgestudios.Styx.AppSimple.MainSta() bei Com.Realmforgestudios.Styx.AppSimple.MainStaWrap() bei System.Threading.ThreadHelper.ThreadStart_Context(System.Object) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) bei System.Threading.ThreadHelper.ThreadStart() Error: (10/13/2013 08:27:50 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/12/2013 03:01:47 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/12/2013 06:08:48 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/11/2013 06:39:46 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/09/2013 05:34:38 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/08/2013 08:25:14 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/07/2013 02:02:42 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (10/14/2013 07:09:12 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/14/2013 07:09:12 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (10/13/2013 08:25:57 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/13/2013 08:25:57 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (10/12/2013 04:12:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/12/2013 04:12:17 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (10/12/2013 04:12:16 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/12/2013 04:12:16 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (10/12/2013 04:12:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/12/2013 04:12:15 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Microsoft Office Sessions: ========================= Error: (10/14/2013 07:11:05 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/13/2013 04:39:46 PM) (Source: Application Error)(User: ) Description: AppData.exe3.0.0.05201ff47KERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f141001cec821fa9f0becC:\Program Files (x86)\Steam\steamapps\common\Rise of Venice\AppData.exeC:\Windows\syswow64\KERNELBASE.dll4dde3658-3415-11e3-9dcd-d43d7e4e7531 Error: (10/13/2013 04:39:46 PM) (Source: .NET Runtime)(User: ) Description: Anwendung: AppData.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Net.WebException Stapel: bei System.Net.HttpWebRequest.EndGetResponse(System.IAsyncResult) bei Com.Realmforgestudios.Styx.Api.EndApiRequest(System.IAsyncResult) bei System.Net.LazyAsyncResult.Complete(IntPtr) bei System.Net.ContextAwareResult.CaptureOrComplete(System.Threading.ExecutionContext ByRef, Boolean) bei System.Net.ContextAwareResult.FinishPostingAsyncOp() bei System.Net.HttpWebRequest.BeginGetResponse(System.AsyncCallback, System.Object) bei Com.Realmforgestudios.Styx.Api.AsynchApiRequest(Parameters, RequestCallback) bei Com.Realmforgestudios.Styx.Ui.Standard.LoginInputEx.ClickContinue(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean) bei System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs) bei System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs) bei System.Windows.Controls.Primitives.ButtonBase.OnClick() bei System.Windows.Controls.Button.OnClick() bei System.Windows.Controls.Primitives.ButtonBase.OnMouseLeftButtonUp(System.Windows.Input.MouseButtonEventArgs) bei System.Windows.UIElement.OnMouseLeftButtonUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs) bei System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean) bei System.Windows.UIElement.ReRaiseEventAs(System.Windows.DependencyObject, System.Windows.RoutedEventArgs, System.Windows.RoutedEvent) bei System.Windows.UIElement.OnMouseUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs) bei System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object) bei System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs) bei System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean) bei System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs) bei System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs) bei System.Windows.Input.InputManager.ProcessStagingArea() bei System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs) bei System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport) bei System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32) bei System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef) bei System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object) bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.Dispatcher.WrappedInvoke(System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.Dispatcher.InvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32) bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr) bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef) bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame) bei System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame) bei System.Windows.Application.RunDispatcher(System.Object) bei System.Windows.Application.RunInternal(System.Windows.Window) bei System.Windows.Application.Run(System.Windows.Window) bei Com.Realmforgestudios.Styx.AppSimple.MainSta() bei Com.Realmforgestudios.Styx.AppSimple.MainStaWrap() bei System.Threading.ThreadHelper.ThreadStart_Context(System.Object) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) bei System.Threading.ThreadHelper.ThreadStart() Error: (10/13/2013 08:27:50 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/12/2013 03:01:47 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/12/2013 06:08:48 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/11/2013 06:39:46 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/09/2013 05:34:38 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/08/2013 08:25:14 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/07/2013 02:02:42 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Percentage of memory in use: 29% Total physical RAM: 16335.47 MB Available physical RAM: 11550.36 MB Total Pagefile: 32669.12 MB Available Pagefile: 27431.86 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: (Win7HPx64) (Fixed) (Total:238.47 GB) (Free:102.86 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (COLONIZATION) (CDROM) (Total:0.78 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238 GB) (Disk ID: B025F296) Partition 1: (Active) - (Size=238 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Grüße aus dem Schwarzwald (wieder ohne Schnee) Maddin |