![]() |
|
Log-Analyse und Auswertung: Sicherheitsscans nach Fund von VBS:FlufferMiner-D [TRJ] mit AvastWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Sicherheitsscans nach Fund von VBS:FlufferMiner-D [TRJ] mit Avast Hallo zusammen, nachdem ich den VBS:FlufferMiner-D [TRJ] entfernt hatte (hoffe ich zumindest) Sind bei mir alle Alarmglocken losgegangen und habe erst mal einen Komplettscan (Startzeitüberprüfung) mit AVAST gemacht und nichts mehr gefunden. Aber irgendwo in mir bohrt es halt doch ob da nicht mehr ist ?? Vor allem stört mich beim herunterfahren das immer ein Fenster erscheint das Programme vor dem Herunterfahren beenden will, aber das Fenster zeigt keine Datei an. So habe daher jetzt die Anleitung für Hilfesuchende bei Trojaner- und Virenbefall durchgelesen und einige Log Dateien erstellt. Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 16:12 on 20/11/2013 (Peter) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-11-2013 Ran by Peter (administrator) on POWER_PC on 20-11-2013 16:15:47 Running from C:\Users\Peter\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Valve Corporation) D:\Games\Steam\Steam.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-06-24] (Logitech, Inc.) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor) Winlogon\Notify\LBTWlgn: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) HKCU\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation) HKCU\...\Run: [TBHostSupport] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Peter\AppData\Local\TBHostSupport\TBHostSupport.dll",DLLRunTBHostSupportPlugin <===== ATTENTION MountPoints2: {d99c3602-a897-11e0-9b02-806e6f6e6963} - E:\Run.exe HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-24] (AVAST Software) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5F3CA18DA73CCC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de URLSearchHook: HKCU - (No Name) - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - No File SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = SearchScopes: HKCU - DefaultScope {A3F87675-CBDB-4C80-B18A-1FCB69EE9DF9} URL = hxxp://www.google.de/search?q={searchTerms} SearchScopes: HKCU - {A3F87675-CBDB-4C80-B18A-1FCB69EE9DF9} URL = hxxp://www.google.de/search?q={searchTerms} SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = SearchScopes: HKCU - {C706A3FF-153B-4A3D-A71A-9C2B9E96EA56} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3297265&CUI=UN37715181559422721&UM=2 BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default FF user.js: detected! => C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\user.js FF Homepage: hxxp://www.google.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll No File FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @octoshape.com/Octoshape Streaming Services,version=1.0 - C:\Users\Peter\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1103234-0-npoctoshape.dll (Octoshape ApS) FF SearchPlugin: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\searchplugins\conduit.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Deutsches Wörterbuch - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\de-DE@dictionaries.addons.mozilla.org FF Extension: British English Dictionary - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\en-GB@dictionaries.addons.mozilla.org FF Extension: FoxyProxy Basic - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\foxyproxy@eric.h.jung FF Extension: Move Media Player - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\moveplayer@movenetworks.com FF Extension: No Name - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\temp FF Extension: Microsoft .NET Framework Assistant - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} FF Extension: Google Toolbar for Firefox - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} FF Extension: DivX Browser Bar DE - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1} FF Extension: compatibility - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\compatibility@addons.mozilla.org.xpi FF Extension: No Name - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\Extensions.rdf FF Extension: No Name - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\installed-extensions.txt FF Extension: itrans - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\itrans@tenshi.xpi FF Extension: searcher - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\searcher@web.com.xpi FF Extension: flashgot - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi FF Extension: Adblock Plus - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: dta - C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\ptewrgb4.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (DivX Browser Bar DE) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkoahcaobjbihehldfimhblmhgalcipm\10.22.3.518_0 CHR Extension: (Google Wallet) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0 CHR Extension: (Gmail) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [hkoahcaobjbihehldfimhblmhgalcipm] - C:\Users\Peter\AppData\Local\CRE\hkoahcaobjbihehldfimhblmhgalcipm.crx CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-24] (AVAST Software) S4 CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [85104 2012-09-18] () S4 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [78352 2012-09-19] (CyberLink) S4 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [295440 2012-09-19] (CyberLink) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [66872 2011-08-08] () S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-07-02] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-24] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-24] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-24] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-24] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-24] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-24] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-24] () R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [146928 2012-09-19] (CyberLink Corp.) S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x] S3 gdrv; \??\C:\Windows\gdrv.sys [x] S3 MSICDSetup; \??\E:\CDriver64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-20 16:15 - 2013-11-20 16:16 - 00016441 _____ C:\Users\Peter\Desktop\FRST.txt 2013-11-20 16:15 - 2013-11-20 16:15 - 00000000 ____D C:\FRST 2013-11-20 16:14 - 2013-11-20 16:14 - 01957964 _____ (Farbar) C:\Users\Peter\Desktop\FRST64.exe 2013-11-20 16:12 - 2013-11-20 16:12 - 00000472 _____ C:\Users\Peter\Desktop\defogger_disable.log 2013-11-20 16:12 - 2013-11-20 16:12 - 00000000 _____ C:\Users\Peter\defogger_reenable 2013-11-20 16:11 - 2013-11-20 16:11 - 00050477 _____ C:\Users\Peter\Desktop\Defogger.exe 2013-11-20 00:45 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-20 00:42 - 2013-11-20 00:42 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-20 00:42 - 2013-11-20 00:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-20 00:42 - 2013-11-20 00:42 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-20 00:42 - 2013-11-20 00:42 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-20 00:42 - 2013-11-20 00:42 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-20 00:42 - 2013-11-20 00:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-20 00:42 - 2013-11-20 00:42 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-20 00:42 - 2013-11-20 00:42 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-20 00:42 - 2013-11-20 00:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-20 00:42 - 2013-11-20 00:42 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-20 00:42 - 2013-11-20 00:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-20 00:40 - 2013-11-20 00:45 - 00010277 _____ C:\Windows\IE11_main.log 2013-11-19 23:09 - 2013-11-19 23:09 - 00000000 ____D C:\Users\Peter\AppData\Local\WhiteListing 2013-11-19 23:09 - 2013-11-19 23:09 - 00000000 ____D C:\Users\Peter\AppData\Local\TBHostSupport 2013-11-19 23:09 - 2013-11-19 23:09 - 00000000 ____D C:\Users\Peter\AppData\Local\NativeMessaging 2013-11-18 15:55 - 2013-11-18 15:55 - 00002088 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-11-17 00:11 - 2013-11-20 15:53 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-11-17 00:11 - 2013-11-17 00:11 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2013-11-14 16:55 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 16:55 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 16:55 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 16:55 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 16:55 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 16:55 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 16:55 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 16:55 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 16:55 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 16:55 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 16:55 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 16:55 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 16:55 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 16:55 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 16:55 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 16:55 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 16:55 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 16:55 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 16:55 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 16:55 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 16:55 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 16:55 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 16:55 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 16:55 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 16:55 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 16:55 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 16:55 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 16:55 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 16:55 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 16:55 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-12 00:05 - 2013-11-11 23:16 - 00002509 _____ C:\Users\Peter\Desktop\Eterium Demo.lnk 2013-11-11 23:56 - 2013-11-19 20:21 - 00001068 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-11 23:18 - 2013-11-11 23:18 - 00000000 ____D C:\Users\Peter\Documents\SavedGames 2013-11-11 23:15 - 2013-11-11 23:15 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2013-11-11 23:15 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2013-11-11 23:15 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2013-11-11 23:15 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2013-11-11 23:15 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2013-11-11 23:15 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2013-11-11 23:15 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2013-11-11 23:15 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2013-11-01 17:23 - 2013-11-01 17:26 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-11-01 17:23 - 2013-11-01 17:23 - 00001381 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2013-11-01 17:23 - 2013-11-01 17:23 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-11-01 17:23 - 2013-11-01 17:23 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-11-01 17:23 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2013-10-30 18:09 - 2013-10-30 18:09 - 00000968 _____ C:\Users\Peter\Desktop\Lancair Legacy Config.lnk 2013-10-30 18:09 - 2013-10-30 18:09 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RealAir Simulations 2013-10-30 18:01 - 2013-10-30 18:01 - 00001095 _____ C:\Users\Peter\Desktop\Realair Legacy.txt 2013-10-24 17:05 - 2013-10-24 17:05 - 00000000 ____D C:\Users\Peter\AppData\Roaming\AVAST Software 2013-10-23 16:48 - 2013-10-23 16:48 - 00004278 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-23 16:48 - 2013-10-08 06:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-23 16:48 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-23 16:48 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-23 16:48 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-10-21 22:11 - 2013-10-21 22:48 - 00000000 ____D C:\Users\Peter\AppData\Local\Arma 3 2013-10-21 22:11 - 2013-10-21 22:11 - 00000000 ____D C:\Users\Peter\Documents\Arma 3 ==================== One Month Modified Files and Folders ======= 2013-11-20 16:16 - 2013-11-20 16:15 - 00016441 _____ C:\Users\Peter\Desktop\FRST.txt 2013-11-20 16:15 - 2013-11-20 16:15 - 00000000 ____D C:\FRST 2013-11-20 16:14 - 2013-11-20 16:14 - 01957964 _____ (Farbar) C:\Users\Peter\Desktop\FRST64.exe 2013-11-20 16:12 - 2013-11-20 16:12 - 00000472 _____ C:\Users\Peter\Desktop\defogger_disable.log 2013-11-20 16:12 - 2013-11-20 16:12 - 00000000 _____ C:\Users\Peter\defogger_reenable 2013-11-20 16:12 - 2011-07-07 13:57 - 00000000 ____D C:\Users\Peter 2013-11-20 16:11 - 2013-11-20 16:11 - 00050477 _____ C:\Users\Peter\Desktop\Defogger.exe 2013-11-20 16:01 - 2013-06-08 23:01 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7F74C696-10E9-4BE3-99E0-AAEFBE6834A5} 2013-11-20 15:53 - 2013-11-17 00:11 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-11-20 15:46 - 2009-07-14 05:45 - 00014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-20 15:46 - 2009-07-14 05:45 - 00014816 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-20 15:43 - 2011-07-07 13:54 - 01509751 _____ C:\Windows\WindowsUpdate.log 2013-11-20 15:39 - 2013-05-06 14:48 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-11-20 15:38 - 2013-05-06 14:48 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-20 15:38 - 2013-03-17 22:48 - 00019040 _____ C:\Windows\setupact.log 2013-11-20 15:38 - 2011-07-07 14:14 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-20 15:38 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-20 00:47 - 2011-07-07 13:58 - 00001423 _____ C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-20 00:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-20 00:45 - 2013-11-20 00:40 - 00010277 _____ C:\Windows\IE11_main.log 2013-11-20 00:42 - 2013-11-20 00:42 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-20 00:42 - 2013-11-20 00:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-20 00:42 - 2013-11-20 00:42 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-20 00:42 - 2013-11-20 00:42 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-20 00:42 - 2013-11-20 00:42 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-20 00:42 - 2013-11-20 00:42 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-20 00:42 - 2013-11-20 00:42 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-20 00:42 - 2013-11-20 00:42 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-20 00:42 - 2013-11-20 00:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-20 00:42 - 2013-11-20 00:42 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-20 00:42 - 2013-11-20 00:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-20 00:42 - 2013-11-20 00:42 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-20 00:42 - 2013-11-20 00:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-20 00:33 - 2011-07-13 15:19 - 00000000 ____D C:\Users\Peter\AppData\Local\Thunderbird 2013-11-20 00:19 - 2013-05-06 14:48 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-20 00:19 - 2012-04-08 17:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-19 23:09 - 2013-11-19 23:09 - 00000000 ____D C:\Users\Peter\AppData\Local\WhiteListing 2013-11-19 23:09 - 2013-11-19 23:09 - 00000000 ____D C:\Users\Peter\AppData\Local\TBHostSupport 2013-11-19 23:09 - 2013-11-19 23:09 - 00000000 ____D C:\Users\Peter\AppData\Local\NativeMessaging 2013-11-19 22:13 - 2013-10-14 14:59 - 00000000 ____D C:\Users\Peter\AppData\Roaming\vlc 2013-11-19 20:28 - 2011-08-01 00:21 - 00000000 ____D C:\Users\Peter\AppData\Roaming\TS3Client 2013-11-19 20:21 - 2013-11-11 23:56 - 00001068 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-19 16:40 - 2013-05-07 17:28 - 00028008 _____ C:\Windows\PFRO.log 2013-11-19 16:40 - 2012-04-25 17:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-18 23:15 - 2012-03-25 19:02 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Skype 2013-11-18 15:55 - 2013-11-18 15:55 - 00002088 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2013-11-18 15:55 - 2013-08-08 20:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-11-18 15:40 - 2011-07-13 15:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-17 23:32 - 2012-12-07 17:08 - 00000000 ____D C:\Users\Peter\Documents\Plan-G Files 2013-11-17 23:31 - 2012-09-19 14:57 - 00000000 ____D C:\Users\Peter\Documents\Flight Simulator X-Dateien 2013-11-17 00:19 - 2013-02-15 20:11 - 00000000 ____D C:\Users\Peter\AppData\Local\Deployment 2013-11-17 00:17 - 2011-07-13 16:08 - 00000000 ____D C:\Users\Peter\AppData\Local\Conduit 2013-11-17 00:11 - 2013-11-17 00:11 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2013-11-16 19:51 - 2013-02-02 15:24 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-16 19:51 - 2012-03-25 19:02 - 00000000 ____D C:\ProgramData\Skype 2013-11-16 01:26 - 2013-05-06 14:51 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-11-15 19:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-15 15:03 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-11-14 22:13 - 2013-08-15 00:41 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 22:12 - 2011-07-07 14:48 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-14 20:06 - 2013-07-29 23:23 - 00000849 _____ C:\Users\Peter\Desktop\FTX Central.lnk 2013-11-14 20:06 - 2012-12-19 13:24 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orbx 2013-11-11 23:18 - 2013-11-11 23:18 - 00000000 ____D C:\Users\Peter\Documents\SavedGames 2013-11-11 23:16 - 2013-11-12 00:05 - 00002509 _____ C:\Users\Peter\Desktop\Eterium Demo.lnk 2013-11-11 23:15 - 2013-11-11 23:15 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA 2013-11-10 15:11 - 2009-07-14 18:58 - 00707462 _____ C:\Windows\system32\perfh007.dat 2013-11-10 15:11 - 2009-07-14 18:58 - 00153054 _____ C:\Windows\system32\perfc007.dat 2013-11-10 15:11 - 2009-07-14 06:13 - 01642812 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-08 16:57 - 2013-05-06 14:48 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2013-11-05 20:36 - 2012-12-26 20:45 - 00000000 ____D C:\Program Files (x86)\FSrealWX 2013-11-03 18:15 - 2012-07-22 17:32 - 00000000 ____D C:\Users\Peter\AppData\Local\Paint.NET 2013-11-01 17:26 - 2013-11-01 17:23 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2013-11-01 17:23 - 2013-11-01 17:23 - 00001381 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2013-11-01 17:23 - 2013-11-01 17:23 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2013-11-01 17:23 - 2013-11-01 17:23 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2013-10-30 18:09 - 2013-10-30 18:09 - 00000968 _____ C:\Users\Peter\Desktop\Lancair Legacy Config.lnk 2013-10-30 18:09 - 2013-10-30 18:09 - 00000000 ____D C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RealAir Simulations 2013-10-30 18:01 - 2013-10-30 18:01 - 00001095 _____ C:\Users\Peter\Desktop\Realair Legacy.txt 2013-10-28 16:15 - 2011-07-13 15:27 - 00000000 ____D C:\Users\Peter\AppData\Local\Google 2013-10-24 17:05 - 2013-10-24 17:05 - 00000000 ____D C:\Users\Peter\AppData\Roaming\AVAST Software 2013-10-24 17:02 - 2013-05-06 14:48 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-10-24 17:02 - 2013-05-06 14:48 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-10-24 17:02 - 2013-05-06 14:48 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-10-24 17:02 - 2013-05-06 14:48 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-10-24 17:02 - 2013-05-06 14:48 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-10-24 17:02 - 2013-05-06 14:48 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-10-24 17:02 - 2013-05-06 14:48 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-10-24 17:02 - 2013-05-06 14:48 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-10-24 17:02 - 2013-05-06 14:48 - 00001968 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-10-24 17:02 - 2013-05-06 14:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-10-24 16:58 - 2013-05-06 14:47 - 00000000 ____D C:\ProgramData\AVAST Software 2013-10-24 16:57 - 2013-05-06 14:48 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-10-23 20:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-10-23 16:48 - 2013-10-23 16:48 - 00004278 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-23 16:48 - 2013-10-01 16:17 - 00000000 ____D C:\ProgramData\Oracle 2013-10-23 16:48 - 2013-10-01 16:17 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-21 22:48 - 2013-10-21 22:11 - 00000000 ____D C:\Users\Peter\AppData\Local\Arma 3 2013-10-21 22:11 - 2013-10-21 22:11 - 00000000 ____D C:\Users\Peter\Documents\Arma 3 2013-10-21 22:11 - 2013-04-18 22:37 - 00000000 ____D C:\ProgramData\Bohemia Interactive Files to move or delete: ==================== C:\Users\Peter\FSDreamTeam_GSX.reg Some content of TEMP: ==================== C:\Users\Peter\AppData\Local\Temp\vlc-2.1.1-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 15:44 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-11-2013 Ran by Peter at 2013-11-20 16:16:31 Running from C:\Users\Peter\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== 3DMark 11 (x32 Version: 1.0.2) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8) Aerosoft's - Discus Glider X (x32 Version: 1.60) AI Carriers (x32) Arma 3 Alpha (x32) avast! Free Antivirus (x32 Version: 9.0.2006) Babylon Five Star Fury Pilot Missions v2.0 (x32) C337H SKYMASTER HD SERIES FSX/P3D (x32 Version: 1.00.00.00) CCleaner (Version: 3.09) Crysis(R) (x32 Version: 1.21.0000) CyberLink BD Advisor 2.0 (x32) CyberLink Blu-ray Disc Suite (x32 Version: 6.0.3226) CyberLink LabelPrint (x32 Version: 2.5.1916) CyberLink LG Burning Tool (x32 Version: 6.2.3714) CyberLink MediaShow (x32 Version: 4.1.3402) CyberLink PowerDVD 11 (x32 Version: 11.0.3318.57) CyberLink PowerProducer (x32 Version: 5.0.1.1520) Der Herr der Ringe Online v03.06.00.8025 (x32 Version: 03.06.00.8025) Diablo III (x32 Version: 1.0.4.11327) Diaspora version 1.0.1 (x32 Version: 1.0.1) DivX-Setup (x32 Version: 2.6.1.44) eReg (x32 Version: 1.20.138.34) Eterium Demo (x32 Version: 1.0.0.0) Etron USB3.0 Host Controller (x32 Version: 0.115) EVE Online (remove only) (x32) Fiesta Online(EU_German) 1.04.000 (x32 Version: 1.04.000) Flight Simulator X Service Pack 1 (x32) Fraps (x32) FSC (x32 Version: 9.2) FSDreamTeam GSX 1.7.7 (x32) FSrealWX lite version 1.07.1522 (x32 Version: 1.06.1475) FTX Global ON Iceland Demo (x32 Version: 1.00) Funkspiel FS-Piloten (x32) Futuremark SystemInfo (x32 Version: 4.1.0) Google Chrome (x32 Version: 31.0.1650.57) Google Earth (x32 Version: 5.2.1.1588) Google Update Helper (x32 Version: 1.3.21.165) Grand Canyon & KGCN V2 (x32) Guild Wars 2 (x32) Helipack X v2 (x32) Intel(R) Management Engine Components (x32 Version: 7.0.0.1118) IrfanView (remove only) (x32 Version: 4.35) Java 7 Update 25 (64-bit) (Version: 7.0.250) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) JDownloader 0.9 (x32 Version: 0.9) LightScribe System Software (x32 Version: 1.18.14.1) Logitech SetPoint 6.30 (Version: 6.30.43) MeatWater FO Altitude Callouts v1.0 (x32) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322) Microsoft .NET Framework 1.1 (x32) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2) Microsoft Flight Simulator X (x32 Version: 10.0.60905) Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0) Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1) Mozilla Maintenance Service (x32 Version: 24.1.0) Mozilla Thunderbird 24.1.0 (x86 de) (x32 Version: 24.1.0) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0) Mumble 1.2.3 (x32 Version: 1.2.3) Need For Speed™ World (x32 Version: 1.0.0.482) Nemeth Designs Eurocopter EC-135 for Microsoft Flight Simulator X (x32) NVIDIA 3D Vision Controller Driver (x32 Version: 275.33) NVIDIA 3D Vision Controller-Treiber 275.33 (Version: 275.33) NVIDIA 3D Vision Treiber 311.06 (Version: 311.06) NVIDIA Grafiktreiber 311.06 (Version: 311.06) NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3) NVIDIA Install Application (Version: 2.1002.108.688) NVIDIA PhysX (x32 Version: 9.10.0514) NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106) NVIDIA Systemsteuerung 311.06 (Version: 311.06) NVIDIA Update 1.11.3 (Version: 1.11.3) NVIDIA Update Components (Version: 1.11.3) Octoshape Streaming Services (HKCU) OpenAL (x32) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Outerra - Anteworld - Outerra Anteworld Demo (x32 Version: "0.7.13-3478") Paint.NET v3.5.10 (Version: 3.60.0) Plan-G v3 (x32 Version: 3.0.2) PMDG 737 8900 NGX (x32 Version: 1.00.3219) PunkBuster Services (x32 Version: 0.986) PureBasic 5.11 Demo (32 bit) (x32) PureBasic 5.11 Demo (64 bit) RealAir Lancair Legacy (x32 Version: 07.1.10.01) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6392) Ryzom (x32) Security Task Manager 1.8g (x32 Version: 1.8g) Skype™ 6.10 (x32 Version: 6.10.104) SpeedCommander 13 (x32 Version: 13.60.6500) Spybot - Search & Destroy (x32 Version: 2.2.25) Star Wars: The Old Republic (x32 Version: 1.00) Steam (x32 Version: 1.0.0.0) TeamSpeak 2 RC2 (x32 Version: 2.0.32.60) TeamSpeak 3 Client (Version: 3.0.11.1) TeamViewer 8 (x32 Version: 8.0.20935) The Babylon Project v3.4b (x32) Titan Quest (x32 Version: 1.00.0000) Titan Quest Immortal Throne (x32 Version: 1.00.0000) Torchlight (x32 Version: 1.0.69.23) UK2000 Glasgow FREE FSX (x32 Version: 1.00) Ultimate Terrain X - Europe (HKCU) Ultimate Terrain X - USA (HKCU) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) VLC media player 2.1.1 (x32 Version: 2.1.1) Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8) Wing Commander Saga 1.0.2.7795 (Version: 1.0.2.7795) Wing Commander Saga 1.1.0.7822 (Version: 1.1.0.7822) WinRAR Archivierer (x32) xp-AntiSpy 3.97-11 (x32) Yahoo! Detect (x32) ==================== Restore Points ========================= 01-11-2013 16:01:39 Windows Update 05-11-2013 15:21:54 Windows Update 11-11-2013 22:15:04 Installed Microsoft XNA Framework Redistributable 4.0 11-11-2013 22:15:53 Installed Eterium Demo 14-11-2013 21:11:36 Windows Update 16-11-2013 23:20:02 Removed LogMeIn Hamachi 18-11-2013 22:34:32 Windows Modules Installer 19-11-2013 15:46:33 Windows Update 19-11-2013 23:40:11 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {04993129-D238-4766-840F-EF624D6C4724} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-06] (Google Inc.) Task: {0A3B9D25-042D-4EAB-9DE8-38C7F9DB7A16} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {46EC5EFB-F632-41F2-889E-277514BE53AF} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {47FC84F2-13BF-4B81-AECA-9980684EC750} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {500C67EF-81FC-4A9C-9AC3-6458CB26839A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-06] (Google Inc.) Task: {87EE032D-1427-456E-8BB8-863EAE36E0F8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-10-24] (AVAST Software) Task: {C4C0CD14-9A08-4CD7-9B62-EA2F740F24BC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {D6EFC898-F0B5-4B08-BFAD-069E5FFB58FC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated) Task: {D8D2FFD9-7E23-46B2-A6FC-5A9C2A3F46F6} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-11-18 23:06 - 2013-11-18 21:31 - 02145792 _____ () C:\Program Files\AVAST Software\Avast\defs\13111801\algo.dll 2013-11-01 17:23 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-11-01 17:23 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-11-01 17:23 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-11-01 17:23 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-11-01 17:23 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2013-03-25 13:23 - 2013-10-24 18:45 - 00691200 _____ () D:\Games\Steam\SDL2.dll 2013-03-29 10:53 - 2013-10-30 20:25 - 01123240 _____ () D:\Games\Steam\bin\chromehtml.DLL 2013-03-26 15:16 - 2013-10-23 21:07 - 20625832 _____ () D:\Games\Steam\bin\libcef.dll 2012-12-11 08:51 - 2013-06-15 00:49 - 01100800 _____ () D:\Games\Steam\bin\avcodec-53.dll 2012-12-11 08:51 - 2013-06-15 00:49 - 00124416 _____ () D:\Games\Steam\bin\avutil-51.dll 2012-12-11 08:51 - 2013-06-15 00:49 - 00192000 _____ () D:\Games\Steam\bin\avformat-53.dll 2013-10-24 17:02 - 2013-10-24 17:02 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2011-07-13 15:15 - 2013-11-18 15:40 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:74603393 ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/19/2013 10:15:01 PM) (Source: ESENT) (User: ) Description: taskhost (4088) Versuch, Datei "C:\Users\Peter\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien. Error: (11/19/2013 10:13:52 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 10.0.9200.16736 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 838 Startzeit: 01cee56c351eba0a Endzeit: 5 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: 79ce6070-515f-11e3-8676-50e54938d702 Error: (11/19/2013 10:12:31 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 10.0.9200.16736 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 438 Startzeit: 01cee56c03df2275 Endzeit: 5 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: 49b0b3b6-515f-11e3-8676-50e54938d702 Error: (11/19/2013 10:12:09 PM) (Source: Application Hang) (User: ) Description: Programm iexplore.exe, Version 10.0.9200.16736 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1740 Startzeit: 01cee56bf727aadb Endzeit: 5 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: 3d9729da-515f-11e3-8676-50e54938d702 Error: (11/17/2013 00:30:00 AM) (Source: Application Hang) (User: ) Description: Programm taskman.exe, Version 1.8.6.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 7ac Startzeit: 01cee3213f9155f4 Endzeit: 0 Anwendungspfad: C:\Program Files (x86)\Security Task Manager\taskman.exe Berichts-ID: Error: (11/16/2013 10:04:52 PM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 25.0.0.5046 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 5e8 Startzeit: 01cee30e66301ad0 Endzeit: 32 Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Berichts-ID: Error: (11/15/2013 07:36:32 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (11/14/2013 07:54:00 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (11/13/2013 04:19:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (11/12/2013 10:09:23 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.61637.0, Zeitstempel: 0x46fadb14 Name des fehlerhaften Moduls: DafWings.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x516d6ed7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x5f0fb63b ID des fehlerhaften Prozesses: 0xf8c Startzeit der fehlerhaften Anwendung: 0xfsx.exe0 Pfad der fehlerhaften Anwendung: fsx.exe1 Pfad des fehlerhaften Moduls: fsx.exe2 Berichtskennung: fsx.exe3 System errors: ============= Error: (11/20/2013 03:41:24 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (11/20/2013 03:41:24 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (11/20/2013 08:03:21 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (11/20/2013 08:03:21 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (11/20/2013 08:03:11 AM) (Source: Service Control Manager) (User: ) Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (11/20/2013 08:01:19 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (11/20/2013 08:01:19 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Updating Service erreicht. Error: (11/20/2013 07:47:05 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (11/20/2013 07:47:05 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (11/20/2013 07:44:44 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (11/19/2013 10:15:01 PM) (Source: ESENT)(User: ) Description: taskhost4088C:\Users\Peter\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. Error: (11/19/2013 10:13:52 PM) (Source: Application Hang)(User: ) Description: iexplore.exe10.0.9200.1673683801cee56c351eba0a5C:\Program Files\Internet Explorer\iexplore.exe79ce6070-515f-11e3-8676-50e54938d702 Error: (11/19/2013 10:12:31 PM) (Source: Application Hang)(User: ) Description: iexplore.exe10.0.9200.1673643801cee56c03df22755C:\Program Files\Internet Explorer\iexplore.exe49b0b3b6-515f-11e3-8676-50e54938d702 Error: (11/19/2013 10:12:09 PM) (Source: Application Hang)(User: ) Description: iexplore.exe10.0.9200.16736174001cee56bf727aadb5C:\Program Files\Internet Explorer\iexplore.exe3d9729da-515f-11e3-8676-50e54938d702 Error: (11/17/2013 00:30:00 AM) (Source: Application Hang)(User: ) Description: taskman.exe1.8.6.07ac01cee3213f9155f40C:\Program Files (x86)\Security Task Manager\taskman.exe Error: (11/16/2013 10:04:52 PM) (Source: Application Hang)(User: ) Description: firefox.exe25.0.0.50465e801cee30e66301ad032C:\Program Files (x86)\Mozilla Firefox\firefox.exe Error: (11/15/2013 07:36:32 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe Error: (11/14/2013 07:54:00 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe Error: (11/13/2013 04:19:06 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe Error: (11/12/2013 10:09:23 PM) (Source: Application Error)(User: ) Description: fsx.exe10.0.61637.046fadb14DafWings.dll_unloaded0.0.0.0516d6ed7c00000055f0fb63bf8c01cedfdab78f2282D:\Games\fsx\fsx.exeDafWings.dllb3e46f69-4bde-11e3-becb-50e54938d702 CodeIntegrity Errors: =================================== Date: 2012-10-17 15:42:02.495 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\EtronXHCI.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-10-17 15:42:02.433 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\EtronXHCI.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-08-01 21:08:32.392 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-08-01 02:55:28.666 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-08-01 02:41:42.758 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-08-01 02:30:44.400 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-08-01 02:22:27.793 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-08-01 01:01:30.711 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-08-01 00:41:10.430 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2011-07-31 02:04:26.255 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 14% Total physical RAM: 16367.12 MB Available physical RAM: 13943.17 MB Total Pagefile: 32732.41 MB Available Pagefile: 30133.95 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (W7) (Fixed) (Total:292.87 GB) (Free:173.92 GB) NTFS Drive d: (Daten) (Fixed) (Total:638.54 GB) (Free:337.08 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A3DB2284) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=293 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=639 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu Sicherheitsscans nach Fund von VBS:FlufferMiner-D [TRJ] mit Avast |
.dll, 32 bit, adblock, antivirus, avast, browser, defender, explorer, farbar recovery scan tool, firefox, firefox 25.0.1, flash player, helper, herunterfahren, homepage, iexplore.exe, monitor, mozilla, plug-in, prozess, realtek, refresh, registry, richtlinie, rundll, safer networking, scan, security, services.exe, software, svchost.exe, system, usb |