|
Plagegeister aller Art und deren Bekämpfung: WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastetWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
16.12.2013, 10:09 | #1 |
| WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet Hallo, seit einigen Tagen kommt mir mein Rechner sehr langsam vor, der Taskmanager "sagt" mir dass die Hälfte meines RAM belegt ist ist, ausserdem schnellt meine CPU Auslastungschon bei Mausbewegungen bis zu 100% in die Höhe. Ich habe zuerst ein Thema bei "Alles rund um Windows" erstellt, http://www.trojaner-board.de/146154-...gelastet.html, die mir dort vorgeschlagenen Schritte habe ich befolgt. Das Problem besteht aber weiterhin. Malwarebytes habe ich schon durchlaufen lassen, die Auswertung ist im Anhang. |
16.12.2013, 10:12 | #2 |
/// the machine /// TB-Ausbilder | WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
16.12.2013, 10:19 | #3 |
| WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet FRST:
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-12-2013 02 Ran by Mika (administrator) on MIKA-PC on 16-12-2013 10:16:04 Running from C:\Users\Mika\Desktop\Download_SysTools Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (AMD) C:\Windows\System32\atiesrxx.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe () C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (Valve Corporation) D:\Games\Steam\Steam.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe (Dropbox, Inc.) C:\Users\Mika\AppData\Roaming\Dropbox\bin\Dropbox.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated) HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor) HKLM-x32\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.de/de.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMgBHADMASwAtADgANwBXAFUAVQAtADIAVABWAEgAQQAtAFgANgBEAEYAOAAtAEwANgBQAEEATgA"&"inst=NwA3AC0ANAAzADEAOAAxADcANAA5ADIALQBCAEEAUgA5AEcAKwAxAC0ARgBMACsAOQAtAEYAOQBNADYAKwAxAC0AWABPADMANgArADEALQBGADkATQA3AEMAKwA1AC0AWABPADkAKwAxAC0ARgA5AE0AMwArADEALQBEAEQAVAArADMAMAAxADQAMAAtAEQARAA5ADAARgArADEALQBTAFQAOQAwAEYAQQBQAFAAKwAxAC0ARgA5ADAATQAxADIAUgArADEALQBWAEkAUAAxADIAKwAxAA"&"prod=90"&"ver=9.0.894 [x] HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKCU\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com) HKCU\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [759496 2013-10-16] (Sandboxie Holdings, LLC) HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-09] () HKCU\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1815464 2013-12-13] (Valve Corporation) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2012-10-30] (Renesas Electronics Corporation) HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1912832 2012-10-04] (Dominik Reichl) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] () HKU\Gast\...\Run: [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime HKU\Gast\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com) HKU\Gast\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [759496 2013-10-16] (Sandboxie Holdings, LLC) HKU\Gast\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Gast\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe HKU\Gast\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1815464 2013-12-13] (Valve Corporation) AppInit_DLLs: C:\Windows\System32\avgrssta.dll [ ] () Startup: C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Mika\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2192C1E54E05CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp URLSearchHook: HKCU - (No Name) - {ff88a983-649d-4207-9336-9b999280b436} - No File SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: HistoryTriggerBHO Class - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) DPF: HKLM {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default FF user.js: detected! => C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\user.js FF Homepage: hxxp://www.spiegel.de/ FF NetworkProxy: "ftp", "proxyus4.stealthy.co" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "proxyus4.stealthy.co" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "proxyus4.stealthy.co" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "proxyus4.stealthy.co" FF NetworkProxy: "ssl_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @virtools.com/3DviaPlayer - C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Mika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: Cryptload Link Copier - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{ec8030f7-c20a-464f-9b1e-13a3a9e97399} FF Extension: admin - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\admin@proxy-listen.de.xpi FF Extension: personas - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\personas@christopher.beard.xpi FF Extension: stealthyextension - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\stealthyextension@gmail.com.xpi FF Extension: Adblock Plus - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: dta - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM-x32\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HomePage: hxxp://www.spiegel.de/ CHR RestoreOnStartup: "hxxp://www.spiegel.de/" CHR DefaultSearchKeyword: google.de CHR DefaultSearchProvider: Google CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Windows Genuine Advantage) - C:\Program Files (x86)\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (3DVIA player) - C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes) CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Unity Player) - C:\Users\Mika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll No File CHR Extension: (Angry Birds) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0 CHR Extension: (Google Docs) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (ChromeTheme.net) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnknhbkmpamdndidlhakifmkakkphjfk\1_0 CHR Extension: (AdBlock) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Plants vs Zombies) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina\1.0.5_0 CHR Extension: (Google Wallet) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 a2AntiMalware; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2service.exe [4161512 2013-12-04] (Emsisoft GmbH) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.) R2 pgsql-8.3; C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe [65536 2009-03-13] (PostgreSQL Global Development Group) R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [186056 2013-10-16] (Sandboxie Holdings, LLC) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia) S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia) ==================== Drivers (Whitelisted) ==================== R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [70960 2013-08-24] (Emsisoft GmbH) R1 A2DDA; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2ddax64.sys [26176 2013-03-27] (Emsisoft GmbH) R1 a2injectiondriver; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH) R1 a2util; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2util64.sys [17384 2013-03-27] (Emsisoft GmbH) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2012-03-07] (Google Inc) S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-03-06] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-03-06] (LG Electronics Inc.) S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2012-03-06] (LG Electronics Inc.) R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2009-12-06] () R3 cleanhlp; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH) S3 gwiopm; C:\Program Files (x86)\Slotman\gwiopm.sys [3904 1998-06-03] () R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2013-12-15] (REALiX(tm)) R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.) R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.) R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2009-12-06] () S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation) S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation) S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation) S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation) S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation) S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation) S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation) S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation) S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation) S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation) S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation) S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation) S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation) S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [200552 2013-10-16] (Sandboxie Holdings, LLC) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2009-12-06] (Duplex Secure Ltd.) S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] () S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2007-10-25] () U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [x] S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-16 10:16 - 2013-12-16 10:16 - 00000000 ____D C:\FRST 2013-12-16 09:03 - 2013-12-16 09:03 - 00001069 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-15 23:48 - 2013-12-15 23:48 - 00001154 _____ C:\Users\Mika\Desktop\Find Drivers with DriverAgent.lnk 2013-12-15 23:48 - 2013-12-15 23:48 - 00000000 ____D C:\Users\Mika\AppData\Local\eSupport.com 2013-12-15 23:48 - 2013-12-15 23:48 - 00000000 ____D C:\Program Files (x86)\eSupport.com 2013-12-15 17:02 - 2013-12-15 17:02 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS 2013-12-15 17:02 - 2013-12-15 17:02 - 00000000 ____D C:\Program Files\HWiNFO64 2013-12-15 16:37 - 2013-12-15 17:23 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-12-15 10:32 - 2013-10-25 15:16 - 00675988 _____ C:\Users\Mika\Desktop\Minecraft.exe 2013-12-15 10:02 - 2013-12-16 10:16 - 00000000 ____D C:\Users\Mika\Desktop\Download_SysTools 2013-12-15 09:36 - 2013-12-15 09:36 - 00000000 ____D C:\Windows\pss 2013-12-15 09:11 - 2013-12-15 09:57 - 00000000 ____D C:\ProgramData\GlarySoft 2013-12-15 09:10 - 2013-12-15 09:57 - 00000000 ____D C:\Users\Mika\AppData\Roaming\GlarySoft 2013-12-15 09:09 - 2013-12-15 09:09 - 13763848 _____ C:\Users\Mika\Desktop\gu3setup.exe 2013-12-11 23:42 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 23:42 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 23:42 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 23:42 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 23:41 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 23:41 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 23:41 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 23:41 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 23:41 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 23:41 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 23:41 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 23:41 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 23:41 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 23:41 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 23:41 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 23:41 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 23:41 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 23:41 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 23:41 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 23:41 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 23:41 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 23:41 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 23:41 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 23:41 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 23:41 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 23:41 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 23:41 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 23:41 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 23:41 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 23:41 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 23:41 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 23:41 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 23:41 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 23:41 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 23:41 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 22:06 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 22:06 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 22:06 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 22:06 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 22:06 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 22:06 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 22:06 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 22:06 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 22:06 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 22:06 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 22:06 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 22:06 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 22:06 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 22:06 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 22:06 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 22:06 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 22:06 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 22:06 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 22:06 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-11 20:25 - 2013-12-12 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-10 21:39 - 2013-11-16 00:28 - 00003330 _____ C:\Users\Mika\Desktop\Öko-Test-DDL.txt 2013-12-09 18:14 - 2013-12-15 23:05 - 00000000 ____D C:\Users\Mika\AppData\Roaming\.minecraft 2013-11-29 11:30 - 2013-11-29 11:32 - 00000010 _____ C:\Users\Mika\Desktop\shufaPW.txt 2013-11-28 19:46 - 2013-12-09 18:02 - 00000000 ____D C:\ProgramData\Oracle 2013-11-26 08:58 - 2013-11-26 08:58 - 00000000 ____D C:\ProgramData\McAfee 2013-11-24 22:37 - 2013-11-24 22:37 - 00002990 _____ C:\Windows\System32\Tasks\{D4259D0A-98FF-4AA4-B749-ED6481B23A63} 2013-11-24 22:36 - 2013-11-24 22:36 - 00002990 _____ C:\Windows\System32\Tasks\{3651CA61-4E68-4D8C-9D46-7A49CB5AD9FC} 2013-11-24 22:20 - 2013-11-24 22:20 - 00003238 _____ C:\Windows\System32\Tasks\{17AADBB3-F0D8-42DD-958E-DC8B5A8AAE56} 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Users\Mika\AppData\Local\AMD 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\ProgramData\ATI 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD APP 2013-11-23 11:35 - 2013-11-23 11:35 - 00000000 ____D C:\Program Files\ATI Technologies 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Roaming\ATI 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Local\ATI 2013-11-23 11:30 - 2013-11-23 11:30 - 00000000 ____D C:\AMD 2013-11-22 09:06 - 2013-11-22 09:07 - 00350472 _____ C:\Users\Mika\Documents\cc_20131122_090645.reg 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{73419286-43B5-49A7-91F0-CE49C2DD7742} 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{08D8D955-02A5-46A9-AB37-FC921FA8E4CB} 2013-11-21 20:10 - 2013-11-21 20:10 - 00003230 _____ C:\Windows\System32\Tasks\{08DA5BB2-C150-44EE-A0BE-DD42671A1401} 2013-11-21 19:54 - 2013-11-21 19:54 - 00003278 _____ C:\Windows\System32\Tasks\{ABB16331-6BF4-4EE3-BAD5-6EFB4B3AB4EF} 2013-11-21 15:32 - 2013-11-21 15:32 - 00000035 _____ C:\Users\Mika\Desktop\Schach.txt 2013-11-19 10:28 - 2013-12-16 09:01 - 00000000 ____D C:\Users\Mika\AppData\Local\CrashDumps 2013-11-19 09:53 - 2013-11-19 09:53 - 00000000 ____D C:\Users\Mika\AppData\Roaming\MSI 2013-11-19 09:28 - 2013-11-19 09:28 - 00000000 ____D C:\Program Files (x86)\Setup Files 2013-11-19 09:27 - 2010-11-29 04:50 - 00044672 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys 2013-11-19 09:26 - 2013-11-23 11:36 - 00000000 ____D C:\ProgramData\AMD 2013-11-19 09:26 - 2013-11-23 11:34 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-11-19 09:26 - 2013-11-19 09:26 - 00000000 ____D C:\Program Files\ATI 2013-11-19 09:26 - 2010-06-17 17:15 - 00016440 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\Drivers\AtiPcie64.sys 2013-11-19 09:26 - 2010-02-18 09:18 - 00046136 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox64.sys 2013-11-19 09:17 - 2013-11-19 09:18 - 00000189 _____ C:\mylog.log 2013-11-19 09:17 - 2013-04-10 11:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2013-11-19 09:17 - 2013-04-10 11:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2013-11-19 09:16 - 2013-11-19 09:17 - 00002479 _____ C:\RHDSetup.log 2013-11-19 09:16 - 2013-11-19 09:17 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Program Files\Realtek 2013-11-19 09:16 - 2013-09-10 21:40 - 03640024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2013-11-19 09:16 - 2013-09-10 19:56 - 00644705 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT 2013-11-19 09:16 - 2013-09-10 16:16 - 00148696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2013-11-19 09:16 - 2013-09-10 11:02 - 32861696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2013-11-19 09:16 - 2013-09-09 15:32 - 05681192 _____ C:\Windows\system32\Drivers\rtvienna.dat 2013-11-19 09:16 - 2013-09-05 17:23 - 04933328 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll 2013-11-19 09:16 - 2013-09-05 17:22 - 00848184 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll 2013-11-19 09:16 - 2013-09-05 15:52 - 02586328 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2013-11-19 09:16 - 2013-09-03 11:16 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2013-11-19 09:16 - 2013-08-20 20:17 - 02809048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2013-11-19 09:16 - 2013-08-20 17:37 - 00605496 _____ C:\Windows\system32\audioLibVc.dll 2013-11-19 09:16 - 2013-08-14 16:36 - 01325312 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2013-11-19 09:16 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2013-11-19 09:16 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2013-11-19 09:16 - 2013-08-14 16:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2013-11-19 09:16 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2013-11-19 09:16 - 2013-08-07 17:41 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2013-11-19 09:16 - 2013-08-07 17:34 - 00765184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2013-11-19 09:16 - 2013-08-06 09:47 - 00947248 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 06219096 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 01908568 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 00312152 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2013-11-19 09:16 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2013-11-19 09:16 - 2013-08-02 20:16 - 01005784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2013-11-19 09:16 - 2013-07-28 10:48 - 27518208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2013-11-19 09:16 - 2013-07-26 14:05 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2013-11-19 09:16 - 2013-07-24 10:07 - 02032896 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2013-11-19 09:16 - 2013-07-23 15:40 - 03610880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2013-11-19 09:16 - 2013-07-23 15:40 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 14048512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 01916672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 00922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2013-11-19 09:16 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2013-11-19 09:16 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2013-11-19 09:16 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2013-11-19 09:16 - 2013-06-21 11:01 - 00109848 _____ C:\Windows\system32\AcpiServiceVnA64.dll 2013-11-19 09:16 - 2013-06-05 21:42 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2013-11-19 09:16 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2013-11-19 09:16 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2013-11-19 09:16 - 2013-02-20 18:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2013-11-19 09:16 - 2012-10-02 14:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2013-11-19 09:16 - 2012-10-02 14:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2013-11-19 09:16 - 2012-10-02 14:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2013-11-19 09:16 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2013-11-19 09:16 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2013-11-19 09:16 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2013-11-19 09:16 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2013-11-19 09:16 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2013-11-19 09:16 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2013-11-19 09:16 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2013-11-19 09:16 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2013-11-19 09:16 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2013-11-19 09:16 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2013-11-19 09:16 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2013-11-19 09:16 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2013-11-19 09:16 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2013-11-19 09:16 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2013-11-19 09:16 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2013-11-19 09:11 - 2013-11-20 08:27 - 00000000 ____D C:\ProgramData\Norton 2013-11-19 09:10 - 2013-11-19 09:10 - 00000000 ____D C:\ProgramData\Trend Micro 2013-11-19 08:55 - 2013-12-15 08:58 - 00000000 ____D C:\Program Files (x86)\MSI 2013-11-19 08:55 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll 2013-11-18 09:45 - 2013-11-19 16:57 - 00000789 _____ C:\Users\Mika\Desktop\HArdware.txt 2013-11-18 08:42 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-18 08:37 - 2013-11-18 08:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-18 08:36 - 2013-11-18 08:36 - 00002172 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-11-17 08:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-17 08:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-17 08:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-17 08:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-17 08:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-17 08:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-17 08:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-17 08:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-17 08:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-17 08:02 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-17 08:02 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-17 08:02 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-17 08:02 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-17 08:02 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-17 08:02 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-17 08:02 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-17 08:02 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-17 08:02 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-17 08:02 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-17 08:02 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-17 08:02 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-17 08:02 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-17 08:02 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-17 08:02 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-17 08:02 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-17 08:02 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-17 08:02 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-17 08:02 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-17 08:02 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-17 08:02 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys ==================== One Month Modified Files and Folders ======= 2013-12-16 10:16 - 2013-12-16 10:16 - 00000000 ____D C:\FRST 2013-12-16 10:16 - 2013-12-15 10:02 - 00000000 ____D C:\Users\Mika\Desktop\Download_SysTools 2013-12-16 10:06 - 2010-05-05 15:52 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-16 09:26 - 2013-01-12 08:39 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2013-12-16 09:26 - 2013-01-08 16:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-16 09:05 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-16 09:05 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-16 09:04 - 2012-01-02 15:01 - 00905216 ___SH C:\Users\Mika\Desktop\Thumbs.db 2013-12-16 09:03 - 2013-12-16 09:03 - 00001069 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 09:03 - 2010-06-07 20:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-16 09:01 - 2013-11-19 10:28 - 00000000 ____D C:\Users\Mika\AppData\Local\CrashDumps 2013-12-16 09:01 - 2010-06-08 16:51 - 01757439 _____ C:\Windows\WindowsUpdate.log 2013-12-16 08:59 - 2012-03-13 05:29 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Dropbox 2013-12-16 08:57 - 2010-05-05 15:52 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-16 08:56 - 2009-12-01 19:57 - 00000000 ____D C:\Users\postgres 2013-12-16 08:56 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-16 08:52 - 2013-01-12 10:36 - 00002940 _____ C:\Windows\Sandboxie.ini 2013-12-16 08:52 - 2010-07-08 18:23 - 01593956 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-16 08:52 - 2009-07-14 18:58 - 00699416 _____ C:\Windows\system32\perfh007.dat 2013-12-16 08:52 - 2009-07-14 18:58 - 00149556 _____ C:\Windows\system32\perfc007.dat 2013-12-16 08:52 - 2009-07-14 06:13 - 01593956 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-16 08:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-15 23:52 - 2011-08-26 16:10 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-15 23:51 - 2009-12-04 15:59 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1A04580C-E42B-4F18-9AD8-4D7196767767} 2013-12-15 23:48 - 2013-12-15 23:48 - 00001154 _____ C:\Users\Mika\Desktop\Find Drivers with DriverAgent.lnk 2013-12-15 23:48 - 2013-12-15 23:48 - 00000000 ____D C:\Users\Mika\AppData\Local\eSupport.com 2013-12-15 23:48 - 2013-12-15 23:48 - 00000000 ____D C:\Program Files (x86)\eSupport.com 2013-12-15 23:05 - 2013-12-09 18:14 - 00000000 ____D C:\Users\Mika\AppData\Roaming\.minecraft 2013-12-15 21:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-15 17:23 - 2013-12-15 16:37 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-12-15 17:02 - 2013-12-15 17:02 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS 2013-12-15 17:02 - 2013-12-15 17:02 - 00000000 ____D C:\Program Files\HWiNFO64 2013-12-15 09:57 - 2013-12-15 09:11 - 00000000 ____D C:\ProgramData\GlarySoft 2013-12-15 09:57 - 2013-12-15 09:10 - 00000000 ____D C:\Users\Mika\AppData\Roaming\GlarySoft 2013-12-15 09:37 - 2009-12-30 13:14 - 00007666 _____ C:\Users\Mika\AppData\Local\Resmon.ResmonCfg 2013-12-15 09:36 - 2013-12-15 09:36 - 00000000 ____D C:\Windows\pss 2013-12-15 09:14 - 2012-03-13 05:30 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-12-15 09:14 - 2011-11-13 09:23 - 00000000 ____D C:\Users\Mika\Desktop\Konsti Games 2013-12-15 09:09 - 2013-12-15 09:09 - 13763848 _____ C:\Users\Mika\Desktop\gu3setup.exe 2013-12-15 08:58 - 2013-11-19 08:55 - 00000000 ____D C:\Program Files (x86)\MSI 2013-12-15 06:02 - 2013-08-05 10:10 - 00000000 ____D C:\Windows\system32\MRT 2013-12-15 06:00 - 2009-12-02 03:58 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-13 07:01 - 2012-05-03 03:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-12 08:47 - 2013-12-11 20:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-12 08:44 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-12 08:43 - 2009-07-14 05:45 - 04885072 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 12:32 - 2009-12-01 20:21 - 00000000 ____D C:\Users\Mika\AppData\Local\PokerStars.EU 2013-12-11 12:26 - 2013-01-08 16:18 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 12:26 - 2013-01-08 16:18 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 12:26 - 2013-01-08 16:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 08:19 - 2013-01-16 06:08 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-12-10 08:18 - 2009-12-01 19:44 - 00000000 ____D C:\Program Files\WinRAR 2013-12-09 21:09 - 2009-12-06 17:42 - 00000000 ____D C:\Users\Mika\Documents\My Games 2013-12-09 18:02 - 2013-11-28 19:46 - 00000000 ____D C:\ProgramData\Oracle 2013-12-05 19:56 - 2009-12-01 19:16 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Skype 2013-12-05 10:46 - 2012-10-26 17:01 - 00000000 ____D C:\Program Files (x86)\Daedalic Entertainment 2013-12-05 10:45 - 2013-09-06 16:37 - 00000000 ____D C:\Program Files\ComicRack 2013-12-05 07:08 - 2013-01-12 10:05 - 00002135 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-05 02:01 - 2010-05-05 15:52 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-05 02:01 - 2010-05-05 15:52 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-04 17:05 - 2013-10-08 18:57 - 00000000 ____D C:\Users\Mika\Desktop\BLA BLA 2013-11-29 11:32 - 2013-11-29 11:30 - 00000010 _____ C:\Users\Mika\Desktop\shufaPW.txt 2013-11-29 09:34 - 2013-07-28 08:45 - 00000977 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-29 09:34 - 2010-06-07 21:15 - 00000000 ____D C:\Program Files (x86)\CCleaner 2013-11-26 21:08 - 2012-02-20 17:26 - 00000000 ____D C:\Users\Mika\AppData\Roaming\vlc 2013-11-26 12:54 - 2013-12-11 23:41 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-11 23:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-11 23:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-11 23:41 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-11 23:41 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-11 23:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-11 23:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-11 23:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-11 23:41 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-11 23:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-11 23:41 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-11 23:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-11 23:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-11 23:41 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-11 23:41 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-11 23:41 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:38 - 2013-12-11 23:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:35 - 2013-12-11 23:41 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-11 23:41 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-11 23:41 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-11 23:41 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-11 23:41 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:58 - 2013-11-26 08:58 - 00000000 ____D C:\ProgramData\McAfee 2013-11-26 08:58 - 2009-12-03 17:30 - 00000000 ____D C:\Users\Mika\AppData\Local\Adobe 2013-11-26 08:48 - 2013-12-11 23:41 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-11 23:41 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-11 23:41 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-11 23:41 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-11 23:41 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-11 23:41 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-11 23:41 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-11 23:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-11 23:41 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-25 08:38 - 2009-12-01 19:15 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-25 08:38 - 2009-12-01 19:15 - 00000000 ____D C:\ProgramData\Skype 2013-11-24 22:37 - 2013-11-24 22:37 - 00002990 _____ C:\Windows\System32\Tasks\{D4259D0A-98FF-4AA4-B749-ED6481B23A63} 2013-11-24 22:36 - 2013-11-24 22:36 - 00002990 _____ C:\Windows\System32\Tasks\{3651CA61-4E68-4D8C-9D46-7A49CB5AD9FC} 2013-11-24 22:20 - 2013-11-24 22:20 - 00003238 _____ C:\Windows\System32\Tasks\{17AADBB3-F0D8-42DD-958E-DC8B5A8AAE56} 2013-11-23 19:26 - 2013-12-11 22:06 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-11-23 18:47 - 2013-12-11 22:06 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Users\Mika\AppData\Local\AMD 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\ProgramData\ATI 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD APP 2013-11-23 11:36 - 2013-11-19 09:26 - 00000000 ____D C:\ProgramData\AMD 2013-11-23 11:35 - 2013-11-23 11:35 - 00000000 ____D C:\Program Files\ATI Technologies 2013-11-23 11:34 - 2013-11-19 09:26 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Roaming\ATI 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Local\ATI 2013-11-23 11:30 - 2013-11-23 11:30 - 00000000 ____D C:\AMD 2013-11-22 17:50 - 2009-12-06 16:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-11-22 09:07 - 2013-11-22 09:06 - 00350472 _____ C:\Users\Mika\Documents\cc_20131122_090645.reg 2013-11-22 09:04 - 2009-12-01 16:24 - 00000000 ____D C:\Windows\Panther 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{73419286-43B5-49A7-91F0-CE49C2DD7742} 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{08D8D955-02A5-46A9-AB37-FC921FA8E4CB} 2013-11-21 20:10 - 2013-11-21 20:10 - 00003230 _____ C:\Windows\System32\Tasks\{08DA5BB2-C150-44EE-A0BE-DD42671A1401} 2013-11-21 19:54 - 2013-11-21 19:54 - 00003278 _____ C:\Windows\System32\Tasks\{ABB16331-6BF4-4EE3-BAD5-6EFB4B3AB4EF} 2013-11-21 15:32 - 2013-11-21 15:32 - 00000035 _____ C:\Users\Mika\Desktop\Schach.txt 2013-11-20 08:39 - 2013-09-27 16:15 - 00001026 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-20 08:27 - 2013-11-19 09:11 - 00000000 ____D C:\ProgramData\Norton 2013-11-19 16:57 - 2013-11-18 09:45 - 00000789 _____ C:\Users\Mika\Desktop\HArdware.txt 2013-11-19 09:53 - 2013-11-19 09:53 - 00000000 ____D C:\Users\Mika\AppData\Roaming\MSI 2013-11-19 09:28 - 2013-11-19 09:28 - 00000000 ____D C:\Program Files (x86)\Setup Files 2013-11-19 09:26 - 2013-11-19 09:26 - 00000000 ____D C:\Program Files\ATI 2013-11-19 09:18 - 2013-11-19 09:17 - 00000189 _____ C:\mylog.log 2013-11-19 09:17 - 2013-11-19 09:16 - 00002479 _____ C:\RHDSetup.log 2013-11-19 09:17 - 2013-11-19 09:16 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Program Files\Realtek 2013-11-19 09:10 - 2013-11-19 09:10 - 00000000 ____D C:\ProgramData\Trend Micro 2013-11-18 09:04 - 2009-12-01 16:37 - 00001421 _____ C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-18 08:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-18 08:37 - 2013-11-18 08:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-18 08:37 - 2013-11-10 18:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-18 08:37 - 2013-05-08 19:01 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-18 08:36 - 2013-11-18 08:36 - 00002172 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-11-18 08:35 - 2010-05-05 15:52 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-16 18:38 - 2009-12-01 16:59 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-11-16 00:28 - 2013-12-10 21:39 - 00003330 _____ C:\Users\Mika\Desktop\Öko-Test-DDL.txt ZeroAccess: C:\Users\Mika\AppData\Local\33e51e35 C:\Users\Mika\AppData\Local\33e51e35\@ Some content of TEMP: ==================== C:\Users\Mika\AppData\Local\Temp\v-bates.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-10 08:58 ==================== End Of Log ============================ --- --- --- Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-12-2013 02 Ran by Mika at 2013-12-16 10:16:37 Running from C:\Users\Mika\Desktop\Download_SysTools Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367} ==================== Installed Programs ====================== 3DVIA player 5.0 (x32 Version: 5.0.0.15) 64 Bit HP CIO Components Installer (Version: 7.2.8) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) 8000A809 (x32 Version: 50.0.165.000) 8000A809_eDocs (x32 Version: 50.0.165.000) 8000A809_Help (x32 Version: 1.00.0000) Adobe AIR (x32 Version: 3.9.0.1380) Adobe Community Help (x32 Version: 3.0.0) Adobe Community Help (x32 Version: 3.0.0.400) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170) Adobe Media Player (x32 Version: 1.8) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18) Amazon MP3-Downloader 1.0.9 (x32) AMD Accelerated Video Transcoding (Version: 12.5.100.30429) AMD APP SDK Runtime (Version: 10.0.937.2) AMD Catalyst Install Manager (Version: 8.0.877.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Fuel (Version: 2013.0429.2313.39747) AMD Media Foundation Decoders (Version: 1.0.80430.0002) AMD VISION Engine Control Center (x32 Version: 2013.0429.2313.39747) ANNO 1404 - Königsedition (x32 Version: 3.10.0000) Audacity 1.3.12 (Unicode) (x32) Avanquest update (x32 Version: 1.29) Bejeweled 3 (x32) BPDSoftware (x32 Version: 50.0.165.000) BPDSoftware_Ini (x32 Version: 1.00.0000) BufferChm (x32 Version: 130.0.331.000) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0429.2313.39747) Catalyst Control Center InstallProxy (x32 Version: 2013.0429.2313.39747) Catalyst Control Center Localization All (x32 Version: 2013.0429.2313.39747) CCC Help Chinese Standard (x32 Version: 2013.0429.2312.39747) CCC Help Chinese Traditional (x32 Version: 2013.0429.2312.39747) CCC Help Czech (x32 Version: 2013.0429.2312.39747) CCC Help Danish (x32 Version: 2013.0429.2312.39747) CCC Help Dutch (x32 Version: 2013.0429.2312.39747) CCC Help English (x32 Version: 2013.0429.2312.39747) CCC Help Finnish (x32 Version: 2013.0429.2312.39747) CCC Help French (x32 Version: 2013.0429.2312.39747) CCC Help German (x32 Version: 2013.0429.2312.39747) CCC Help Greek (x32 Version: 2013.0429.2312.39747) CCC Help Hungarian (x32 Version: 2013.0429.2312.39747) CCC Help Italian (x32 Version: 2013.0429.2312.39747) CCC Help Japanese (x32 Version: 2013.0429.2312.39747) CCC Help Korean (x32 Version: 2013.0429.2312.39747) CCC Help Norwegian (x32 Version: 2013.0429.2312.39747) CCC Help Polish (x32 Version: 2013.0429.2312.39747) CCC Help Portuguese (x32 Version: 2013.0429.2312.39747) CCC Help Russian (x32 Version: 2013.0429.2312.39747) CCC Help Spanish (x32 Version: 2013.0429.2312.39747) CCC Help Swedish (x32 Version: 2013.0429.2312.39747) CCC Help Thai (x32 Version: 2013.0429.2312.39747) CCC Help Turkish (x32 Version: 2013.0429.2312.39747) ccc-utility64 (Version: 2013.0429.2313.39747) CCleaner (Version: 4.08) CDBurnerXP (Version: 4.3.7.2423) CDBurnerXP (x32 Version: 4.5.2.4214) D3DX10 (x32 Version: 15.4.2368.0902) DeviceDiscovery (x32 Version: 130.0.465.000) Dropbox (HKCU Version: 2.0.22) Dual-Core Optimizer (x32 Version: 1.1.4.0169) ElsterFormular für Privatanwender (x32 Version: 12.2.2.6665p) Everest Poker (Remove Only) (x32) F1 2012 Demo (x32) FileHippo.com Update Checker (x32) Fotogalerie (x32 Version: 16.4.3508.0205) GCompris Uninstall (x32) Giana Sisters: Twisted Dreams (x32) Google Chrome (x32 Version: 31.0.1650.63) Google Earth (x32 Version: 7.1.2.2041) Google Update Helper (x32 Version: 1.3.22.3) Governor of Poker 2: Premium Edition (x32) GPBaseService2 (x32 Version: 130.0.371.000) Haunted Memories (x32) Holdem Manager (x32 Version: 1.07) HP Customer Participation Program 13.0 (Version: 13.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Officejet Pro 8000 A809 Series (Version: 13.0) HP Smart Web Printing 4.60 (Version: 4.60) HP Solution Center 13.0 (Version: 13.0) HP Update (x32 Version: 4.000.011.006) HPProductAssistant (x32 Version: 130.0.371.000) HWiNFO64 Version 4.30 (Version: 4.30) Janosch Vorschule (x32 Version: 1.00.0000) Janosch Vorschule Englisch (x32 Version: 1.00.0000) JDownloader 0.9 (x32 Version: 0.9) Junk Mail filter update (x32 Version: 16.4.3508.0205) KeePass Password Safe 2.20.1 (x32) LG Bluetooth Drivers (x32 Version: 1.1) LG PC Suite IV (x32 Version: 4.3.46.20111117) LG United Mobile Drivers (x32 Version: 3.7.1.0) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) MarketResearch (x32 Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Corporation (Version: 9.1.0.0) Microsoft Corporation (x32 Version: 9.1.0.0) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0) Microsoft LifeCam (Version: 3.60.253.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SkyDrive (HKCU Version: 16.4.6013.0910) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053) Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053) Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000) Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000) Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000) Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000) Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000) Movie Maker (x32 Version: 16.4.3508.0205) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1) Mozilla Maintenance Service (x32 Version: 24.2.0) Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0) Mp3tag v2.46a (x32 Version: v2.46a) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1109.0912) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) MyPhoneExplorer (x32 Version: 1.8.4) myPrintMileage (Officejet Pro 8000 A809) (x32 Version: 1.00.0000) Network64 (Version: 130.0.579.000) Network64 (Version: 140.0.221.000) NVIDIA PhysX (x32 Version: 9.09.0814) OpenAL (x32) OpenOffice 4.0.1 (x32 Version: 4.01.9714) Outlast (x32) Panda USB Vaccine 1.0.1.4 (x32) PartyPoker (x32 Version: 142) Photo Common (x32 Version: 16.4.3508.0205) Photo Gallery (x32 Version: 16.4.3508.0205) PokerStars (x32) PokerStrategy.com Equilator (x32 Version: 1.8.1.0) PostgreSQL 8.3 (x32 Version: 8.3) ProductContext (x32 Version: 50.0.165.000) ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.12) Realtek Ethernet Controller Driver (x32 Version: 7.72.410.2013) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6823) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0) Samsung Mobile phone USB driver Drive Software Samsung New PC Studio (x32 Version: 1.00.0000) SAMSUNG USB Driver for Mobile Phones (Version: 1.3.650.0) Sandboxie 4.06 (64-bit) (Version: 4.06) Secunia PSI (3.0.0.4001) (x32 Version: 3.0.0.4001) Skype Click to Call (x32 Version: 5.9.9216) Skype™ 6.11 (x32 Version: 6.11.102) Slotman (x32) SmartWebPrinting (x32 Version: 140.0.186.000) SolutionCenter (x32 Version: 130.0.373.000) Status (x32 Version: 130.0.469.000) Steam (x32 Version: 1.0.0.0) Sweet Home 3D version 3.3 (x32) The Inner World (x32) Toolbox (x32 Version: 130.0.648.000) TRAUMA version 1.0 (x32 Version: 1.0) TrayApp (x32 Version: 130.0.422.000) Uninstall 1.0.0.1 (x32) Unity Web Player (HKCU Version: ) Uplay (x32 Version: 3.0) Visual C++ 8.0 Runtime Setup Package (x64) (x32 Version: 9.0.0.623) Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0) VLC media player 2.1.0 (Version: 2.1.0) VLC media player 2.1.1 (x32 Version: 2.1.1) WebReg (x32 Version: 130.0.132.017) Windows Live Communications Platform (x32 Version: 16.4.3508.0205) Windows Live Essentials (x32 Version: 16.4.3508.0205) Windows Live Family Safety (Version: 16.4.3508.0205) Windows Live Family Safety (x32 Version: 16.4.3508.0205) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3508.0205) Windows Live Mail (x32 Version: 16.4.3508.0205) Windows Live Messenger (x32 Version: 16.4.3508.0205) Windows Live MIME IFilter (Version: 16.4.3508.0205) Windows Live Photo Common (x32 Version: 16.4.3508.0205) Windows Live PIMT Platform (x32 Version: 16.4.3508.0205) Windows Live SOXE (x32 Version: 16.4.3508.0205) Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205) Windows Live UX Platform (x32 Version: 16.4.3508.0205) Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205) Windows Live Writer (x32 Version: 16.4.3508.0205) Windows Live Writer Resources (x32 Version: 16.4.3508.0205) Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8) Windows Mobile-Gerätecenter (Version: 6.1.6965.0) WinRAR 5.01 (64-bit) (Version: 5.01.0) XMedia Recode 2.3.1.3 (x32 Version: 2.3.1.3) xrecode II 1.0.0.178 (x32) ==================== Restore Points ========================= 15-12-2013 20:36:28 Geplanter Prüfpunkt 15-12-2013 22:51:51 Removed Java 7 Update 45 15-12-2013 22:52:33 Removed System Requirements Lab CYRI 16-12-2013 07:28:48 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2013-01-06 20:35 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {015309C4-2E75-4786-9AB8-FA3AD9EF908F} - System32\Tasks\{682D776B-40E1-4967-ADBE-82F57F2FE5ED} => F:\SETUP.EXE Task: {016E2128-782E-4F53-8486-76D0D3CE5794} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd) Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem Task: {08AEB603-27DE-4C85-8E06-9812CB1E014C} - System32\Tasks\{2B4697D1-1542-4CDB-BAAF-17E12E1E53F7} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {090ED151-43D5-4BD2-8B7E-58C2B30DC36E} - System32\Tasks\{63C82B32-65B2-412E-A03A-233A8A646485} => C:\Terzio\Fritz und Fertig\Fritz und Fertig\Fritz und Fertig.exe Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem Task: {16693D7C-BCC2-4C33-B343-DFC3A99321CB} - System32\Tasks\{A7461607-AD4C-4EEF-9438-37F9806B5439} => F:\SETUP.EXE Task: {198B1710-C410-4B6B-8E73-2B393BACC95A} - System32\Tasks\{0D6455F6-4096-4665-B5E6-7EA50A9DAD22} => F:\SETUP.EXE Task: {1AABC27C-3CB6-4C02-BF22-B20C5F5FEF5A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-05] (Google Inc.) Task: {1E755D6F-1B79-4DBF-A43A-CB57F71340F7} - System32\Tasks\{E51E0B62-371B-4197-9969-5A66369743CC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.120/de/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered Task: {2677A5B1-82F1-4410-94D4-E6A188EC70A3} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2205588998-460126761-1264454870-1001 Task: {316A5682-51E8-4DF2-9DC5-8734B1E0C41C} - System32\Tasks\{FC195743-1B82-4FBE-8456-EFA22B4B5D12} => F:\SETUP.EXE Task: {3B406217-8F70-4B2D-8338-B7CF59004FCC} - System32\Tasks\{F1315513-8D95-4CB7-8EEC-342AEE021AD1} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {3D9E3B4A-BC41-4240-9B53-A029B0879F49} - System32\Tasks\{885C54F9-2480-4CB4-816B-6BD95B5293AA} => F:\SETUP.EXE Task: {41F23340-4999-4042-8698-369521E64BE9} - System32\Tasks\{A4001E37-E2F2-4A59-9FD8-6E4B39F3DB0E} => F:\SETUP.EXE Task: {498DE8FB-5F1B-4256-83E5-4B12C475F80A} - System32\Tasks\{D4259D0A-98FF-4AA4-B749-ED6481B23A63} => C:\Downloads\Best of Tivola Schach und Matt (Download)\setup.exe [2013-11-22] () Task: {4DF59CCC-CDA9-493F-BECF-81A48129F146} - System32\Tasks\{8C2F22BD-3C3D-44F8-8F85-1D8B5A625D18} => F:\SETUP.EXE Task: {557E587E-9015-4017-8671-02A822AA6A6B} - System32\Tasks\{188BFF04-4F63-430A-9E4E-CD48445697FA} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {5B9CD33D-6092-481C-B646-6EAEF6335184} - System32\Tasks\{8289F16A-B48E-4ED5-A187-1591330163F6} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {5D391034-5E6D-4AA9-A5A7-1A940BCF1F0D} - System32\Tasks\{5F521D50-BE6C-4164-AEA0-A4579A81728B} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {611FF221-E50D-405B-84E3-A56BCBBCF288} - System32\Tasks\{A5E509D7-FEF5-4257-9404-63926A70506C} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {6923BC74-D775-4E1E-822F-60AF03A82296} - System32\Tasks\{4FDDED90-5B10-40DC-BBD1-8332FA3AC89F} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {6CEDAC11-74E9-483A-BFAC-D8A5A375A48F} - System32\Tasks\{E540C3FF-DEED-4451-86BF-700264129878} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {6DCB2124-F044-4A82-AC4D-E83F65AE4746} - System32\Tasks\{316ED0F1-20EA-4F2F-B433-D3EC1EFB0300} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {726E9B8C-01C6-4C55-900C-3AFBF58D7D18} - System32\Tasks\{FB2B658A-D274-4233-8992-87B65D730919} => C:\Terzio\Fritz und Fertig\Fritz und Fertig\Fritz und Fertig.exe Task: {72B02AF3-91A3-4259-B13A-288B46AC4DC3} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] () Task: {75841618-888F-4B25-ABC2-0A4344D1A5F3} - System32\Tasks\{7D50F052-5BD5-4387-A1CE-E9424AAD64BE} => D:\Download\se1200ubplus.exe Task: {7644173E-0490-4707-A1BA-019A3EE7A561} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-05-05] (Google Inc.) Task: {80B3EC9F-E969-48D7-983C-61DFF913F304} - System32\Tasks\{3F2057F6-9199-4011-A0BA-5EF90E4CB7B4} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {80C21CA9-0077-4854-9D1D-4D49B7265BB2} - System32\Tasks\{3D1FBA97-B09D-4C0B-8FCD-5CA2BF261663} => F:\SETUP.EXE Task: {8AEA8D8C-21FB-4820-8B3F-BF6696CABBAF} - System32\Tasks\{6DADEF36-8EB0-4192-8B38-0903E06A67A1} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {8CCC0220-1CB8-44A4-8686-5A3CAAE0FCBF} - System32\Tasks\{C25269A2-B6E9-43A6-8E03-70F9BF6F3352} => F:\SETUP.EXE Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => Rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation Task: {9BAE4C78-C2FA-4D80-A8B5-751477D12192} - System32\Tasks\{3651CA61-4E68-4D8C-9D46-7A49CB5AD9FC} => C:\Downloads\Best of Tivola Schach und Matt (Download)\setup.exe [2013-11-22] () Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate Task: {AB72FA28-C642-43CD-A433-BEFFC7F00A8C} - System32\Tasks\{37FF828D-5F9C-4A02-BFD1-83D75D509571} => F:\SETUP.EXE Task: {B485FED3-FBB4-44B4-A60D-49071C24FC79} - System32\Tasks\{8558B9C8-5753-4CB2-B72F-BF84801E7620} => F:\SETUP.EXE Task: {B5654BA8-7830-4454-8301-529F8922F4FE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: {B854CA89-CA6C-4DD6-B5D1-EDBB156E323B} - System32\Tasks\{08D8D955-02A5-46A9-AB37-FC921FA8E4CB} => D:\Schach\Best of Tivola Schach und Matt (Download)\setup.exe Task: {C0DD752D-3D15-4AE3-9DAA-A7E80465CA3D} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART Task: {C5B53553-0C3B-4B53-975F-9108B0CA35E9} - System32\Tasks\{A3D1FAEA-3419-4DA6-A268-CEF7ABF03504} => Chrome.exe Task: {C9760686-799A-4E28-BBAA-CCB04BAF024F} - System32\Tasks\{69E22223-E1E9-42C1-8E1E-0A6931954DA7} => C:\Users\Mika\Desktop\Mustek\se1200ubplus.exe Task: {CBDB1554-A885-4173-9F30-92EBEE75B95D} - System32\Tasks\{342DC0D8-7AD8-4A65-AB05-D78010B8AA55} => D:\Download\up_libv13.exe Task: {D1DF70EF-13C3-417A-9CE2-28571670FBE6} - System32\Tasks\{5AD9F9B4-B318-4D9D-B86C-A70B39853955} => F:\SETUP.EXE Task: {D64C7588-D4F2-474E-83B1-6AF5198F95BC} - System32\Tasks\{9C27E291-EA63-4886-914D-A03235A342EE} => D:\Download\se1200ubplus.exe Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations Task: {DD3C016F-761F-4D2B-8027-87174DDAEBFE} - System32\Tasks\{71A77128-7990-44EA-A9BE-6FFB9F651E58} => F:\SETUP.EXE Task: {DD4800FF-B25C-4BE1-99BD-86C069A83EAF} - System32\Tasks\{73419286-43B5-49A7-91F0-CE49C2DD7742} => D:\Schach\Best of Tivola Schach und Matt (Download)\setup.exe Task: {E0E0401D-469D-4F06-90D9-F40E26914FC8} - System32\Tasks\{EF87B88C-C2A2-40C2-9084-AACBF0260620} => D:\Download\up_libv13.exe Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange Task: {E6E9C7DB-403B-49B8-B148-DF6CB80AAEAB} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {ECAF1DA7-11F6-44B8-B8B8-955D6C579D85} - System32\Tasks\{9A44BC33-F719-41BE-ACD2-06FD7E2F0204} => F:\SETUP.EXE Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2009-03-13 05:50 - 2009-03-13 05:50 - 00167936 _____ () C:\Program Files (x86)\PostgreSQL\8.3\bin\LIBPQ.dll 2006-11-06 18:18 - 2006-11-06 18:18 - 00963584 _____ () C:\Program Files (x86)\PostgreSQL\8.3\bin\libxml2.dll 2005-07-20 06:48 - 2005-07-20 06:48 - 00059904 _____ () C:\Program Files (x86)\PostgreSQL\8.3\bin\zlib1.dll 2008-02-04 22:43 - 2008-02-04 22:43 - 00027136 _____ () C:\Program Files (x86)\PostgreSQL\8.3\lib\plugins\plugin_debugger.dll 2013-12-15 08:33 - 2013-12-12 23:19 - 00142848 _____ () D:\Games\Steam\libavresample-1.dll 2013-12-15 08:33 - 2013-11-05 02:12 - 00890592 _____ () D:\Games\Steam\libavutil-52.dll 2013-08-21 13:18 - 2013-12-12 23:04 - 00716800 _____ () D:\Games\Steam\SDL2.dll 2013-09-21 09:35 - 2013-12-13 23:41 - 01138088 _____ () D:\Games\Steam\bin\chromehtml.DLL 2013-09-10 13:20 - 2013-12-12 23:04 - 20625832 _____ () D:\Games\Steam\bin\libcef.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () D:\Games\Steam\bin\avcodec-53.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () D:\Games\Steam\bin\avutil-51.dll 2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () D:\Games\Steam\bin\avformat-53.dll 2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\Mika\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-05 07:08 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-05 07:08 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-05 07:08 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-05 07:08 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-05 07:08 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver" ==================== Faulty Device Manager Devices ============= Name: Officejet Pro 8000 A809 Description: Officejet Pro 8000 A809 Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (12/16/2013 08:36:23 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: rstrui.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7990c Name des fehlerhaften Moduls: rstrui.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7990c Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000001d4f9 ID des fehlerhaften Prozesses: 0x50c Startzeit der fehlerhaften Anwendung: 0xrstrui.exe0 Pfad der fehlerhaften Anwendung: rstrui.exe1 Pfad des fehlerhaften Moduls: rstrui.exe2 Berichtskennung: rstrui.exe3 Error: (12/15/2013 00:00:41 PM) (Source: Windows Backup) (User: ) Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "H:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)" Error: (12/15/2013 10:32:26 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/15/2013 10:32:24 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/15/2013 09:53:15 AM) (Source: .NET Runtime Optimization Service) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003 Error: (12/15/2013 09:09:01 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/15/2013 08:58:42 AM) (Source: MsiInstaller) (User: Mika-PC) Description: Produkt: Microsoft .NET Framework 4 Client Profile -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten. Error: (12/15/2013 08:53:25 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: DUI70.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdf25 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000002bd65 ID des fehlerhaften Prozesses: 0xb34 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Error: (12/13/2013 05:58:26 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (12/12/2013 10:05:27 AM) (Source: Application Hang) (User: ) Description: Programm explorer.exe, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1b74 Startzeit: 01cef7192578a301 Endzeit: 424 Anwendungspfad: C:\Windows\explorer.exe Berichts-ID: 86423fd9-630c-11e3-b565-4061862e10d9 System errors: ============= Error: (12/16/2013 08:57:56 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (12/16/2013 08:56:44 AM) (Source: atikmdag) (User: ) Description: Display is not active Error: (12/16/2013 08:56:44 AM) (Source: atikmdag) (User: ) Description: CPLIB :: General - Invalid Parameter Error: (12/16/2013 08:43:58 AM) (Source: atikmdag) (User: ) Description: Display is not active Error: (12/16/2013 08:43:58 AM) (Source: atikmdag) (User: ) Description: CPLIB :: General - Invalid Parameter Error: (12/16/2013 08:22:56 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (12/15/2013 11:48:18 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DrvAgent64" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (12/15/2013 11:48:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DrvAgent64" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (12/15/2013 11:48:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DrvAgent64" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (12/15/2013 11:48:17 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DrvAgent64" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Microsoft Office Sessions: ========================= Error: (12/16/2013 08:36:23 AM) (Source: Application Error)(User: ) Description: rstrui.exe6.1.7601.175144ce7990crstrui.exe6.1.7601.175144ce7990cc0000005000000000001d4f950c01cefa31346eea67C:\Windows\system32\rstrui.exeC:\Windows\system32\rstrui.exec318b5b5-6624-11e3-8666-4061862e10d9 Error: (12/15/2013 00:00:41 PM) (Source: Windows Backup)(User: ) Description: H:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006) Error: (12/15/2013 10:32:26 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\Download\SoftonicDownloader_fuer_minecraft.exe Error: (12/15/2013 10:32:24 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\Download\SoftonicDownloader_fuer_glary-utilities.exe Error: (12/15/2013 09:53:15 AM) (Source: .NET Runtime Optimization Service)(User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x80070003 mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 Error: (12/15/2013 09:09:01 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\Download\SoftonicDownloader_fuer_glary-utilities.exe Error: (12/15/2013 08:58:42 AM) (Source: MsiInstaller)(User: Mika-PC) Description: Produkt: Microsoft .NET Framework 4 Client Profile -- Fehler 1719. Auf den Windows Installer-Dienst konnte nicht zugegriffen werden. Dies kann auftreten, wenn der Windows Installer nicht richtig installiert wurde. Wenden Sie sich an den Support, um weitere Unterstützung zu erhalten.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (12/15/2013 08:53:25 AM) (Source: Application Error)(User: ) Description: Explorer.EXE6.1.7601.175674d672ee4DUI70.dll6.1.7600.163854a5bdf25c0000005000000000002bd65b3401cef8f9a9d6d3f6C:\Windows\Explorer.EXEC:\Windows\system32\DUI70.dllf9c48ea0-655d-11e3-97af-4061862e10d9 Error: (12/13/2013 05:58:26 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestD:\Download\SoftonicDownloader_fuer_minecraft.exe Error: (12/12/2013 10:05:27 AM) (Source: Application Hang)(User: ) Description: explorer.exe6.1.7601.175671b7401cef7192578a301424C:\Windows\explorer.exe86423fd9-630c-11e3-b565-4061862e10d9 CodeIntegrity Errors: =================================== Date: 2013-01-13 12:07:20.954 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Slotman\gwiopm.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-13 12:07:20.907 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Slotman\gwiopm.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-13 10:35:21.474 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Slotman\gwiopm.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-13 10:35:21.425 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Slotman\gwiopm.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 20:33:54.581 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 20:33:54.534 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 58% Total physical RAM: 4095.18 MB Available physical RAM: 1682.11 MB Total Pagefile: 8188.54 MB Available Pagefile: 5153 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:79.98 GB) (Free:27.8 GB) NTFS Drive d: () (Fixed) (Total:385.68 GB) (Free:140.43 GB) NTFS Drive f: (INTENSO) (Fixed) (Total:2793.83 GB) (Free:2098.78 GB) FAT32 Drive h: (HD-LBU3) (Fixed) (Total:931.28 GB) (Free:611.72 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 1D8A7F10) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=80 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=386 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 932 GB) (Disk ID: 261BA416) Partition 1: (Not Active) - (Size=932 GB) - (Type=0C) Attempted reading MBR returned 0 bytes. Could not read MBR for disk 2. ==================== End Of Log ============================ |
16.12.2013, 19:07 | #4 |
/// the machine /// TB-Ausbilder | WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
17.12.2013, 08:09 | #5 |
| WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet Alles ausgeführt. Hier die Berichte: Anti-Malware Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.16.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Mika :: MIKA-PC [Administrator] 16.12.2013 21:35:49 mbam-log-2013-12-16 (21-35-49).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 604553 Laufzeit: 54 Minute(n), 39 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 1 D:\Download\crypt\router\FRITZ!Box\nc.exe (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.015 - Bericht erstellt am 17/12/2013 um 07:44:34 # Updated 10/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Mika - MIKA-PC # Gestartet von : C:\Users\Mika\Desktop\Download_SysTools\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Program Files (x86)\eSupport.com Ordner Gelöscht : C:\Program Files (x86)\FindLyrics Ordner Gelöscht : C:\Users\Mika\AppData\Local\eSupport.com Ordner Gelöscht : C:\Users\Mika\AppData\Roaming\dvdvideosoftiehelpers Datei Gelöscht : C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\user.js ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_wavelab_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_wavelab_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cryptload_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_cryptload_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_kaspersky-tdsskiller_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_kaspersky-tdsskiller_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_lego-digital-designer_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_lego-digital-designer_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_scrabble_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_scrabble_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_xrecode-ii_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_xrecode-ii_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB} Schlüssel Gelöscht : HKCU\Software\Grand Virtual Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsFan Schlüssel Gelöscht : HKLM\Software\dt soft\daemon tools toolbar ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v25.0.1 (de) [ Datei : C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\prefs.js ] -\\ Google Chrome v31.0.1650.63 [ Datei : C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [4543 octets] - [17/12/2013 07:37:07] AdwCleaner[S0].txt - [4177 octets] - [17/12/2013 07:44:34] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4237 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 7 Home Premium x64 Ran by Mika on 17.12.2013 at 7:52:23,59 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2205588998-460126761-1264454870-1001\Software\sweetim ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Mika\appdata\local\{52C0D988-CC8E-49A5-84C6-1CDB9A21986B} Successfully deleted: [Empty Folder] C:\Users\Mika\appdata\local\{5DE67484-9792-4C7B-BFF6-75D8062C007E} Successfully deleted: [Empty Folder] C:\Users\Mika\appdata\local\{B6CA7AC4-B830-48D8-B47E-3E926D68C495} ~~~ FireFox Successfully deleted the following from C:\Users\Mika\AppData\Roaming\mozilla\firefox\profiles\stoamvwx.default\prefs.js user_pref("extensions.personas.lastselected4", "{\"id\":\"2635\",\"name\":\"Mozilla Firefox\",\"accentcolor\":\"#ffffff\",\"textcolor\":\"#ffffff\",\"header\":\"hxxp://getpers user_pref("lightweightThemes.usedThemes", "[{\"id\":\"378097\",\"name\":\"Mucha Green Profile\",\"headerURL\":\"hxxps://addons.mozilla.org/_files/292006/JC-MuchaHeader3000x200 Emptied folder: C:\Users\Mika\AppData\Roaming\mozilla\firefox\profiles\stoamvwx.default\minidumps [234 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 17.12.2013 at 8:05:37,20 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2013 01 Ran by Mika (administrator) on MIKA-PC on 17-12-2013 08:11:04 Running from C:\Users\Mika\Desktop\Download_SysTools Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (AMD) C:\Windows\System32\atiesrxx.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\8.3\bin\postgres.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe () C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (Valve Corporation) D:\Games\Steam\Steam.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Dropbox, Inc.) C:\Users\Mika\AppData\Roaming\Dropbox\bin\Dropbox.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated) HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor) HKLM-x32\...\Runonce: [AvgUninstallURL] - cmd.exe /c start hxxp://www.avg.de/de.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMgBHADMASwAtADgANwBXAFUAVQAtADIAVABWAEgAQQAtAFgANgBEAEYAOAAtAEwANgBQAEEATgA"&"inst=NwA3AC0ANAAzADEAOAAxADcANAA5ADIALQBCAEEAUgA5AEcAKwAxAC0ARgBMACsAOQAtAEYAOQBNADYAKwAxAC0AWABPADMANgArADEALQBGADkATQA3AEMAKwA1AC0AWABPADkAKwAxAC0ARgA5AE0AMwArADEALQBEAEQAVAArADMAMAAxADQAMAAtAEQARAA5ADAARgArADEALQBTAFQAOQAwAEYAQQBQAFAAKwAxAC0ARgA5ADAATQAxADIAUgArADEALQBWAEkAUAAxADIAKwAxAA"&"prod=90"&"ver=9.0.894 [x] HKCU\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com) HKCU\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [759496 2013-10-16] (Sandboxie Holdings, LLC) HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-09] () HKCU\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1815464 2013-12-17] (Valve Corporation) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2012-10-30] (Renesas Electronics Corporation) HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [1912832 2012-10-04] (Dominik Reichl) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] () HKU\Gast\...\Run: [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime HKU\Gast\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com) HKU\Gast\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [759496 2013-10-16] (Sandboxie Holdings, LLC) HKU\Gast\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Gast\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe HKU\Gast\...\Run: [Steam] - D:\Games\Steam\Steam.exe [1815464 2013-12-17] (Valve Corporation) AppInit_DLLs: C:\Windows\System32\avgrssta.dll [ ] () Startup: C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Mika\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2192C1E54E05CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp URLSearchHook: HKCU - (No Name) - {ff88a983-649d-4207-9336-9b999280b436} - No File SearchScopes: HKLM - DefaultScope value is missing. BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: HistoryTriggerBHO Class - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.) DPF: HKLM {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default FF Homepage: hxxp://www.spiegel.de/ FF NetworkProxy: "ftp", "proxyus4.stealthy.co" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "proxyus4.stealthy.co" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "proxyus4.stealthy.co" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "proxyus4.stealthy.co" FF NetworkProxy: "ssl_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @virtools.com/3DviaPlayer - C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Mika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: Cryptload Link Copier - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{ec8030f7-c20a-464f-9b1e-13a3a9e97399} FF Extension: admin - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\admin@proxy-listen.de.xpi FF Extension: personas - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\personas@christopher.beard.xpi FF Extension: stealthyextension - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\stealthyextension@gmail.com.xpi FF Extension: Adblock Plus - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: dta - C:\Users\Mika\AppData\Roaming\Mozilla\Firefox\Profiles\stoamvwx.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HomePage: hxxp://www.spiegel.de/ CHR RestoreOnStartup: "hxxp://www.spiegel.de/" CHR DefaultSearchKeyword: google.de CHR DefaultSearchProvider: Google CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Windows Genuine Advantage) - C:\Program Files (x86)\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll No File CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (3DVIA player) - C:\Program Files (x86)\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes) CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Unity Player) - C:\Users\Mika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\Mika\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll No File CHR Extension: (Angry Birds) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0 CHR Extension: (Google Docs) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (ChromeTheme.net) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnknhbkmpamdndidlhakifmkakkphjfk\1_0 CHR Extension: (AdBlock) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Plants vs Zombies) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina\1.0.5_0 CHR Extension: (Google Wallet) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Mika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 a2AntiMalware; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2service.exe [4161512 2013-12-04] (Emsisoft GmbH) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.) R2 pgsql-8.3; C:\Program Files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe [65536 2009-03-13] (PostgreSQL Global Development Group) R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [186056 2013-10-16] (Sandboxie Holdings, LLC) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia) S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia) ==================== Drivers (Whitelisted) ==================== R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [70960 2013-08-24] (Emsisoft GmbH) R1 A2DDA; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2ddax64.sys [26176 2013-03-27] (Emsisoft GmbH) R1 a2injectiondriver; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH) R1 a2util; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2util64.sys [17384 2013-03-27] (Emsisoft GmbH) S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2012-03-07] (Google Inc) S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-03-06] (LG Electronics Inc.) S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-03-06] (LG Electronics Inc.) S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2012-03-06] (LG Electronics Inc.) R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2009-12-06] () R3 cleanhlp; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH) S3 gwiopm; C:\Program Files (x86)\Slotman\gwiopm.sys [3904 1998-06-03] () R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2013-12-15] (REALiX(tm)) R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.) R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.) R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2009-12-06] () S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation) S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation) S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation) S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation) S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation) S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation) S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation) S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation) S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation) S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation) S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation) S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation) S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation) S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [200552 2013-10-16] (Sandboxie Holdings, LLC) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2009-12-06] (Duplex Secure Ltd.) S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] () S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2007-10-25] () U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [x] S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-17 08:05 - 2013-12-17 08:05 - 00001740 _____ C:\Users\Mika\Desktop\JRT.txt 2013-12-17 07:52 - 2013-12-17 07:52 - 00000000 ____D C:\Windows\ERUNT 2013-12-17 07:37 - 2013-12-17 07:44 - 00000000 ____D C:\AdwCleaner 2013-12-16 18:35 - 2013-12-17 07:46 - 00000168 _____ C:\Windows\setupact.log 2013-12-16 18:35 - 2013-12-16 18:35 - 00000000 _____ C:\Windows\setuperr.log 2013-12-16 18:34 - 2013-12-17 07:15 - 00001530 _____ C:\Windows\PFRO.log 2013-12-16 10:16 - 2013-12-17 08:10 - 00000000 ____D C:\FRST 2013-12-16 09:03 - 2013-12-16 09:03 - 00001069 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-15 23:48 - 2013-12-15 23:48 - 00001154 _____ C:\Users\Mika\Desktop\Find Drivers with DriverAgent.lnk 2013-12-15 17:02 - 2013-12-15 17:02 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS 2013-12-15 17:02 - 2013-12-15 17:02 - 00000000 ____D C:\Program Files\HWiNFO64 2013-12-15 16:37 - 2013-12-15 17:23 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-12-15 10:32 - 2013-10-25 15:16 - 00675988 _____ C:\Users\Mika\Desktop\Minecraft.exe 2013-12-15 10:02 - 2013-12-17 08:11 - 00000000 ____D C:\Users\Mika\Desktop\Download_SysTools 2013-12-15 09:36 - 2013-12-15 09:36 - 00000000 ____D C:\Windows\pss 2013-12-15 09:11 - 2013-12-15 09:57 - 00000000 ____D C:\ProgramData\GlarySoft 2013-12-15 09:10 - 2013-12-15 09:57 - 00000000 ____D C:\Users\Mika\AppData\Roaming\GlarySoft 2013-12-11 23:42 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 23:42 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 23:42 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 23:42 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 23:41 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-11 23:41 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-11 23:41 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-11 23:41 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-11 23:41 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-11 23:41 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-11 23:41 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-11 23:41 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-11 23:41 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-11 23:41 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-11 23:41 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-11 23:41 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-11 23:41 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-11 23:41 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-11 23:41 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-11 23:41 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-11 23:41 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-11 23:41 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-11 23:41 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-11 23:41 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-11 23:41 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-11 23:41 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-11 23:41 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-11 23:41 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-11 23:41 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-11 23:41 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-11 23:41 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-11 23:41 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-11 23:41 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-11 23:41 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-11 23:41 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 22:06 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 22:06 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 22:06 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 22:06 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 22:06 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 22:06 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 22:06 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 22:06 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 22:06 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 22:06 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 22:06 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 22:06 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 22:06 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 22:06 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 22:06 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 22:06 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 22:06 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 22:06 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 22:06 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-11 20:25 - 2013-12-12 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-10 21:39 - 2013-11-16 00:28 - 00003330 _____ C:\Users\Mika\Desktop\Öko-Test-DDL.txt 2013-12-09 18:14 - 2013-12-15 23:05 - 00000000 ____D C:\Users\Mika\AppData\Roaming\.minecraft 2013-11-29 11:30 - 2013-11-29 11:32 - 00000010 _____ C:\Users\Mika\Desktop\shufaPW.txt 2013-11-28 19:46 - 2013-12-09 18:02 - 00000000 ____D C:\ProgramData\Oracle 2013-11-26 08:58 - 2013-11-26 08:58 - 00000000 ____D C:\ProgramData\McAfee 2013-11-24 22:37 - 2013-11-24 22:37 - 00002990 _____ C:\Windows\System32\Tasks\{D4259D0A-98FF-4AA4-B749-ED6481B23A63} 2013-11-24 22:36 - 2013-11-24 22:36 - 00002990 _____ C:\Windows\System32\Tasks\{3651CA61-4E68-4D8C-9D46-7A49CB5AD9FC} 2013-11-24 22:20 - 2013-11-24 22:20 - 00003238 _____ C:\Windows\System32\Tasks\{17AADBB3-F0D8-42DD-958E-DC8B5A8AAE56} 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Users\Mika\AppData\Local\AMD 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\ProgramData\ATI 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD APP 2013-11-23 11:35 - 2013-11-23 11:35 - 00000000 ____D C:\Program Files\ATI Technologies 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Roaming\ATI 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Local\ATI 2013-11-23 11:30 - 2013-11-23 11:30 - 00000000 ____D C:\AMD 2013-11-22 09:06 - 2013-11-22 09:07 - 00350472 _____ C:\Users\Mika\Documents\cc_20131122_090645.reg 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{73419286-43B5-49A7-91F0-CE49C2DD7742} 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{08D8D955-02A5-46A9-AB37-FC921FA8E4CB} 2013-11-21 20:10 - 2013-11-21 20:10 - 00003230 _____ C:\Windows\System32\Tasks\{08DA5BB2-C150-44EE-A0BE-DD42671A1401} 2013-11-21 19:54 - 2013-11-21 19:54 - 00003278 _____ C:\Windows\System32\Tasks\{ABB16331-6BF4-4EE3-BAD5-6EFB4B3AB4EF} 2013-11-21 15:32 - 2013-11-21 15:32 - 00000035 _____ C:\Users\Mika\Desktop\Schach.txt 2013-11-19 10:28 - 2013-12-16 09:01 - 00000000 ____D C:\Users\Mika\AppData\Local\CrashDumps 2013-11-19 09:53 - 2013-11-19 09:53 - 00000000 ____D C:\Users\Mika\AppData\Roaming\MSI 2013-11-19 09:28 - 2013-11-19 09:28 - 00000000 ____D C:\Program Files (x86)\Setup Files 2013-11-19 09:27 - 2010-11-29 04:50 - 00044672 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys 2013-11-19 09:26 - 2013-11-23 11:36 - 00000000 ____D C:\ProgramData\AMD 2013-11-19 09:26 - 2013-11-23 11:34 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-11-19 09:26 - 2013-11-19 09:26 - 00000000 ____D C:\Program Files\ATI 2013-11-19 09:26 - 2010-06-17 17:15 - 00016440 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\Drivers\AtiPcie64.sys 2013-11-19 09:26 - 2010-02-18 09:18 - 00046136 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox64.sys 2013-11-19 09:17 - 2013-11-19 09:18 - 00000189 _____ C:\mylog.log 2013-11-19 09:17 - 2013-04-10 11:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2013-11-19 09:17 - 2013-04-10 11:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2013-11-19 09:16 - 2013-11-19 09:17 - 00002479 _____ C:\RHDSetup.log 2013-11-19 09:16 - 2013-11-19 09:17 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Program Files\Realtek 2013-11-19 09:16 - 2013-09-10 21:40 - 03640024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2013-11-19 09:16 - 2013-09-10 19:56 - 00644705 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT 2013-11-19 09:16 - 2013-09-10 16:16 - 00148696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2013-11-19 09:16 - 2013-09-10 11:02 - 32861696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2013-11-19 09:16 - 2013-09-09 15:32 - 05681192 _____ C:\Windows\system32\Drivers\rtvienna.dat 2013-11-19 09:16 - 2013-09-05 17:23 - 04933328 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll 2013-11-19 09:16 - 2013-09-05 17:22 - 00848184 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll 2013-11-19 09:16 - 2013-09-05 15:52 - 02586328 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2013-11-19 09:16 - 2013-09-03 11:16 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2013-11-19 09:16 - 2013-08-24 03:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2013-11-19 09:16 - 2013-08-20 20:17 - 02809048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2013-11-19 09:16 - 2013-08-20 17:37 - 00605496 _____ C:\Windows\system32\audioLibVc.dll 2013-11-19 09:16 - 2013-08-14 16:36 - 01325312 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2013-11-19 09:16 - 2013-08-14 16:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2013-11-19 09:16 - 2013-08-14 16:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2013-11-19 09:16 - 2013-08-14 16:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2013-11-19 09:16 - 2013-08-14 16:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2013-11-19 09:16 - 2013-08-07 17:41 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2013-11-19 09:16 - 2013-08-07 17:34 - 00765184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2013-11-19 09:16 - 2013-08-06 09:47 - 00947248 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 06219096 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 01908568 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 00312152 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2013-11-19 09:16 - 2013-08-06 04:56 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2013-11-19 09:16 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2013-11-19 09:16 - 2013-08-02 20:16 - 01005784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2013-11-19 09:16 - 2013-07-28 10:48 - 27518208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2013-11-19 09:16 - 2013-07-26 14:05 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2013-11-19 09:16 - 2013-07-24 10:07 - 02032896 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2013-11-19 09:16 - 2013-07-23 15:40 - 03610880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2013-11-19 09:16 - 2013-07-23 15:40 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 14048512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 01916672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 00922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2013-11-19 09:16 - 2013-07-23 15:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2013-11-19 09:16 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2013-11-19 09:16 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2013-11-19 09:16 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2013-11-19 09:16 - 2013-06-21 11:01 - 00109848 _____ C:\Windows\system32\AcpiServiceVnA64.dll 2013-11-19 09:16 - 2013-06-05 21:42 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2013-11-19 09:16 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2013-11-19 09:16 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2013-11-19 09:16 - 2013-02-20 18:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2013-11-19 09:16 - 2012-10-02 14:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2013-11-19 09:16 - 2012-10-02 14:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2013-11-19 09:16 - 2012-10-02 14:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2013-11-19 09:16 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2013-11-19 09:16 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2013-11-19 09:16 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2013-11-19 09:16 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2013-11-19 09:16 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2013-11-19 09:16 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2013-11-19 09:16 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2013-11-19 09:16 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2013-11-19 09:16 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2013-11-19 09:16 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2013-11-19 09:16 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2013-11-19 09:16 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2013-11-19 09:16 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2013-11-19 09:16 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2013-11-19 09:16 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2013-11-19 09:16 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2013-11-19 09:16 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2013-11-19 09:16 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2013-11-19 09:16 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2013-11-19 09:11 - 2013-11-20 08:27 - 00000000 ____D C:\ProgramData\Norton 2013-11-19 09:10 - 2013-11-19 09:10 - 00000000 ____D C:\ProgramData\Trend Micro 2013-11-19 08:55 - 2013-12-15 08:58 - 00000000 ____D C:\Program Files (x86)\MSI 2013-11-19 08:55 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll 2013-11-18 09:45 - 2013-11-19 16:57 - 00000789 _____ C:\Users\Mika\Desktop\HArdware.txt 2013-11-18 08:42 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-18 08:37 - 2013-11-18 08:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-18 08:36 - 2013-11-18 08:36 - 00002172 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-11-17 08:03 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-17 08:03 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-17 08:03 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-17 08:03 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-17 08:03 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-17 08:03 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-17 08:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-17 08:03 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-17 08:03 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-17 08:02 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-17 08:02 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-17 08:02 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-17 08:02 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-17 08:02 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-17 08:02 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-17 08:02 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-17 08:02 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-17 08:02 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-17 08:02 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-17 08:02 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-17 08:02 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-17 08:02 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-17 08:02 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-17 08:02 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-17 08:02 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-17 08:02 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-17 08:02 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-17 08:02 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-17 08:02 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-17 08:02 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys ==================== One Month Modified Files and Folders ======= 2013-12-17 08:11 - 2013-12-15 10:02 - 00000000 ____D C:\Users\Mika\Desktop\Download_SysTools 2013-12-17 08:10 - 2013-12-16 10:16 - 00000000 ____D C:\FRST 2013-12-17 08:06 - 2013-01-12 08:39 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware 2013-12-17 08:06 - 2010-05-05 15:52 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-17 08:05 - 2013-12-17 08:05 - 00001740 _____ C:\Users\Mika\Desktop\JRT.txt 2013-12-17 07:56 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-17 07:56 - 2009-07-14 05:45 - 00015120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-17 07:52 - 2013-12-17 07:52 - 00000000 ____D C:\Windows\ERUNT 2013-12-17 07:50 - 2012-03-13 05:29 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Dropbox 2013-12-17 07:49 - 2010-06-08 16:51 - 01865175 _____ C:\Windows\WindowsUpdate.log 2013-12-17 07:47 - 2010-05-05 15:52 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-17 07:46 - 2013-12-16 18:35 - 00000168 _____ C:\Windows\setupact.log 2013-12-17 07:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-17 07:44 - 2013-12-17 07:37 - 00000000 ____D C:\AdwCleaner 2013-12-17 07:26 - 2013-01-08 16:18 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-17 07:15 - 2013-12-16 18:34 - 00001530 _____ C:\Windows\PFRO.log 2013-12-17 07:13 - 2009-12-04 15:59 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1A04580C-E42B-4F18-9AD8-4D7196767767} 2013-12-16 18:35 - 2013-12-16 18:35 - 00000000 _____ C:\Windows\setuperr.log 2013-12-16 18:31 - 2012-01-02 15:01 - 00960000 ___SH C:\Users\Mika\Desktop\Thumbs.db 2013-12-16 12:27 - 2009-12-30 13:14 - 00007666 _____ C:\Users\Mika\AppData\Local\Resmon.ResmonCfg 2013-12-16 09:03 - 2013-12-16 09:03 - 00001069 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-16 09:03 - 2010-06-07 20:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-16 09:01 - 2013-11-19 10:28 - 00000000 ____D C:\Users\Mika\AppData\Local\CrashDumps 2013-12-16 08:56 - 2009-12-01 19:57 - 00000000 ____D C:\Users\postgres 2013-12-16 08:52 - 2013-01-12 10:36 - 00002940 _____ C:\Windows\Sandboxie.ini 2013-12-16 08:52 - 2010-07-08 18:23 - 01593956 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-12-16 08:52 - 2009-07-14 18:58 - 00699416 _____ C:\Windows\system32\perfh007.dat 2013-12-16 08:52 - 2009-07-14 18:58 - 00149556 _____ C:\Windows\system32\perfc007.dat 2013-12-16 08:52 - 2009-07-14 06:13 - 01593956 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-16 08:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-15 23:52 - 2011-08-26 16:10 - 00000000 ____D C:\Program Files (x86)\Java 2013-12-15 23:48 - 2013-12-15 23:48 - 00001154 _____ C:\Users\Mika\Desktop\Find Drivers with DriverAgent.lnk 2013-12-15 23:05 - 2013-12-09 18:14 - 00000000 ____D C:\Users\Mika\AppData\Roaming\.minecraft 2013-12-15 21:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-15 17:23 - 2013-12-15 16:37 - 00000000 ____D C:\ProgramData\SecTaskMan 2013-12-15 17:02 - 2013-12-15 17:02 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS 2013-12-15 17:02 - 2013-12-15 17:02 - 00000000 ____D C:\Program Files\HWiNFO64 2013-12-15 09:57 - 2013-12-15 09:11 - 00000000 ____D C:\ProgramData\GlarySoft 2013-12-15 09:57 - 2013-12-15 09:10 - 00000000 ____D C:\Users\Mika\AppData\Roaming\GlarySoft 2013-12-15 09:36 - 2013-12-15 09:36 - 00000000 ____D C:\Windows\pss 2013-12-15 09:14 - 2012-03-13 05:30 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2013-12-15 09:14 - 2011-11-13 09:23 - 00000000 ____D C:\Users\Mika\Desktop\Konsti Games 2013-12-15 08:58 - 2013-11-19 08:55 - 00000000 ____D C:\Program Files (x86)\MSI 2013-12-15 06:02 - 2013-08-05 10:10 - 00000000 ____D C:\Windows\system32\MRT 2013-12-15 06:00 - 2009-12-02 03:58 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-13 07:01 - 2012-05-03 03:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-12 08:47 - 2013-12-11 20:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-12 08:44 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-12 08:43 - 2009-07-14 05:45 - 04885072 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 12:32 - 2009-12-01 20:21 - 00000000 ____D C:\Users\Mika\AppData\Local\PokerStars.EU 2013-12-11 12:26 - 2013-01-08 16:18 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 12:26 - 2013-01-08 16:18 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-11 12:26 - 2013-01-08 16:18 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 08:19 - 2013-01-16 06:08 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-12-10 08:18 - 2009-12-01 19:44 - 00000000 ____D C:\Program Files\WinRAR 2013-12-09 21:09 - 2009-12-06 17:42 - 00000000 ____D C:\Users\Mika\Documents\My Games 2013-12-09 18:02 - 2013-11-28 19:46 - 00000000 ____D C:\ProgramData\Oracle 2013-12-05 19:56 - 2009-12-01 19:16 - 00000000 ____D C:\Users\Mika\AppData\Roaming\Skype 2013-12-05 10:46 - 2012-10-26 17:01 - 00000000 ____D C:\Program Files (x86)\Daedalic Entertainment 2013-12-05 10:45 - 2013-09-06 16:37 - 00000000 ____D C:\Program Files\ComicRack 2013-12-05 07:08 - 2013-01-12 10:05 - 00002135 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-05 02:01 - 2010-05-05 15:52 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-05 02:01 - 2010-05-05 15:52 - 00003850 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-04 17:05 - 2013-10-08 18:57 - 00000000 ____D C:\Users\Mika\Desktop\BLA BLA 2013-11-29 11:32 - 2013-11-29 11:30 - 00000010 _____ C:\Users\Mika\Desktop\shufaPW.txt 2013-11-29 09:34 - 2013-07-28 08:45 - 00000977 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-29 09:34 - 2010-06-07 21:15 - 00000000 ____D C:\Program Files (x86)\CCleaner 2013-11-26 21:08 - 2012-02-20 17:26 - 00000000 ____D C:\Users\Mika\AppData\Roaming\vlc 2013-11-26 12:54 - 2013-12-11 23:41 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 11:19 - 2013-12-11 23:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 11:18 - 2013-12-11 23:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 11:11 - 2013-12-11 23:41 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 10:48 - 2013-12-11 23:41 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 10:46 - 2013-12-11 23:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 10:41 - 2013-12-11 23:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 10:29 - 2013-12-11 23:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 10:27 - 2013-12-11 23:41 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 10:23 - 2013-12-11 23:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 10:21 - 2013-12-11 23:41 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 10:18 - 2013-12-11 23:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 10:18 - 2013-12-11 23:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 10:16 - 2013-12-11 23:41 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 09:57 - 2013-12-11 23:41 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 09:38 - 2013-12-11 23:41 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 09:38 - 2013-12-11 23:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 09:35 - 2013-12-11 23:41 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 09:32 - 2013-12-11 23:41 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 09:28 - 2013-12-11 23:41 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 09:16 - 2013-12-11 23:41 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 09:02 - 2013-12-11 23:41 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 08:58 - 2013-11-26 08:58 - 00000000 ____D C:\ProgramData\McAfee 2013-11-26 08:58 - 2009-12-03 17:30 - 00000000 ____D C:\Users\Mika\AppData\Local\Adobe 2013-11-26 08:48 - 2013-12-11 23:41 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 08:32 - 2013-12-11 23:41 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 08:26 - 2013-12-11 23:41 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 08:07 - 2013-12-11 23:41 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 07:40 - 2013-12-11 23:41 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 07:34 - 2013-12-11 23:41 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 07:34 - 2013-12-11 23:41 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 07:33 - 2013-12-11 23:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 07:27 - 2013-12-11 23:41 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-25 08:38 - 2009-12-01 19:15 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-25 08:38 - 2009-12-01 19:15 - 00000000 ____D C:\ProgramData\Skype 2013-11-24 22:37 - 2013-11-24 22:37 - 00002990 _____ C:\Windows\System32\Tasks\{D4259D0A-98FF-4AA4-B749-ED6481B23A63} 2013-11-24 22:36 - 2013-11-24 22:36 - 00002990 _____ C:\Windows\System32\Tasks\{3651CA61-4E68-4D8C-9D46-7A49CB5AD9FC} 2013-11-24 22:20 - 2013-11-24 22:20 - 00003238 _____ C:\Windows\System32\Tasks\{17AADBB3-F0D8-42DD-958E-DC8B5A8AAE56} 2013-11-23 19:26 - 2013-12-11 22:06 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-11-23 18:47 - 2013-12-11 22:06 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Users\Mika\AppData\Local\AMD 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\ProgramData\ATI 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-11-23 11:36 - 2013-11-23 11:36 - 00000000 ____D C:\Program Files (x86)\AMD APP 2013-11-23 11:36 - 2013-11-19 09:26 - 00000000 ____D C:\ProgramData\AMD 2013-11-23 11:35 - 2013-11-23 11:35 - 00000000 ____D C:\Program Files\ATI Technologies 2013-11-23 11:34 - 2013-11-19 09:26 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Roaming\ATI 2013-11-23 11:32 - 2013-11-23 11:32 - 00000000 ____D C:\Users\Mika\AppData\Local\ATI 2013-11-23 11:30 - 2013-11-23 11:30 - 00000000 ____D C:\AMD 2013-11-22 17:50 - 2009-12-06 16:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-11-22 09:07 - 2013-11-22 09:06 - 00350472 _____ C:\Users\Mika\Documents\cc_20131122_090645.reg 2013-11-22 09:04 - 2009-12-01 16:24 - 00000000 ____D C:\Windows\Panther 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{73419286-43B5-49A7-91F0-CE49C2DD7742} 2013-11-22 09:03 - 2013-11-22 09:03 - 00002984 _____ C:\Windows\System32\Tasks\{08D8D955-02A5-46A9-AB37-FC921FA8E4CB} 2013-11-21 20:10 - 2013-11-21 20:10 - 00003230 _____ C:\Windows\System32\Tasks\{08DA5BB2-C150-44EE-A0BE-DD42671A1401} 2013-11-21 19:54 - 2013-11-21 19:54 - 00003278 _____ C:\Windows\System32\Tasks\{ABB16331-6BF4-4EE3-BAD5-6EFB4B3AB4EF} 2013-11-21 15:32 - 2013-11-21 15:32 - 00000035 _____ C:\Users\Mika\Desktop\Schach.txt 2013-11-20 08:39 - 2013-09-27 16:15 - 00001026 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-20 08:27 - 2013-11-19 09:11 - 00000000 ____D C:\ProgramData\Norton 2013-11-19 16:57 - 2013-11-18 09:45 - 00000789 _____ C:\Users\Mika\Desktop\HArdware.txt 2013-11-19 09:53 - 2013-11-19 09:53 - 00000000 ____D C:\Users\Mika\AppData\Roaming\MSI 2013-11-19 09:28 - 2013-11-19 09:28 - 00000000 ____D C:\Program Files (x86)\Setup Files 2013-11-19 09:26 - 2013-11-19 09:26 - 00000000 ____D C:\Program Files\ATI 2013-11-19 09:18 - 2013-11-19 09:17 - 00000189 _____ C:\mylog.log 2013-11-19 09:17 - 2013-11-19 09:16 - 00002479 _____ C:\RHDSetup.log 2013-11-19 09:17 - 2013-11-19 09:16 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-11-19 09:16 - 2013-11-19 09:16 - 00000000 ____D C:\Program Files\Realtek 2013-11-19 09:10 - 2013-11-19 09:10 - 00000000 ____D C:\ProgramData\Trend Micro 2013-11-19 03:33 - 2013-01-12 08:54 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-18 09:04 - 2009-12-01 16:37 - 00001421 _____ C:\Users\Mika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-18 08:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-18 08:37 - 2013-11-18 08:37 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-18 08:37 - 2013-11-18 08:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-18 08:37 - 2013-11-18 08:37 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-18 08:37 - 2013-11-18 08:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-18 08:37 - 2013-11-18 08:37 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-18 08:37 - 2013-11-18 08:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-18 08:37 - 2013-11-10 18:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-18 08:37 - 2013-05-08 19:01 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-18 08:36 - 2013-11-18 08:36 - 00002172 _____ C:\Users\Public\Desktop\Google Earth.lnk 2013-11-18 08:35 - 2010-05-05 15:52 - 00000000 ____D C:\Program Files (x86)\Google ZeroAccess: C:\Users\Mika\AppData\Local\33e51e35 C:\Users\Mika\AppData\Local\33e51e35\@ Some content of TEMP: ==================== C:\Users\Mika\AppData\Local\Temp\Quarantine.exe C:\Users\Mika\AppData\Local\Temp\v-bates.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-10 08:58 ==================== End Of Log ============================ Geändert von mika78 (17.12.2013 um 08:13 Uhr) Grund: FRST log vergessen |
18.12.2013, 08:47 | #6 |
/// the machine /// TB-Ausbilder | WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastetESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet |
18.12.2013, 14:46 | #7 |
| WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet ESET Log Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=ed5d6f3ba994584fbf63b1b9cf6b486c # engine=16310 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-18 12:13:09 # local_time=2013-12-18 01:13:09 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 20496 138998639 0 0 # scanned=402926 # found=0 # cleaned=0 # scan_time=8251 Code:
ATTFilter Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Emsisoft Anti-Malware Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Secunia PSI (3.0.0.4001) Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 11.9.900.170 Adobe Reader XI Mozilla Firefox (25.0.1) Mozilla Thunderbird (24.2.0) Google Chrome 31.0.1650.57 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` EMSISOFT Anti-Malware a2service.exe EMSISOFT Anti-Malware a2guard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Falls man (du) hier keine Ratschläge mehr hast, vielen Dank für die Umfangreiche Hilfe. |
19.12.2013, 10:13 | #8 |
/// the machine /// TB-Ausbilder | WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet Gewusst wie: Durchführen eines sauberen Neustarts in Windows Mach mal nen Clean Boot und schau wie die Auslastung ist
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu WIN 7 Physikalischer Speicher ständig zu 45 - 60% ausgelastet |
.html, 100%, anhang, ausgelastet, auswertung, belegt, bis zu 100%, cpu, erstell, erstellt, hälfte, langsam, problem, ram, rechner, schnell, schritte, speicher, tagen, taskma, taskmanager, thema, win, win 7, windows |