| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Ich bin jetzt auch im Club. Weisser Bildschirm nach Start (Windows 7)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
28.05.2014, 21:51
| #16 |
 |  Ich bin jetzt auch im Club. Weisser Bildschirm nach Start (Windows 7)FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02 Ran by etneo (administrator) on ETNEO-PC on 28-05-2014 22:31:51 Running from C:\Users\etneo\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Italian Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.) C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\MSK\msksrver.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (McAfee, Inc.) C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe (CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (McAfee, Inc.) C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\MSC\mcsvrcnt.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\MSC\mcupdui.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation) HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [823840 2009-09-30] (Acer Incorporated) HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7982112 2009-07-28] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1808168 2009-06-18] (Synaptics Incorporated) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.) HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.) HKLM\...\Run: [PLFSetL] => C:\Windows\\PLFSetL.exe HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1157128 2009-07-27] (Dritek System Inc.) HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.) HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation) HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [419112 2009-10-29] (CyberLink Corp.) HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-10-22] (Acer Corp.) HKLM-x32\...\Run: [mcagent_exe] => C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe [1218008 2009-10-29] (McAfee, Inc.) HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1135912 2010-04-13] () HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296 2012-01-17] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [162408 2012-11-29] (Geek Software GmbH) HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-05-24] (RealNetworks, Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\.DEFAULT\...\RunOnce: [SPReview] - "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 HKU\S-1-5-21-2978162629-1010601065-2023174795-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-10-29] (Google Inc.) HKU\S-1-5-21-2978162629-1010601065-2023174795-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent HKU\S-1-5-21-2978162629-1010601065-2023174795-1001\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] () HKU\S-1-5-21-2978162629-1010601065-2023174795-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-08-18] (Electronic Arts) HKU\S-1-5-21-2978162629-1010601065-2023174795-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [18643560 2013-03-01] (Skype Technologies S.A.) HKU\S-1-5-21-2978162629-1010601065-2023174795-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466144 2014-04-01] (Sony) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0810&m=aspire_7715z&r=27360210p415l0374z185t49l2e726 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA677B144A27ACC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File URLSearchHook: HKCU - (No Name) - {18c2d815-3a16-4493-9004-77949214a70e} - No File SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_itCH365CH365 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?} SearchScopes: HKCU - {1386F9A4-86AD-43A6-A775-677D3BE16982} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=C6145A69-4637-4BA4-A8C9-3089D3EE4298&apn_sauid=8EA79C6C-CDC7-46C6-9DA6-10FD79C47AC0 SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_itCH365CH365 BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files (x86)\McAfee\MSK\mskapbho64.dll () BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files (x86)\McAfee\MSK\mskapbho.dll () BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.) BHO-x32: Guida per l'accesso a Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKCU - No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File Toolbar: HKCU - No Name - {18C2D815-3A16-4493-9004-77949214A70E} - No File Toolbar: HKCU - No Name - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - No File Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: HKLM-x32 {4A85DBE0-BFB2-4119-8401-186A7C6EB653} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/mjss/MJSS.cab109791.cab DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\etneo\AppData\Roaming\Mozilla\Firefox\Profiles\elx7qbww.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.5.1 - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @veetle.com/vbp;version=0.9.17 - C:\Program Files (x86)\Veetle\VLCBroadcast\npvbp.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer) FF SearchPlugin: C:\Users\etneo\AppData\Roaming\Mozilla\Firefox\Profiles\elx7qbww.default\searchplugins\messenger-plus-live-switzerland--de-customized-web-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: IE Tab - C:\Users\etneo\AppData\Roaming\Mozilla\Firefox\Profiles\elx7qbww.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} [2013-05-19] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\etneo\AppData\Roaming\Mozilla\Firefox\Profiles\elx7qbww.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20] FF Extension: Skype extension for Firefox - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2014-05-25] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2009-10-29] FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-05-24] Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR DefaultSearchKeyword: questscan.com CHR DefaultSearchProvider: QuestScan CHR DefaultSearchURL: hxxp://www.questscan.com/?tmp=redir_bho_bing&prt=QstscanPB&keywords={searchTerms} CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\pdf.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\gcswf32.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll No File CHR Plugin: (Babylon Chrome Plugin) - C:\Users\etneo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll No File CHR Plugin: (McAfee SiteAdvisor) - C:\Users\etneo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\McChPlg.dll (McAfee, Inc.) CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (HBLite Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll No File CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) CHR Plugin: (Veetle Broadcaster Plugin) - C:\Program Files (x86)\Veetle\VLCBroadcast\npvbp.dll (Veetle Inc) CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Extension: (SiteAdvisor) - C:\Users\etneo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2012-07-06] CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\etneo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-07-06] CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-04-16] ==================== Services (Whitelisted) ================= R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [140424 2014-04-23] (McAfee, Inc.) R2 mcmscsvc; C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe [865832 2009-10-29] (McAfee, Inc.) R2 McNASvc; C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe [2482848 2009-07-07] (McAfee, Inc.) S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [696848 2009-10-28] (McAfee, Inc.) R2 McProxy; C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe [359952 2009-07-08] (McAfee, Inc.) R2 McShield; C:\Program Files\McAfee\VirusScan\Mcshield.exe [155456 2009-11-04] (McAfee, Inc.) R3 McSysmon; C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe [606736 2009-11-04] (McAfee, Inc.) R2 MpfService; C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe [895696 2009-10-27] (McAfee, Inc.) R2 MSK80Service; C:\Program Files (x86)\McAfee\MSK\MskSrver.exe [26640 2009-10-02] (McAfee, Inc.) S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.) R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] () ==================== Drivers (Whitelisted) ==================== R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-05-28] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [102472 2009-11-04] (McAfee, Inc.) R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [308296 2009-11-04] (McAfee, Inc.) S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [40904 2009-11-04] (McAfee, Inc.) R3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [49480 2009-11-04] (McAfee, Inc.) R1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [176144 2009-04-09] (McAfee, Inc.) S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-02] (Realtek Semiconductor Corp.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-28 22:31 - 2014-05-28 22:31 - 00029570 _____ () C:\Users\etneo\Desktop\FRST.txt 2014-05-27 21:33 - 2014-05-27 21:33 - 00002030 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2014-05-26 15:53 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-26 15:53 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-26 15:53 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-26 15:53 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-26 15:53 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-26 15:53 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-26 14:01 - 2014-05-26 14:01 - 00000000 __SHD () C:\Users\etneo\AppData\Local\EmieUserList 2014-05-26 14:01 - 2014-05-26 14:01 - 00000000 __SHD () C:\Users\etneo\AppData\Local\EmieSiteList 2014-05-26 13:10 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-26 08:49 - 2014-05-26 08:49 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-05-26 08:48 - 2014-05-26 08:48 - 02347384 _____ (ESET) C:\Users\etneo\Desktop\esetsmartinstaller_deu.exe 2014-05-26 08:28 - 2014-05-26 08:28 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-26 03:21 - 2013-05-10 07:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-05-26 03:21 - 2013-05-10 07:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-05-26 03:21 - 2013-05-10 06:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-05-26 03:21 - 2013-05-10 06:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-05-26 03:11 - 2014-05-26 15:48 - 01636074 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-05-26 03:04 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-05-26 02:55 - 2014-05-26 02:55 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-26 02:54 - 2014-05-26 02:54 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-26 02:54 - 2014-05-26 02:54 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-26 02:54 - 2014-05-26 02:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-26 02:54 - 2014-05-26 02:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-26 02:54 - 2014-05-26 02:54 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-26 02:54 - 2014-05-26 02:54 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-26 02:54 - 2014-05-26 02:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-26 02:54 - 2014-05-26 02:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-26 02:44 - 2014-05-26 03:04 - 00012765 _____ () C:\Windows\IE11_main.log 2014-05-26 01:44 - 2014-05-26 01:44 - 00003255 _____ () C:\Users\etneo\Desktop\mbam.txt 2014-05-26 00:25 - 2014-05-28 22:15 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-26 00:25 - 2014-05-26 00:25 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-26 00:25 - 2014-05-26 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-26 00:25 - 2014-05-26 00:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-26 00:25 - 2014-05-26 00:25 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-26 00:25 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-26 00:25 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-26 00:25 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-26 00:18 - 2014-05-26 00:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\etneo\Desktop\mbam-setup-2.0.2.1012.exe 2014-05-26 00:03 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-26 00:01 - 2014-05-26 00:05 - 00000000 ____D () C:\AdwCleaner 2014-05-26 00:00 - 2014-05-26 00:01 - 01326389 _____ () C:\Users\etneo\Desktop\adwcleaner_3.210.exe 2014-05-25 23:51 - 2014-05-25 23:51 - 00000000 ____D () C:\Users\etneo\Desktop\FRST-OlderVersion 2014-05-25 23:49 - 2014-05-25 23:52 - 00000000 ____D () C:\Users\etneo\Desktop\Nuova cartella 2014-05-25 17:59 - 2014-05-25 17:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-25 17:45 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-05-25 17:45 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-05-25 17:45 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-05-25 17:45 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-05-25 17:45 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-05-25 17:45 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-05-25 17:45 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-05-25 17:45 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-05-25 17:45 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-05-25 17:45 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-05-25 17:45 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-05-25 17:45 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-05-25 17:45 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-05-25 17:45 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-05-25 10:46 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-25 10:46 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-25 10:46 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-25 10:46 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-05-25 10:46 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-05-25 10:46 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-05-25 10:46 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-05-25 10:46 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-05-25 10:45 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-25 10:42 - 2014-01-01 01:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-05-25 10:42 - 2014-01-01 01:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-05-25 10:42 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-05-25 10:42 - 2013-11-23 19:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-05-25 10:42 - 2013-10-05 22:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-05-25 10:42 - 2013-10-05 21:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-05-25 10:40 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-05-25 10:40 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-05-25 10:40 - 2013-11-12 04:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-05-25 10:40 - 2013-11-12 04:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-05-25 10:40 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-05-25 10:40 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-05-25 10:39 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-05-25 10:39 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-05-25 10:39 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-05-25 10:39 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-05-25 10:34 - 2013-09-28 03:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-05-25 10:29 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-05-25 10:29 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-05-25 10:29 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-05-25 10:29 - 2013-10-04 04:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-05-25 10:29 - 2013-10-04 04:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-05-25 10:29 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2014-05-25 10:29 - 2013-10-04 03:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-05-25 10:29 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2014-05-25 10:29 - 2013-10-04 03:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-05-25 10:29 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-05-25 10:28 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-05-25 10:28 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-05-25 10:28 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-05-25 10:28 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-05-25 10:28 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-05-25 10:28 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-05-25 10:28 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-05-25 10:28 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-05-25 10:28 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-05-25 10:28 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-05-25 10:28 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-05-25 10:28 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-05-25 10:28 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-05-25 10:28 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-05-25 10:28 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-05-25 10:28 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-05-25 10:28 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-05-25 10:28 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-05-25 10:28 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-05-25 10:28 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-05-25 10:28 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-05-25 10:28 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-05-25 10:28 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2014-05-25 10:28 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2014-05-25 10:28 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2014-05-25 10:28 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-05-25 10:28 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-05-25 10:28 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-05-25 10:27 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-25 10:27 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-25 10:27 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-05-25 10:27 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-05-25 10:27 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-05-25 10:27 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-05-25 10:27 - 2013-11-27 03:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-05-25 10:27 - 2013-11-27 03:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-05-25 10:27 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-05-25 10:27 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-05-25 10:27 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-05-25 10:27 - 2013-07-12 12:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys 2014-05-25 10:27 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-05-25 10:27 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-05-25 10:27 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-05-25 10:27 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-05-25 10:27 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-05-25 10:27 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-05-25 10:27 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-05-25 10:27 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-05-25 10:27 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-05-25 10:26 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-25 10:26 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-25 10:26 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-25 10:26 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-25 10:26 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-25 10:26 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-25 10:26 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-25 10:26 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-25 10:26 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-25 10:26 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-25 10:26 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-25 10:26 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-25 10:26 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-25 10:26 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-25 10:26 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-25 10:26 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-25 10:26 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-25 10:26 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-25 10:26 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-25 10:26 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-25 10:26 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-25 10:26 - 2013-09-25 04:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-05-25 10:26 - 2013-09-25 03:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-05-25 10:26 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-05-25 10:26 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-05-25 10:26 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-05-25 10:26 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-05-25 10:26 - 2013-07-04 14:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-05-25 10:25 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-05-25 10:25 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-05-25 10:25 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-05-25 10:25 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-05-25 10:21 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-05-25 10:21 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-05-25 10:16 - 2013-11-26 13:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-05-25 10:16 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-05-25 10:16 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-05-25 10:16 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-05-25 10:16 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-05-25 10:16 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-05-25 10:16 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-05-25 10:16 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-05-25 10:15 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-05-25 10:15 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-05-25 10:15 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-05-25 10:15 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-05-25 10:15 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-05-25 10:15 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-05-25 10:15 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-05-25 10:14 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-05-25 10:14 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-05-25 10:14 - 2013-10-03 04:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-05-25 10:14 - 2013-10-03 04:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-05-25 10:14 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-05-25 10:14 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-05-25 09:10 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-05-25 09:09 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-05-25 09:09 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-05-25 09:09 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-05-25 09:09 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-05-25 09:09 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-05-25 09:09 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-05-25 09:09 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-05-25 09:09 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2014-05-25 09:09 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-05-25 09:09 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-05-25 09:09 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-05-25 09:09 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-05-25 09:09 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-05-25 09:09 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2014-05-25 09:09 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-05-25 09:09 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-05-25 09:09 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-05-25 00:24 - 2014-05-26 21:26 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2978162629-1010601065-2023174795-1001 2014-05-25 00:24 - 2014-05-26 21:26 - 00003206 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2978162629-1010601065-2023174795-1001 2014-05-25 00:18 - 2014-05-25 00:18 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2978162629-1010601065-2023174795-1001 2014-05-24 20:57 - 2014-05-25 23:51 - 02066944 _____ (Farbar) C:\Users\etneo\Desktop\FRST64.exe 2014-05-24 20:45 - 2014-05-25 09:42 - 00000000 ___RD () C:\Users\etneo\Desktop\Desktop completo 2014-05-23 18:45 - 2014-05-28 22:31 - 00000000 ____D () C:\FRST ==================== One Month Modified Files and Folders ======= 2014-05-28 22:32 - 2014-05-28 22:31 - 00029570 _____ () C:\Users\etneo\Desktop\FRST.txt 2014-05-28 22:31 - 2014-05-23 18:45 - 00000000 ____D () C:\FRST 2014-05-28 22:26 - 2010-02-01 23:26 - 00001146 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-28 22:22 - 2010-02-02 04:31 - 00000448 ____H () C:\Windows\Tasks\Norton Security Scan for etneo.job 2014-05-28 22:16 - 2010-02-01 23:26 - 00001150 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-28 22:15 - 2014-05-26 00:25 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-28 22:15 - 2012-04-02 13:18 - 00000978 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-28 22:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing 2014-05-28 13:18 - 2009-07-14 06:51 - 00211266 _____ () C:\Windows\setupact.log 2014-05-28 13:15 - 2009-12-09 07:36 - 01867159 _____ () C:\Windows\WindowsUpdate.log 2014-05-28 08:33 - 2011-01-09 19:57 - 00000000 ____D () C:\Users\etneo\AppData\Roaming\vlc 2014-05-28 08:24 - 2009-12-09 08:28 - 00741652 _____ () C:\Windows\system32\perfh010.dat 2014-05-28 08:24 - 2009-12-09 08:28 - 00147674 _____ () C:\Windows\system32\perfc010.dat 2014-05-28 08:24 - 2009-07-14 07:13 - 01661252 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-27 22:39 - 2010-09-10 19:35 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4CB7449B-01D5-48FE-8610-72B375589D66} 2014-05-27 21:33 - 2014-05-27 21:33 - 00002030 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2014-05-27 21:33 - 2013-07-20 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2014-05-27 21:33 - 2009-12-09 07:40 - 00241448 _____ () C:\Windows\DPINST.LOG 2014-05-27 21:32 - 2009-10-29 12:07 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-26 21:34 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-26 21:34 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-26 21:28 - 2010-04-21 20:34 - 00000000 ____D () C:\Users\etneo\AppData\Roaming\Skype 2014-05-26 21:26 - 2014-05-25 00:24 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2978162629-1010601065-2023174795-1001 2014-05-26 21:26 - 2014-05-25 00:24 - 00003206 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2978162629-1010601065-2023174795-1001 2014-05-26 21:26 - 2012-10-25 12:48 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-05-26 21:26 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-05-26 21:24 - 2012-06-19 08:36 - 00131072 _____ () C:\Windows\system32\Ikeext.etl 2014-05-26 21:24 - 2012-01-22 12:21 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-05-26 21:24 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-26 15:53 - 2009-10-29 12:55 - 00027153 _____ () C:\Windows\system32\Config.MPF 2014-05-26 15:48 - 2014-05-26 03:11 - 01636074 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-05-26 14:01 - 2014-05-26 14:01 - 00000000 __SHD () C:\Users\etneo\AppData\Local\EmieUserList 2014-05-26 14:01 - 2014-05-26 14:01 - 00000000 __SHD () C:\Users\etneo\AppData\Local\EmieSiteList 2014-05-26 13:58 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-05-26 13:57 - 2010-05-11 11:01 - 00026552 _____ () C:\Users\etneo\AppData\Roaming\wklnhst.dat 2014-05-26 08:49 - 2014-05-26 08:49 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-05-26 08:48 - 2014-05-26 08:48 - 02347384 _____ (ESET) C:\Users\etneo\Desktop\esetsmartinstaller_deu.exe 2014-05-26 08:38 - 2010-02-01 23:03 - 00000000 ___RD () C:\Users\etneo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-26 08:38 - 2010-02-01 23:03 - 00000000 ___RD () C:\Users\etneo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-26 08:37 - 2010-02-01 23:03 - 00001401 _____ () C:\Users\etneo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-26 08:33 - 2009-07-14 06:45 - 00375640 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-26 08:28 - 2014-05-26 08:28 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-26 08:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-05-26 08:22 - 2009-10-29 13:04 - 00890918 _____ () C:\Windows\PFRO.log 2014-05-26 03:04 - 2014-05-26 02:44 - 00012765 _____ () C:\Windows\IE11_main.log 2014-05-26 02:55 - 2014-05-26 02:55 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-26 02:54 - 2014-05-26 02:54 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-26 02:54 - 2014-05-26 02:54 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-26 02:54 - 2014-05-26 02:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-26 02:54 - 2014-05-26 02:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-26 02:54 - 2014-05-26 02:54 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-26 02:54 - 2014-05-26 02:54 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-26 02:54 - 2014-05-26 02:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-26 02:54 - 2014-05-26 02:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-26 02:54 - 2014-05-26 02:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-26 02:54 - 2014-05-26 02:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-26 02:44 - 2009-10-29 12:31 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-26 01:44 - 2014-05-26 01:44 - 00003255 _____ () C:\Users\etneo\Desktop\mbam.txt 2014-05-26 01:35 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins 2014-05-26 00:25 - 2014-05-26 00:25 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-26 00:25 - 2014-05-26 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-26 00:25 - 2014-05-26 00:25 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-26 00:25 - 2014-05-26 00:25 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-26 00:24 - 2014-05-26 00:18 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\etneo\Desktop\mbam-setup-2.0.2.1012.exe 2014-05-26 00:06 - 2012-05-07 01:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-26 00:05 - 2014-05-26 00:01 - 00000000 ____D () C:\AdwCleaner 2014-05-26 00:01 - 2014-05-26 00:00 - 01326389 _____ () C:\Users\etneo\Desktop\adwcleaner_3.210.exe 2014-05-25 23:57 - 2010-07-28 14:51 - 00000642 _____ () C:\Windows\wininit.ini 2014-05-25 23:56 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-25 23:52 - 2014-05-25 23:49 - 00000000 ____D () C:\Users\etneo\Desktop\Nuova cartella 2014-05-25 23:51 - 2014-05-25 23:51 - 00000000 ____D () C:\Users\etneo\Desktop\FRST-OlderVersion 2014-05-25 23:51 - 2014-05-24 20:57 - 02066944 _____ (Farbar) C:\Users\etneo\Desktop\FRST64.exe 2014-05-25 23:46 - 2010-02-02 00:07 - 00000000 ____D () C:\Users\etneo\AppData\Local\Mozilla 2014-05-25 17:59 - 2014-05-25 17:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-25 15:41 - 2010-02-01 23:26 - 00004146 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-25 15:41 - 2010-02-01 23:26 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-25 10:51 - 2013-03-14 10:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-05-25 10:49 - 2013-03-14 10:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-05-25 10:49 - 2013-03-14 10:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-05-25 09:42 - 2014-05-24 20:45 - 00000000 ___RD () C:\Users\etneo\Desktop\Desktop completo 2014-05-25 00:18 - 2014-05-25 00:18 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2978162629-1010601065-2023174795-1001 2014-05-24 21:47 - 2012-04-02 13:18 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-24 21:47 - 2012-04-02 13:18 - 00003916 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-24 21:47 - 2011-08-07 00:53 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-24 20:30 - 2009-10-29 12:45 - 00000000 ____D () C:\Program Files (x86)\McAfee 2014-05-12 07:26 - 2014-05-26 00:25 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-12 07:26 - 2014-05-26 00:25 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-12 07:25 - 2014-05-26 00:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-09 08:14 - 2014-05-25 10:46 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-25 10:45 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-06 06:40 - 2014-05-26 15:53 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-26 15:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-26 15:53 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-26 15:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-26 15:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-26 15:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll Some content of TEMP: ==================== C:\Users\etneo\AppData\Local\Temp\APNStub.exe C:\Users\etneo\AppData\Local\Temp\contentDATs.exe C:\Users\etneo\AppData\Local\Temp\EAD4663.exe C:\Users\etneo\AppData\Local\Temp\EAD5F51.exe C:\Users\etneo\AppData\Local\Temp\GLF3F9.tmp.tbDVDV.dll C:\Users\etneo\AppData\Local\Temp\GLFF8DB.tmp.tbMess.dll C:\Users\etneo\AppData\Local\Temp\IadHide4.dll C:\Users\etneo\AppData\Local\Temp\ietD06F.tmp.exe C:\Users\etneo\AppData\Local\Temp\jre-1.6.0_20-windows-i586-iftw.exe_90744722.exe C:\Users\etneo\AppData\Local\Temp\jre-6u20-windows-i586-jinstall_uac.exe C:\Users\etneo\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe C:\Users\etneo\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\etneo\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe C:\Users\etneo\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\etneo\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\etneo\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\etneo\AppData\Local\Temp\jre-7u5-windows-i586-iftw.exe C:\Users\etneo\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe C:\Users\etneo\AppData\Local\Temp\lowproc.exe C:\Users\etneo\AppData\Local\Temp\Messenger_Plus_Live_Switzerland-_DE.exe C:\Users\etneo\AppData\Local\Temp\MSETUP4.EXE C:\Users\etneo\AppData\Local\Temp\nsv422B.tmp.ConduitEngineEmbbed.exe C:\Users\etneo\AppData\Local\Temp\nsvD601.tmp.ConduitEngineEmbbed.exe C:\Users\etneo\AppData\Local\Temp\oct1506.tmp.exe C:\Users\etneo\AppData\Local\Temp\octBC5D.tmp.exe C:\Users\etneo\AppData\Local\Temp\pdf24-creator-update.exe C:\Users\etneo\AppData\Local\Temp\Quarantine.exe C:\Users\etneo\AppData\Local\Temp\SCC.dll C:\Users\etneo\AppData\Local\Temp\SearchWithGoogleUpdate.exe C:\Users\etneo\AppData\Local\Temp\SkypeSetup.exe C:\Users\etneo\AppData\Local\Temp\stubhelper.dll C:\Users\etneo\AppData\Local\Temp\tbDVD0.dll C:\Users\etneo\AppData\Local\Temp\tbMes1.dll C:\Users\etneo\AppData\Local\Temp\tbuTo1.dll C:\Users\etneo\AppData\Local\Temp\toolbar.exe C:\Users\etneo\AppData\Local\Temp\UninstallEADM.dll C:\Users\etneo\AppData\Local\Temp\wlsetup-cvr.exe C:\Users\etneo\AppData\Local\Temp\xvidupdate.exe C:\Users\etneo\AppData\Local\Temp\_is1506.exe C:\Users\etneo\AppData\Local\Temp\_is28F.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-16 20:00 ==================== End Of Log ============================ |
|
29.05.2014, 09:14
| #17 |
  | Ich bin jetzt auch im Club. Weisser Bildschirm nach Start (Windows 7) Die Funde sind nur noch tempräre Dateien und Reste.
__________________Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\FreeVideoFlipAndRotate.exe
C:\FreeYouTubeDownload.exe
C:\Users\etneo\Desktop\Desktop completo\SONY ERICSSON ARC S\download\23kms7773-1.apk
C:\Users\etneo\Desktop\Desktop completo\SONY ERICSSON ARC S\download\23kms7773.apk
C:\Users\etneo\Downloads\Driver-dm.exe
C:\Users\etneo\Downloads\FreeVideoToMp3Converter.exe
C:\Users\etneo\Downloads\FreeYouTubeToMp3Converter33.exe
C:\Users\etneo\Downloads\MsgPlusLive-484.exe
C:\Users\etneo\Downloads\Safety_Not_Guaranteed.exe
URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
URLSearchHook: HKCU - (No Name) - {18c2d815-3a16-4493-9004-77949214a70e} - No File
SearchScopes: HKCU - {1386F9A4-86AD-43A6-A775-677D3BE16982} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=C6145A69-4637-4BA4-A8C9-3089D3EE4298&apn_sauid=8EA79C6C-CDC7-46C6-9DA6-10FD79C47AC0
BHO-x32: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
Toolbar: HKCU - No Name - {18C2D815-3A16-4493-9004-77949214A70E} - No File
Toolbar: HKCU - No Name - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - No File
FF SearchPlugin: C:\Users\etneo\AppData\Roaming\Mozilla\Firefox\Profiles\elx7qbww.default\searchplugins\messenger-plus-live-switzerland--de-customized-web-search.xml
CHR DefaultSearchKeyword: questscan.com
CHR DefaultSearchProvider: QuestScan
CHR DefaultSearchURL: hxxp://www.questscan.com/?tmp=redir_bho_bing&prt=QstscanPB&keywords={searchTerms}
CHR Plugin: (Babylon Chrome Plugin) - C:\Users\etneo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll No File
CHR Plugin: (HBLite Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll No File
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Updates Bitte lade dir von Microsoft die neuste Version des Internet Explorers runter: Laden Sie Internet Explorer herunter Klicke nun auf den Windowsbutton in der Taskleiste und dort auf "Systemsteuerung". Wenn du dort bist, gehe auf "Programme deinstallieren" unter "Programme". Deinstalliere hier alle alten Java-Versionen. Falls du Java brauchst kannst du es wieder herunter laden:
Wenn du zufrieden bist, kannst du mir hier gerne danken. Ich sehe in deinen Logs nichts gefährliches mehr.  Cleanup Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Die Reihenfolge ist hier entscheidend.
Tipps  Welches Antiviren-Programm soll ich nehmen?Es gibt kein Antiviren-Programm, dass alle Schädlinge findet und du kannst dich nicht 100%-ig auf das Programm verlassen. Es hängt immer noch von deinem Verhalten ab. Mit dem richtigen Verhalten schützt du dich am besten davor, dass du überhaupt infiziert wirst.
Nutze immer nur ein Antiviren Programm, da mehrere sich gegenseitig blockieren werden und es somit mehr schadet, als es nutzt. Falls du mehr als einen installiert hast, entscheide dich für einen von denen und deinstalliere die anderen. Halte außerdem dein Antiviren-Programm immer aktuell, denn durch eine veraltete Datenbank kann das Programm die neuen Infektionen nicht finden.
Zusätzlich zu deinem Antiviren-Programm kannst du kannst auch regelmäßig einen On-Demand Scanner laufen lassen um dir eine zweite Meinung zu holen. Ein On-Demand Scanner läuft im Gegensatz zu einem normalem Antiviren-Programm nicht ständig mit sondern nur wenn du ihm sagst, dass er das System scannen soll.
Was sollte ich vor dem Runterladen beachten?
Sonstige Tipps
Wenn du das Trojaner-Board unterstützten willst, kannst du gerne Spenden. Ich wünsche dir noch eine schöne Zeit. |
|
29.05.2014, 22:13
| #18 |
| | Ich bin jetzt auch im Club. Weisser Bildschirm nach Start (Windows 7) so ich denke das wars! Vielen Dank mort!
__________________Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-05-2014 02
Ran by etneo at 2014-05-29 22:25:57 Run:3
Running from C:\Users\etneo\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\FreeVideoFlipAndRotate.exe
C:\FreeYouTubeDownload.exe
C:\Users\etneo\Desktop\Desktop completo\SONY ERICSSON ARC S\download\23kms7773-1.apk
C:\Users\etneo\Desktop\Desktop completo\SONY ERICSSON ARC S\download\23kms7773.apk
C:\Users\etneo\Downloads\Driver-dm.exe
C:\Users\etneo\Downloads\FreeVideoToMp3Converter.exe
C:\Users\etneo\Downloads\FreeYouTubeToMp3Converter33.exe
C:\Users\etneo\Downloads\MsgPlusLive-484.exe
C:\Users\etneo\Downloads\Safety_Not_Guaranteed.exe
URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
URLSearchHook: HKCU - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
URLSearchHook: HKCU - (No Name) - {18c2d815-3a16-4493-9004-77949214a70e} - No File
SearchScopes: HKCU - {1386F9A4-86AD-43A6-A775-677D3BE16982} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=C6145A69-4637-4BA4-A8C9-3089D3EE4298&apn_sauid=8EA79C6C-CDC7-46C6-9DA6-10FD79C47AC0
BHO-x32: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files (x86)\DVDVideoSoft\tbDVD0.dll No File
Toolbar: HKCU - No Name - {18C2D815-3A16-4493-9004-77949214A70E} - No File
Toolbar: HKCU - No Name - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - No File
FF SearchPlugin: C:\Users\etneo\AppData\Roaming\Mozilla\Firefox\Profiles\elx7qbww.default\searchplugins\messenger-plus-live-switzerland--de-customized-web-search.xml
CHR DefaultSearchKeyword: questscan.com
CHR DefaultSearchProvider: QuestScan
CHR DefaultSearchURL: hxxp://www.questscan.com/?tmp=redir_bho_bing&prt=QstscanPB&keywords={searchTerms}
CHR Plugin: (Babylon Chrome Plugin) - C:\Users\etneo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll No File
CHR Plugin: (HBLite Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll No File
*****************
C:\FreeVideoFlipAndRotate.exe => Moved successfully.
C:\FreeYouTubeDownload.exe => Moved successfully.
C:\Users\etneo\Desktop\Desktop completo\SONY ERICSSON ARC S\download\23kms7773-1.apk => Moved successfully.
C:\Users\etneo\Desktop\Desktop completo\SONY ERICSSON ARC S\download\23kms7773.apk => Moved successfully.
C:\Users\etneo\Downloads\Driver-dm.exe => Moved successfully.
C:\Users\etneo\Downloads\FreeVideoToMp3Converter.exe => Moved successfully.
C:\Users\etneo\Downloads\FreeYouTubeToMp3Converter33.exe => Moved successfully.
C:\Users\etneo\Downloads\MsgPlusLive-484.exe => Moved successfully.
C:\Users\etneo\Downloads\Safety_Not_Guaranteed.exe => Moved successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{18c2d815-3a16-4493-9004-77949214a70e} => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1386F9A4-86AD-43A6-A775-677D3BE16982} => Key deleted successfully.
HKCR\CLSID\{1386F9A4-86AD-43A6-A775-677D3BE16982} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{18C2D815-3A16-4493-9004-77949214A70E} => Value deleted successfully.
HKCR\CLSID\{18C2D815-3A16-4493-9004-77949214A70E} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} => Value deleted successfully.
HKCR\CLSID\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} => Key not found.
C:\Users\etneo\AppData\Roaming\Mozilla\Firefox\Profiles\elx7qbww.default\searchplugins\messenger-plus-live-switzerland--de-customized-web-search.xml => Moved successfully.
CHR DefaultSearchKeyword: questscan.com ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSearchProvider: QuestScan ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSearchURL: hxxp://www.questscan.com/?tmp=redir_bho_bing&prt=QstscanPB&keywords={searchTerms} ==> The Chrome "Settings" can be used to fix the entry.
C:\Users\etneo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll not found.
C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll not found.
==== End of Fixlog ====
|
|
| Themen zu Ich bin jetzt auch im Club. Weisser Bildschirm nach Start (Windows 7) |
| adware.agent, adware.hotbar, adware.questscan, backdoor.agent.rs, malware.trace, pup.optional.babylon.a, pup.optional.babylontoolbar.a, pup.optional.sweetim.a, rogue.multipleav, trojan.fakealert.ed, trojan.ransom, trojan.reveton.ls, win32/adware.180solutions, win32/adware.hotbar.e, win32/adware.hotbar.j, win32/adware.hotbar.s, win32/conduit.searchprotect.n, win32/injector.zvt, win32/installcore.a, win32/kryptik.bfyx, win32/reveton.m, win32/reveton.u, win32/toolbar.conduit, win32/toolbar.conduit.b, win32/toolbar.conduit.y |
Linear-Darstellung
