|
Plagegeister aller Art und deren Bekämpfung: Amazon Phishing Mail Link angeklicktWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
02.06.2014, 21:17 | #1 |
| Amazon Phishing Mail Link angeklickt hallo, ich hoffe ihr könnt mir helfen. zum ersten mal in 15 jahren computer benutzung hab ich auf einen link in ner phishing mail geklickt. kann mit jemand erklären was ich jetzt tun sollte. Mein system ist win7 x64 mit bitdefender und die windows-firewall. hab mir eben "farber" runter geladen, weiß aber nix mit den dateien anzufangen. (bin auf diesen thread gestoßen: http://www.trojaner-board.de/150743-...siert-tun.html) leider hatte der kollege am ende ein mac, ich nicht. danke schonmal im vorraus. ist mir ja fast schon peinlich so ne dummheit. lg, n. |
03.06.2014, 06:51 | #2 |
/// the machine /// TB-Ausbilder | Amazon Phishing Mail Link angeklickt hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
03.06.2014, 07:37 | #3 |
| Amazon Phishing Mail Link angeklickt vielen dank.
__________________frst.txt FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014 Ran by Jusuf-Future (administrator) on JUSUF-FUTURE-PC on 02-06-2014 22:06:53 Running from C:\Users\Jusuf-Future\Desktop Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Sphinx Software) D:\Programme\Windows8FirewallControl\Windows8FirewallService.exe (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\bdagent.exe (Sphinx Software) D:\Programme\Windows8FirewallControl\Windows8FirewallControl.exe ( ) D:\Programme\Copy Handler\ch64.exe (Dropbox, Inc.) C:\Users\Jusuf-Future\AppData\Roaming\Dropbox\bin\Dropbox.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\TeamViewer.exe (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\updatesrv.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\tv_w32.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\tv_x64.exe (Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe (Mozilla Corporation) D:\Programme\Thunderbird\thunderbird.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Copy Handler] => [X] HKLM\...\Run: [Windows8FirewallControl] => D:\Programme\Windows8FirewallControl\Windows8FirewallControl.exe [1204224 2013-09-30] (Sphinx Software) HKLM\...\Run: [BDAgent] => D:\Programme\BitDefender\BitDefender 2011\bdagent.exe [2288128 2014-01-18] (BitDefender S.R.L.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [BitDefender Antiphishing Helper] => D:\Programme\BitDefender\BitDefender 2011\Antispam32\ieshow.exe [92352 2014-01-18] (BitDefender S.R.L.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKU\S-1-5-21-1984611812-295292874-3938284050-1000\...\Run: [Copy Handler] => D:\Programme\Copy Handler\ch64.exe [756736 2010-03-07] ( ) HKU\S-1-5-21-1984611812-295292874-3938284050-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-05-14] (Glarysoft Ltd) Startup: C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Jusuf-Future\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamViewer 9.lnk ShortcutTarget: TeamViewer 9.lnk -> D:\Programme\TeamViewer9\TeamViewer.exe (TeamViewer GmbH) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKLM - {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - DefaultScope {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - D:\Programme\BitDefender\BitDefender 2011\IEToolbar.dll (BitDefender S.R.L.) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - D:\Programme\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll (BitDefender S.R.L.) Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default FF SearchEngineOrder.1: SuchMaschine FF Homepage: about:home FF Keyword.URL: hxxp://www.sm.de/?q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.2 - D:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 - D:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\searchplugins\search_engine.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25] FF Extension: No Name - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\client@anonymox.net.xpi [2014-05-24] FF Extension: No Name - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-14] FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ FF Extension: BitDefender Antiphishing Toolbar - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ [] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-01-14] FF HKLM-x32\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ FF Extension: BitDefender Antiphishing Toolbar - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ [] FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Services (Whitelisted) ================= S3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [46904 2013-12-17] (Hewlett-Packard Company) S2 TeamViewer9; D:\Programme\TeamViewer9\TeamViewer_Service.exe [5024576 2014-04-25] (TeamViewer GmbH) S3 Update Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [467248 2010-11-30] (BitDefender) R2 Updatesrv; D:\Programme\BitDefender\BitDefender 2011\updatesrv.exe [53224 2014-01-18] (BitDefender S.R.L.) R2 VSSERV; D:\Programme\BitDefender\BitDefender 2011\vsserv.exe [2660624 2014-01-18] (BitDefender S.R.L.) R2 Windows8FirewallService; D:\Programme\Windows8FirewallControl\Windows8FirewallService.exe [3806720 2013-09-30] (Sphinx Software) ==================== Drivers (Whitelisted) ==================== S3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [591968 2010-11-29] (BitDefender) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [1186272 2010-11-29] (BitDefender) R3 bdfm; C:\Windows\System32\DRIVERS\bdfm.sys [162896 2010-05-13] (BitDefender S.R.L. Bucharest, ROMANIA) R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [431176 2011-03-24] (BitDefender) R1 bdfwfpf; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [99408 2010-08-20] (BitDefender) R0 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-06-02] (Glarysoft Ltd) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] () R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2014-04-10] (Sony Ericsson Mobile Communications) S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-02 22:06 - 2014-06-02 22:07 - 00009947 _____ () C:\Users\Jusuf-Future\Desktop\FRST.txt 2014-06-02 22:06 - 2014-06-02 22:06 - 00000000 ____D () C:\FRST 2014-06-02 22:02 - 2014-06-02 22:03 - 02068992 _____ (Farbar) C:\Users\Jusuf-Future\Desktop\FRST64.exe 2014-06-02 13:55 - 2014-05-14 10:39 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe 2014-06-02 09:46 - 2014-06-02 14:01 - 00000348 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-02 09:46 - 2014-06-02 13:41 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-02 09:46 - 2014-06-02 09:46 - 00002672 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-02 09:46 - 2014-06-02 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-02 09:45 - 2014-06-02 09:45 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-02 09:31 - 2014-06-02 09:46 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-05-31 09:26 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-31 09:26 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-31 09:26 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-31 09:26 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-31 09:26 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-31 09:26 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-30 23:43 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 23:43 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 23:43 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 23:43 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 23:43 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 23:43 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 23:43 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 23:43 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 23:43 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 23:43 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 23:43 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 23:43 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 23:43 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 23:43 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 23:43 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 23:43 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-30 23:43 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-30 23:43 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-30 23:43 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 23:43 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 23:43 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-30 23:43 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-30 23:43 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-30 23:43 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-30 23:43 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 23:43 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-30 23:43 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-30 23:43 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-30 23:43 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-30 23:43 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 23:43 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-30 23:43 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 23:43 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-30 23:43 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-30 23:43 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 23:43 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-30 23:43 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-30 23:43 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-30 23:43 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 23:43 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 23:43 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-30 23:43 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-30 23:43 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-30 23:43 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-05-25 14:25 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-05-25 14:25 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-05-25 14:25 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-05-25 14:25 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-05-25 14:25 - 2013-11-23 19:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-05-25 14:25 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-05-25 14:24 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-05-25 14:24 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-05-25 14:18 - 2014-05-25 14:18 - 00001376 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-25 12:00 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-05-25 11:54 - 2014-05-25 11:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-25 11:53 - 2014-05-25 11:53 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:51 - 2014-05-25 12:00 - 00011498 _____ () C:\Windows\IE11_main.log 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeHideIP 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\ProgramData\FreeHideIP 2014-05-14 10:33 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-14 10:33 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-14 10:33 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-14 10:33 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-14 10:33 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-14 10:33 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-14 10:33 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-14 10:33 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-14 10:33 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-14 10:33 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-14 10:33 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-14 10:33 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-14 10:33 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-14 10:33 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 10:33 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 10:33 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-14 10:33 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-12 09:24 - 2014-05-12 09:25 - 00000000 ___DC () C:\Users\Jusuf-Future\AppData\Local\MigWiz 2014-05-07 01:18 - 2014-05-07 01:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chaos Group 2014-05-06 09:47 - 2014-05-15 21:04 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-05 22:50 - 2014-05-05 22:50 - 00000000 ____D () C:\Windows\CheckSur 2014-05-05 10:55 - 2014-05-05 10:55 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\SCF 2014-05-05 10:36 - 2014-05-07 01:14 - 00000000 ____D () C:\ProgramData\SketchUp 2014-05-05 10:36 - 2014-05-05 10:36 - 00003120 _____ () C:\Windows\SysWOW64\ALLFSAF14a.ocx 2014-05-05 10:36 - 2014-05-05 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2014 ==================== One Month Modified Files and Folders ======= 2014-06-02 22:07 - 2014-06-02 22:06 - 00009947 _____ () C:\Users\Jusuf-Future\Desktop\FRST.txt 2014-06-02 22:07 - 2014-01-14 13:47 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Temp 2014-06-02 22:06 - 2014-06-02 22:06 - 00000000 ____D () C:\FRST 2014-06-02 22:03 - 2014-06-02 22:02 - 02068992 _____ (Farbar) C:\Users\Jusuf-Future\Desktop\FRST64.exe 2014-06-02 22:03 - 2014-01-14 13:47 - 01808932 _____ () C:\Windows\WindowsUpdate.log 2014-06-02 21:48 - 2014-01-14 21:25 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Dropbox 2014-06-02 17:50 - 2014-01-14 22:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-06-02 14:07 - 2009-07-14 06:45 - 00026944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-02 14:07 - 2009-07-14 06:45 - 00026944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-02 14:01 - 2014-06-02 09:46 - 00000348 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-02 14:01 - 2014-01-14 21:26 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\DropboxMaster 2014-06-02 14:00 - 2014-02-06 11:07 - 00036199 _____ () C:\Windows\setupact.log 2014-06-02 14:00 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-02 13:41 - 2014-06-02 09:46 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-02 11:27 - 2014-03-27 00:44 - 00084352 _____ () C:\Windows\PFRO.log 2014-06-02 11:16 - 2014-01-26 16:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Spotify 2014-06-02 09:56 - 2014-01-14 21:34 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\vlc 2014-06-02 09:47 - 2014-01-14 21:26 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-06-02 09:47 - 2014-01-14 13:48 - 00000000 ___RD () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-02 09:46 - 2014-06-02 09:46 - 00002672 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-02 09:46 - 2014-06-02 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-02 09:46 - 2014-06-02 09:31 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-06-02 09:46 - 2014-01-14 14:39 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\GlarySoft 2014-06-02 09:45 - 2014-06-02 09:45 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-02 09:45 - 2014-01-26 16:12 - 00000739 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk 2014-06-02 09:44 - 2014-01-14 21:23 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-02 09:44 - 2014-01-14 21:23 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-02 09:40 - 2014-04-22 16:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2014-06-02 09:40 - 2014-04-17 08:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack 2014-06-02 09:40 - 2014-04-15 11:57 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled 2014-06-02 09:40 - 2014-03-29 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProcrastiTracker 2014-06-02 09:40 - 2014-01-24 12:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-02 09:40 - 2014-01-18 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDefender 2011 2014-06-02 09:40 - 2014-01-14 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler 2014-06-02 09:39 - 2014-01-14 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-05-31 20:07 - 2014-04-17 08:43 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeAudioPack 2014-05-31 20:07 - 2014-01-14 13:47 - 00000000 ____D () C:\Users\Jusuf-Future 2014-05-31 20:07 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-05-31 20:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-31 20:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-31 20:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-05-31 19:13 - 2014-01-26 16:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Spotify 2014-05-25 14:18 - 2014-05-25 14:18 - 00001376 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-25 14:17 - 2014-01-14 22:38 - 00000000 ____D () C:\Windows\Panther 2014-05-25 14:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-05-25 14:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-05-25 14:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-05-25 14:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-05-25 12:00 - 2014-05-25 11:51 - 00011498 _____ () C:\Windows\IE11_main.log 2014-05-25 11:54 - 2014-05-25 11:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-25 11:53 - 2014-05-25 11:53 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:48 - 2014-01-14 22:36 - 00699416 _____ () C:\Windows\system32\perfh007.dat 2014-05-25 11:48 - 2014-01-14 22:36 - 00149556 _____ () C:\Windows\system32\perfc007.dat 2014-05-25 11:48 - 2014-01-14 15:19 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-05-25 11:47 - 2009-07-14 07:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-25 10:17 - 2014-01-14 15:13 - 00000688 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeHideIP 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\ProgramData\FreeHideIP 2014-05-18 15:44 - 2014-01-24 12:51 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\MyPhoneExplorer 2014-05-15 21:07 - 2014-01-14 13:48 - 00000000 ___RD () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 21:04 - 2014-05-06 09:47 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-14 22:10 - 2014-01-14 14:33 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-14 22:08 - 2014-01-14 14:33 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-14 10:39 - 2014-06-02 13:55 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe 2014-05-12 09:25 - 2014-05-12 09:24 - 00000000 ___DC () C:\Users\Jusuf-Future\AppData\Local\MigWiz 2014-05-09 08:14 - 2014-05-14 10:33 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-14 10:33 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-07 01:58 - 2014-01-26 18:23 - 00000000 ____D () C:\ProgramData\ASGVIS 2014-05-07 01:18 - 2014-05-07 01:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chaos Group 2014-05-07 01:14 - 2014-05-05 10:36 - 00000000 ____D () C:\ProgramData\SketchUp 2014-05-07 01:14 - 2014-01-14 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2013 2014-05-06 06:40 - 2014-05-31 09:26 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-31 09:26 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-31 09:26 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-31 09:26 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-31 09:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-31 09:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-05 22:50 - 2014-05-05 22:50 - 00000000 ____D () C:\Windows\CheckSur 2014-05-05 16:47 - 2014-01-14 16:27 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Adobe 2014-05-05 10:55 - 2014-05-05 10:55 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\SCF 2014-05-05 10:37 - 2014-01-14 16:04 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\SketchUp 2014-05-05 10:36 - 2014-05-05 10:36 - 00003120 _____ () C:\Windows\SysWOW64\ALLFSAF14a.ocx 2014-05-05 10:36 - 2014-05-05 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2014 Some content of TEMP: ==================== C:\Users\Jusuf-Future\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxmddom.dll C:\Users\Jusuf-Future\AppData\Local\Temp\install_flashplayer12x32_ltr5x64d_awc_aih.exe C:\Users\Jusuf-Future\AppData\Local\Temp\ose00000.exe C:\Users\Jusuf-Future\AppData\Local\Temp\proxy_vole7986257389054591071.dll C:\Users\Jusuf-Future\AppData\Local\Temp\proxy_vole8802033318441424632.dll C:\Users\Jusuf-Future\AppData\Local\Temp\vcredist_vs2005_x86.exe C:\Users\Jusuf-Future\AppData\Local\Temp\vcredist_vs2010_x64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-30 23:31 ==================== End Of Log ============================ --- --- --- Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014 Ran by Jusuf-Future at 2014-06-02 22:07:54 Running from C:\Users\Jusuf-Future\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: BitDefender Antivirus (Enabled - Up to date) {50909708-FF80-02AF-F814-B28405891E92} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: BitDefender AntiSpyware (Enabled - Up to date) {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F} FW: BitDefender Firewall (Disabled) {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.0.0 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.) Adobe Community Help (x32 Version: 3.4.980 - Adobe Systems Incorporated.) Hidden Adobe Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 1.4.0 - Adobe Systems Incorporated) Adobe Content Viewer (x32 Version: 1.4.0 - Adobe Systems Incorporated) Hidden Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated) Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated) Adobe Story (x32 Version: 1.0.571 - Adobe Systems Incorporated) Hidden Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1) (Version: 2.0 Build 230 - Adobe Systems Incorporated.) Adobe Widget Browser (x32 Version: 2.0.230 - Adobe Systems Incorporated.) Hidden AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden BitDefender Antivirus Pro 2011 (HKLM\...\BitDefender) (Version: 14.0.29 - BitDefender) BitDefender Antivirus Pro 2011 (Version: 14.0.29 - BitDefender) Hidden Catalyst Control Center InstallProxy (x32 Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP) Copy Handler 1.32Final (HKLM\...\{9CF6A157-F0E8-4216-B229-C0CA8204BE2C}_is1) (Version: 1.32Final - Józef Starosczyk) Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software) Dropbox (HKCU\...\Dropbox) (Version: 2.8.3 - Dropbox, Inc.) Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft) Glary Utilities 5.0 (HKLM-x32\...\Glary Utilities 5) (Version: 5.0.0.1 - Glarysoft Ltd) Helium (HKLM-x32\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod) HP Officejet 6700 - Grundlegende Software für das Gerät (HKLM\...\{9086D601-50B7-491D-A143-28193DADE36B}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Support Solutions Framework (HKLM-x32\...\{23CCE784-A812-4647-AEFF-1DCCD4E57478}) (Version: 11.50.0000 - Hewlett-Packard Company) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla) Mp3tag v2.59a (HKLM-x32\...\Mp3tag) (Version: v2.59a - Florian Heidenreich) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger) PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden ProcrastiTracker (HKLM-x32\...\ProcrastiTracker) (Version: - ) PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_5 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.2.14014_5 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.) SketchUp 2013 (HKLM-x32\...\{B75BC01B-4586-43F8-9349-D250DB98F26F}) (Version: 13.0.4812 - Trimble Navigation Limited) SketchUp 2014 (HKLM-x32\...\{A608A8D3-E77C-4BEE-8F2A-F8124F5F0FE2}) (Version: 14.0.4900 - Trimble Navigation Limited) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer) VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN) V-Ray for SketchUp adv (HKLM-x32\...\V-Ray for SketchUp adv 2.00.23490) (Version: 2.00.23490 - Chaos Software, Ltd) Windows8FirewallControl (x64) 6.1.9.53 (HKLM\...\Windows8FirewallControl_is1) (Version: 6.1.9.53 - Sphinx Software) WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) ==================== Restore Points ========================= 25-05-2014 21:15:55 Windows Update 30-05-2014 21:43:16 Windows Update 31-05-2014 07:26:16 Windows Update 31-05-2014 17:58:36 Wiederherstellungsvorgang ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-01-14 18:08 - 00002375 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com 127.0.0.1 adobe.activate.com 127.0.0.1 practivate.adobe.com 127.0.0.1 ereg.adobe.com 127.0.0.1 adobeereg.com 127.0.0.1 activate.wip3.adobe.com 127.0.0.1 wip3.adobe.com 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com 127.0.0.1 ereg.wip3.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 activate.adobe.com 127.0.0.1 adobe.activate.com 127.0.0.1 practivate.adobe.com 127.0.0.1 ereg.adobe.com 127.0.0.1 adobeereg.com 127.0.0.1 activate.wip3.adobe.com 127.0.0.1 wip3.adobe.com 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com There are 21 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {18AE8207-317E-4DE4-8856-01FE1CA26B26} - System32\Tasks\AdobeAAMUpdater-1.0-Jusuf-Future-PC-Jusuf-Future => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-30] (Adobe Systems Incorporated) Task: {DFADD9EF-2248-4145-84DD-DB5CB9CE3C17} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2014-05-14] (Glarysoft Ltd) Task: C:\Windows\Tasks\GlaryInitialize 5.job => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-18 15:45 - 2014-01-18 15:45 - 00239648 _____ () D:\Programme\BitDefender\BitDefender 2011\txmlutil.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00036768 _____ () D:\Programme\BitDefender\BitDefender 2011\strdecoder.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00245328 _____ () D:\Programme\BitDefender\BitDefender 2011\framework.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00142328 _____ () D:\Programme\BitDefender\BitDefender 2011\accessl.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00161368 _____ () D:\Programme\BitDefender\BitDefender 2011\connector.dll 2014-01-18 15:44 - 2014-01-18 15:44 - 00086208 _____ () D:\Programme\BitDefender\BitDefender 2011\bdmltusrsrv.dll 2010-11-30 08:18 - 2010-11-30 08:18 - 00303008 _____ () C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\smartscn.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00029552 _____ () D:\Programme\BitDefender\BitDefender 2011\knownfilessp.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00086696 _____ () D:\Programme\BitDefender\BitDefender 2011\ExcludeMgr.dll 2014-01-18 16:04 - 2014-01-18 16:04 - 00008704 _____ () D:\Programme\BitDefender\BitDefender 2011\UI\accessl.ui 2014-01-18 15:45 - 2014-01-18 15:45 - 00054272 _____ () D:\Programme\BitDefender\BitDefender 2011\procinfo.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00025432 _____ () D:\Programme\BitDefender\BitDefender 2011\smartscnal.dll 2014-01-18 16:03 - 2014-01-18 16:03 - 00010752 _____ () D:\Programme\BitDefender\BitDefender 2011\UI\IMSecurityAL.ui 2014-01-18 15:45 - 2014-01-18 15:45 - 00265928 _____ () D:\Programme\BitDefender\BitDefender 2011\midasal.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00096520 _____ () D:\Programme\BitDefender\BitDefender 2011\midasdp.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 00042424 _____ () D:\Programme\BitDefender\BitDefender 2011\containerdatasp.dll 2014-01-18 15:45 - 2014-01-18 15:45 - 01048064 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\ashttpbr.mdl 2014-01-18 15:45 - 2014-01-18 15:45 - 01168384 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\ashttpdsp.mdl 2014-01-18 15:45 - 2014-01-18 15:45 - 02789376 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\ashttpf.mdl 2014-01-18 16:04 - 2014-01-18 16:04 - 02614784 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\ashttpfr.mdl 2014-01-18 15:45 - 2014-01-18 15:45 - 02732544 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\ashttpph.mdl 2014-01-18 15:45 - 2014-01-18 15:45 - 01440768 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\ashttprbl.mdl 2014-01-18 16:04 - 2014-01-18 16:04 - 01007104 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\asimbr.mdl 2014-01-18 16:04 - 2014-01-18 16:04 - 01089536 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\asimdsp.mdl 2014-01-18 16:04 - 2014-01-18 16:04 - 02545664 _____ () D:\Programme\BitDefender\BitDefender 2011\as2core\asimf.mdl 2014-01-14 15:02 - 2010-03-07 20:05 - 00290816 _____ () D:\Programme\Copy Handler\chext64.dll 2014-01-14 15:02 - 2010-03-07 20:04 - 00318976 _____ () D:\Programme\Copy Handler\libicpf64u.dll 2014-01-14 15:02 - 2010-03-07 20:05 - 00037376 _____ () D:\Programme\Copy Handler\libchcore64u.dll 2014-06-02 14:01 - 2014-06-02 14:01 - 00043008 _____ () C:\Users\Jusuf-Future\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxmddom.dll 2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Dropbox\bin\libcef.dll 2014-05-14 10:39 - 2014-05-14 10:39 - 00080160 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll 2014-05-01 22:16 - 2014-05-01 22:16 - 03019888 _____ () D:\Programme\Thunderbird\mozjs.dll 2014-05-01 22:16 - 2014-05-01 22:16 - 00158832 _____ () D:\Programme\Thunderbird\NSLDAP32V60.dll 2014-05-01 22:16 - 2014-05-01 22:16 - 00023152 _____ () D:\Programme\Thunderbird\NSLDAPPR32V60.dll 2014-01-14 22:27 - 2012-11-21 07:26 - 00008704 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Thunderbird\Profiles\xc6plbd3.default\extensions\mintrayr@tn123.ath.cx\lib\tray_x86-msvc.dll 2010-10-25 16:15 - 2010-10-25 16:15 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\locale\de_de\AcroTray.deu 2014-05-09 23:21 - 2014-05-09 23:21 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-06-02 09:44 - 2014-06-02 09:44 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\.DS_Store:AFP_AfpInfo AlternateDataStreams: C:\Users\Jusuf-Future\.DS_Store:AFP_AfpInfo ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS5.5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe ==================== Faulty Device Manager Devices ============= Name: NVIDIA nForce-Netzwerkcontroller #2 Description: NVIDIA nForce-Netzwerkcontroller Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: NVIDIA Service: NVENETFD Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/02/2014 02:01:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/02/2014 01:27:37 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/02/2014 11:28:58 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/02/2014 11:12:50 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: USER32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9f1 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000008dd9 ID des fehlerhaften Prozesses: 0x47c Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Error: (06/02/2014 09:28:23 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/02/2014 09:17:41 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/01/2014 09:40:01 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/01/2014 05:02:04 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/31/2014 08:10:24 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/31/2014 08:09:21 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: Unbekannter Fehler bei der Systemwiederherstellung: (Windows Update). Zusätzliche Informationen: 0x80070005. System errors: ============= Error: (06/02/2014 02:00:53 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (06/02/2014 02:00:53 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (06/02/2014 02:00:53 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (06/02/2014 02:00:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "TeamViewer 9" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/02/2014 02:00:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst TeamViewer 9 erreicht. Error: (06/02/2014 01:26:24 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (06/02/2014 11:27:56 AM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (06/02/2014 09:27:17 AM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (06/02/2014 09:27:17 AM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (06/02/2014 09:27:17 AM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-06-02 19:38:25.656 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-02 15:53:55.751 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-02 14:06:37.525 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-02 09:39:05.336 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-31 20:44:53.648 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-29 22:05:07.601 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-25 14:23:35.777 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-25 11:16:15.447 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-25 00:59:12.866 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-24 23:38:28.733 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Programme\Bitdefender\BitDefender 2011\Active Virus Control\Midas_00089_003\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 36% Total physical RAM: 6142.54 MB Available physical RAM: 3906.37 MB Total Pagefile: 12283.27 MB Available Pagefile: 9798.25 MB Total Virtual: 8192 MB Available Virtual: 8191.73 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:107.8 GB) (Free:46.75 GB) NTFS Drive d: (Daten) (Fixed) (Total:488.28 GB) (Free:324.54 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: B2854A50) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 27122711) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=108 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=488 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
04.06.2014, 08:15 | #4 | |
/// the machine /// TB-Ausbilder | Amazon Phishing Mail Link angeklicktZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
04.06.2014, 22:22 | #5 |
| Amazon Phishing Mail Link angeklickt ok, hab ich. jetzt spuckt farbar allerdings nur noch eine datei aus. FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014 Ran by Jusuf-Future (administrator) on JUSUF-FUTURE-PC on 04-06-2014 23:21:30 Running from C:\Users\Jusuf-Future\Desktop Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Sphinx Software) D:\Programme\Windows8FirewallControl\Windows8FirewallService.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\TeamViewer_Service.exe (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\bdagent.exe (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\updatesrv.exe (Sphinx Software) D:\Programme\Windows8FirewallControl\Windows8FirewallControl.exe ( ) D:\Programme\Copy Handler\ch64.exe (Dropbox, Inc.) C:\Users\Jusuf-Future\AppData\Roaming\Dropbox\bin\Dropbox.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\TeamViewer.exe (Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\tv_w32.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\tv_x64.exe (Mozilla Corporation) D:\Programme\Thunderbird\thunderbird.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Copy Handler] => [X] HKLM\...\Run: [Windows8FirewallControl] => D:\Programme\Windows8FirewallControl\Windows8FirewallControl.exe [1204224 2013-09-30] (Sphinx Software) HKLM\...\Run: [BDAgent] => D:\Programme\BitDefender\BitDefender 2011\bdagent.exe [2288128 2014-01-18] (BitDefender S.R.L.) HKLM-x32\...\Run: [BitDefender Antiphishing Helper] => D:\Programme\BitDefender\BitDefender 2011\Antispam32\ieshow.exe [92352 2014-01-18] (BitDefender S.R.L.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKU\S-1-5-21-1984611812-295292874-3938284050-1000\...\Run: [Copy Handler] => D:\Programme\Copy Handler\ch64.exe [756736 2010-03-07] ( ) HKU\S-1-5-21-1984611812-295292874-3938284050-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-05-14] (Glarysoft Ltd) Startup: C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Jusuf-Future\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamViewer 9.lnk ShortcutTarget: TeamViewer 9.lnk -> D:\Programme\TeamViewer9\TeamViewer.exe (TeamViewer GmbH) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKLM - {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - DefaultScope {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} Toolbar: HKLM - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - D:\Programme\BitDefender\BitDefender 2011\IEToolbar.dll (BitDefender S.R.L.) Toolbar: HKLM-x32 - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - D:\Programme\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll (BitDefender S.R.L.) Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default FF SearchEngineOrder.1: SuchMaschine FF Homepage: about:home FF Keyword.URL: hxxp://www.sm.de/?q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.2 - D:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 - D:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\searchplugins\search_engine.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25] FF Extension: No Name - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\client@anonymox.net.xpi [2014-05-24] FF Extension: No Name - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-14] FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ FF Extension: BitDefender Antiphishing Toolbar - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ [] FF HKLM-x32\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ FF Extension: BitDefender Antiphishing Toolbar - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ [] FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Services (Whitelisted) ================= S3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [46904 2013-12-17] (Hewlett-Packard Company) R2 TeamViewer9; D:\Programme\TeamViewer9\TeamViewer_Service.exe [5024576 2014-04-25] (TeamViewer GmbH) S3 Update Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [467248 2010-11-30] (BitDefender) R2 Updatesrv; D:\Programme\BitDefender\BitDefender 2011\updatesrv.exe [53224 2014-01-18] (BitDefender S.R.L.) R2 VSSERV; D:\Programme\BitDefender\BitDefender 2011\vsserv.exe [2660624 2014-01-18] (BitDefender S.R.L.) R2 Windows8FirewallService; D:\Programme\Windows8FirewallControl\Windows8FirewallService.exe [3806720 2013-09-30] (Sphinx Software) ==================== Drivers (Whitelisted) ==================== S3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [591968 2010-11-29] (BitDefender) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [1186272 2010-11-29] (BitDefender) R3 bdfm; C:\Windows\System32\DRIVERS\bdfm.sys [162896 2010-05-13] (BitDefender S.R.L. Bucharest, ROMANIA) R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [431176 2011-03-24] (BitDefender) R1 bdfwfpf; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [99408 2010-08-20] (BitDefender) R0 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-06-02] (Glarysoft Ltd) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] () R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2014-04-10] (Sony Ericsson Mobile Communications) S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-04 23:21 - 2014-06-04 23:21 - 00008973 _____ () C:\Users\Jusuf-Future\Desktop\FRST.txt 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Eusing 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner 2014-06-04 22:24 - 2014-06-04 22:24 - 00000000 ____D () C:\Users\Jusuf-Future\Desktop\frst1 2014-06-02 22:06 - 2014-06-04 23:21 - 00000000 ____D () C:\FRST 2014-06-02 22:02 - 2014-06-02 22:03 - 02068992 _____ (Farbar) C:\Users\Jusuf-Future\Desktop\FRST64.exe 2014-06-02 13:55 - 2014-05-14 10:39 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe 2014-06-02 09:46 - 2014-06-04 23:03 - 00000348 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-02 09:46 - 2014-06-04 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-02 09:46 - 2014-06-02 13:41 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-02 09:46 - 2014-06-02 09:46 - 00002672 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-02 09:45 - 2014-06-02 09:45 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-02 09:31 - 2014-06-02 09:46 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-05-31 09:26 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-31 09:26 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-31 09:26 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-31 09:26 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-31 09:26 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-31 09:26 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-30 23:43 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 23:43 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 23:43 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 23:43 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 23:43 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 23:43 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 23:43 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 23:43 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 23:43 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 23:43 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 23:43 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 23:43 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 23:43 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 23:43 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 23:43 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 23:43 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-30 23:43 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-30 23:43 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-30 23:43 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 23:43 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 23:43 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-30 23:43 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-30 23:43 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-30 23:43 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-30 23:43 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 23:43 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-30 23:43 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-30 23:43 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-30 23:43 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-30 23:43 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 23:43 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-30 23:43 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 23:43 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-30 23:43 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-30 23:43 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 23:43 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-30 23:43 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-30 23:43 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-30 23:43 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 23:43 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 23:43 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-30 23:43 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-30 23:43 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-30 23:43 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-05-25 14:25 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-05-25 14:25 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-05-25 14:25 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-05-25 14:25 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-05-25 14:25 - 2013-11-23 19:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-05-25 14:25 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-05-25 14:24 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-05-25 14:24 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-05-25 14:18 - 2014-05-25 14:18 - 00001376 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-25 12:00 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-05-25 11:54 - 2014-05-25 11:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-25 11:53 - 2014-05-25 11:53 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:51 - 2014-05-25 12:00 - 00011498 _____ () C:\Windows\IE11_main.log 2014-05-24 23:14 - 2014-06-04 23:01 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeHideIP 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\ProgramData\FreeHideIP 2014-05-14 10:33 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-14 10:33 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-14 10:33 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-14 10:33 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-14 10:33 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-14 10:33 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-14 10:33 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-14 10:33 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-14 10:33 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-14 10:33 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-14 10:33 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-14 10:33 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-14 10:33 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-14 10:33 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 10:33 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 10:33 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-14 10:33 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-12 09:24 - 2014-05-12 09:25 - 00000000 ___DC () C:\Users\Jusuf-Future\AppData\Local\MigWiz 2014-05-07 01:18 - 2014-05-07 01:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chaos Group 2014-05-06 09:47 - 2014-06-04 23:01 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-05 22:50 - 2014-05-05 22:50 - 00000000 ____D () C:\Windows\CheckSur 2014-05-05 10:55 - 2014-05-05 10:55 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\SCF 2014-05-05 10:36 - 2014-05-07 01:14 - 00000000 ____D () C:\ProgramData\SketchUp 2014-05-05 10:36 - 2014-05-05 10:36 - 00003120 _____ () C:\Windows\SysWOW64\ALLFSAF14a.ocx 2014-05-05 10:36 - 2014-05-05 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2014 ==================== One Month Modified Files and Folders ======= 2014-06-04 23:21 - 2014-06-04 23:21 - 00008973 _____ () C:\Users\Jusuf-Future\Desktop\FRST.txt 2014-06-04 23:21 - 2014-06-02 22:06 - 00000000 ____D () C:\FRST 2014-06-04 23:21 - 2014-01-14 13:47 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Temp 2014-06-04 23:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Eusing 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner 2014-06-04 23:10 - 2009-07-14 06:45 - 00026944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-04 23:10 - 2009-07-14 06:45 - 00026944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-04 23:06 - 2014-01-14 13:47 - 01949067 _____ () C:\Windows\WindowsUpdate.log 2014-06-04 23:04 - 2014-01-14 21:25 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Dropbox 2014-06-04 23:03 - 2014-06-02 09:46 - 00000348 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-04 23:03 - 2014-01-14 21:26 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\DropboxMaster 2014-06-04 23:02 - 2014-02-06 11:07 - 00036423 _____ () C:\Windows\setupact.log 2014-06-04 23:02 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-04 23:01 - 2014-06-02 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-04 23:01 - 2014-05-24 23:14 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeHideIP 2014-06-04 23:01 - 2014-05-06 09:47 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-04 23:01 - 2014-04-17 08:43 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeAudioPack 2014-06-04 23:01 - 2014-01-26 16:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Spotify 2014-06-04 23:01 - 2014-01-24 12:51 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\MyPhoneExplorer 2014-06-04 23:01 - 2014-01-14 21:34 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\vlc 2014-06-04 23:01 - 2014-01-14 21:26 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-06-04 23:01 - 2014-01-14 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-04 23:01 - 2014-01-14 15:02 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Copy Handler 2014-06-04 23:01 - 2014-01-14 13:48 - 00000000 ___RD () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-04 23:01 - 2014-01-14 13:48 - 00000000 ___RD () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-04 23:01 - 2014-01-14 13:47 - 00000000 ____D () C:\Users\Jusuf-Future 2014-06-04 23:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-06-04 23:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-06-04 22:39 - 2014-03-27 00:44 - 00084896 _____ () C:\Windows\PFRO.log 2014-06-04 22:39 - 2009-07-14 06:45 - 04906360 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-06-04 22:24 - 2014-06-04 22:24 - 00000000 ____D () C:\Users\Jusuf-Future\Desktop\frst1 2014-06-02 22:03 - 2014-06-02 22:02 - 02068992 _____ (Farbar) C:\Users\Jusuf-Future\Desktop\FRST64.exe 2014-06-02 17:50 - 2014-01-14 22:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-06-02 13:41 - 2014-06-02 09:46 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-02 09:46 - 2014-06-02 09:46 - 00002672 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-02 09:46 - 2014-06-02 09:31 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-06-02 09:46 - 2014-01-14 14:39 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\GlarySoft 2014-06-02 09:45 - 2014-06-02 09:45 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-02 09:45 - 2014-01-26 16:12 - 00000739 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk 2014-06-02 09:45 - 2014-01-26 16:12 - 00000000 ____D () d:\Programme\CDBurnerXP 2014-06-02 09:44 - 2014-01-14 21:23 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-02 09:44 - 2014-01-14 21:23 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-02 09:40 - 2014-04-22 16:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2014-06-02 09:40 - 2014-04-17 08:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack 2014-06-02 09:40 - 2014-04-15 11:57 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled 2014-06-02 09:40 - 2014-03-29 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProcrastiTracker 2014-06-02 09:40 - 2014-01-24 12:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-02 09:40 - 2014-01-18 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDefender 2011 2014-06-02 09:40 - 2014-01-14 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler 2014-06-02 09:39 - 2014-01-14 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-05-31 19:13 - 2014-01-26 16:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Spotify 2014-05-25 14:24 - 2014-01-14 15:13 - 00000000 ____D () d:\Programme\TeamViewer9 2014-05-25 14:18 - 2014-05-25 14:18 - 00001376 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-25 14:17 - 2014-01-14 22:38 - 00000000 ____D () C:\Windows\Panther 2014-05-25 12:00 - 2014-05-25 11:51 - 00011498 _____ () C:\Windows\IE11_main.log 2014-05-25 11:54 - 2014-05-25 11:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-25 11:53 - 2014-05-25 11:53 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:48 - 2014-01-14 22:36 - 00699416 _____ () C:\Windows\system32\perfh007.dat 2014-05-25 11:48 - 2014-01-14 22:36 - 00149556 _____ () C:\Windows\system32\perfc007.dat 2014-05-25 11:48 - 2014-01-14 15:19 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-05-25 11:47 - 2009-07-14 07:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-25 10:17 - 2014-01-14 15:13 - 00000688 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\ProgramData\FreeHideIP 2014-05-14 22:10 - 2014-01-14 14:33 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-14 22:08 - 2014-01-14 14:33 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-14 10:39 - 2014-06-02 13:55 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe 2014-05-12 09:25 - 2014-05-12 09:24 - 00000000 ___DC () C:\Users\Jusuf-Future\AppData\Local\MigWiz 2014-05-09 08:14 - 2014-05-14 10:33 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-14 10:33 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-07 01:58 - 2014-01-26 18:23 - 00000000 ____D () C:\ProgramData\ASGVIS 2014-05-07 01:18 - 2014-05-07 01:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chaos Group 2014-05-07 01:14 - 2014-05-05 10:36 - 00000000 ____D () C:\ProgramData\SketchUp 2014-05-07 01:14 - 2014-01-14 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2013 2014-05-06 06:40 - 2014-05-31 09:26 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-31 09:26 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-31 09:26 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-31 09:26 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-31 09:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-31 09:26 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-05 22:50 - 2014-05-05 22:50 - 00000000 ____D () C:\Windows\CheckSur 2014-05-05 16:47 - 2014-01-14 16:27 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Adobe 2014-05-05 10:55 - 2014-05-05 10:55 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\SCF 2014-05-05 10:37 - 2014-01-14 16:04 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\SketchUp 2014-05-05 10:36 - 2014-05-05 10:36 - 00003120 _____ () C:\Windows\SysWOW64\ALLFSAF14a.ocx 2014-05-05 10:36 - 2014-05-05 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2014 Some content of TEMP: ==================== C:\Users\Jusuf-Future\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpeaujmn.dll C:\Users\Jusuf-Future\AppData\Local\Temp\install_flashplayer12x32_ltr5x64d_awc_aih.exe C:\Users\Jusuf-Future\AppData\Local\Temp\ose00000.exe C:\Users\Jusuf-Future\AppData\Local\Temp\proxy_vole7986257389054591071.dll C:\Users\Jusuf-Future\AppData\Local\Temp\proxy_vole8802033318441424632.dll C:\Users\Jusuf-Future\AppData\Local\Temp\vcredist_vs2005_x86.exe C:\Users\Jusuf-Future\AppData\Local\Temp\vcredist_vs2010_x64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-30 23:31 ==================== End Of Log ============================ |
05.06.2014, 19:24 | #6 |
/// the machine /// TB-Ausbilder | Amazon Phishing Mail Link angeklickt hi, Scan mit Combofix
__________________ --> Amazon Phishing Mail Link angeklickt |
05.06.2014, 23:14 | #7 |
| Amazon Phishing Mail Link angeklickt jetzt bin ich ja mal gespannt was da rauskommt. und auch was dir diese zeilen sagen sollen. Code:
ATTFilter ComboFix 14-06-04.01 - Jusuf-Future 05.06.2014 23:49:30.1.4 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.6143.4793 [GMT 2:00] ausgeführt von:: c:\users\Jusuf-Future\Desktop\ComboFix.exe AV: BitDefender Antivirus *Disabled/Outdated* {50909708-FF80-02AF-F814-B28405891E92} FW: BitDefender Firewall *Disabled* {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9} SP: BitDefender AntiSpyware *Disabled/Outdated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\1389701801.bdinstall.bin c:\programdata\1389891899.bdinstall.bin . . ((((((((((((((((((((((( Dateien erstellt von 2014-05-05 bis 2014-06-05 )))))))))))))))))))))))))))))) . . 2014-06-05 22:00 . 2014-06-05 22:00 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-06-04 21:13 . 2014-06-04 21:13 -------- d-----w- c:\users\Jusuf-Future\AppData\Roaming\Eusing 2014-06-02 20:06 . 2014-06-04 21:22 -------- d-----w- C:\FRST 2014-06-02 11:55 . 2014-05-14 08:39 118048 ----a-w- c:\windows\system32\BootDefrag.exe 2014-06-02 07:45 . 2014-06-02 07:45 20672 ----a-w- c:\windows\system32\drivers\GUBootStartup.sys 2014-06-02 07:31 . 2014-06-02 07:46 -------- d-----w- c:\programdata\GlarySoft 2014-05-31 07:26 . 2014-05-06 04:40 23544320 ----a-w- c:\windows\system32\mshtml.dll 2014-05-31 07:26 . 2014-05-06 03:00 84992 ----a-w- c:\windows\system32\mshtmled.dll 2014-05-31 07:26 . 2014-05-06 04:17 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2014-05-31 07:26 . 2014-05-06 03:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb 2014-05-25 12:25 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll 2014-05-25 12:25 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2014-05-25 12:25 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2014-05-25 12:25 . 2013-12-24 22:48 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2014-05-25 12:25 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll 2014-05-25 12:25 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll 2014-05-25 12:24 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll 2014-05-25 12:24 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll 2014-05-25 12:16 . 2014-06-04 21:01 -------- d-----w- c:\windows\SysWow64\wbem\en-US 2014-05-25 12:16 . 2014-06-04 21:01 -------- d-----w- c:\windows\system32\wbem\en-US 2014-05-25 10:00 . 2013-10-14 16:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE 2014-05-25 09:53 . 2014-05-25 09:53 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-24 23:21 . 2014-06-04 21:01 -------- d-----w- c:\windows\Migration 2014-05-24 21:14 . 2014-06-04 21:01 -------- d-----w- c:\users\Jusuf-Future\AppData\Roaming\FreeHideIP 2014-05-24 21:14 . 2014-05-24 21:14 -------- d-----w- c:\programdata\FreeHideIP 2014-05-12 07:24 . 2014-05-12 07:25 -------- dc----w- c:\users\Jusuf-Future\AppData\Local\MigWiz . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-06-02 07:44 . 2014-01-14 19:23 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-06-02 07:44 . 2014-01-14 19:23 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-05-14 20:08 . 2014-01-14 12:33 93223848 ----a-w- c:\windows\system32\MRT.exe 2014-04-10 13:31 . 2014-04-10 13:31 34032 ----a-w- c:\windows\system32\drivers\seehcri.sys 2010-07-08 09:37 . 2010-07-08 09:37 101544 ----a-w- c:\program files\Common Files\LinkInstaller.exe . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Copy Handler"="d:\programme\Copy Handler\ch64.exe" [2010-03-07 756736] "GUDelayStartup"="c:\program files (x86)\Glary Utilities 5\StartupManager.exe" [2014-05-14 37152] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904] . c:\users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-5-29 33322976] TeamViewer 9.lnk - d:\programme\TeamViewer9\TeamViewer.exe [2014-1-14 12971328] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk * . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled] "KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" "BitDefender Antiphishing Helper"="d:\programme\BitDefender\BitDefender 2011\Antispam32\ieshow.exe" . R0 BootDefragDriver;BootDefragDriver;c:\windows\System32\drivers\BootDefragDriver.sys;c:\windows\SYSNATIVE\drivers\BootDefragDriver.sys [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys;c:\windows\SYSNATIVE\DRIVERS\avc3.sys [x] R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys;c:\windows\SYSNATIVE\DRIVERS\avckf.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x] R3 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 Update Server;BitDefender Update Server v2;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S0 GUBootStartup;GUBootStartup;c:\windows\System32\drivers\GUBootStartup.sys;c:\windows\SYSNATIVE\drivers\GUBootStartup.sys [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x] S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys;c:\program files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 TeamViewer9;TeamViewer 9;d:\programme\TeamViewer9\TeamViewer_Service.exe;d:\programme\TeamViewer9\TeamViewer_Service.exe [x] S2 Updatesrv;BitDefender Desktop Update Service;d:\programme\BitDefender\BitDefender 2011\updatesrv.exe;d:\programme\BitDefender\BitDefender 2011\updatesrv.exe [x] S2 Windows8FirewallService;Windows8FirewallService;d:\programme\Windows8FirewallControl\Windows8FirewallService.exe;d:\programme\Windows8FirewallControl\Windows8FirewallService.exe [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 bdfm;bdfm;c:\windows\system32\DRIVERS\bdfm.sys;c:\windows\SYSNATIVE\DRIVERS\bdfm.sys [x] S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys;c:\windows\SYSNATIVE\DRIVERS\seehcri.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL . Inhalt des "geplante Tasks" Ordners . 2014-06-05 c:\windows\Tasks\GlaryInitialize 5.job - c:\program files (x86)\Glary Utilities 5\Initialize.exe [2014-05-14 08:37] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 164016 ----a-w- c:\users\Jusuf-Future\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Windows8FirewallControl"="d:\programme\Windows8FirewallControl\Windows8FirewallControl.exe" [2013-09-30 1204224] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = about:blank IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 FF - ProfilePath - c:\users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\ FF - prefs.js: browser.startup.homepage - about:home FF - prefs.js: keyword.URL - hxxp://www.sm.de/?q= . - - - - Entfernte verwaiste Registrierungseinträge - - - - . HKLM-Run-Copy Handler - (no file) . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-06-06 00:09:36 ComboFix-quarantined-files.txt 2014-06-05 22:09 . Vor Suchlauf: 10 Verzeichnis(se), 55.445.143.552 Bytes frei Nach Suchlauf: 14 Verzeichnis(se), 61.223.145.472 Bytes frei . - - End Of File - - A311F8FFEDF9519808B14881695CDBE8 A36C5E4F47E84449FF07ED3517B43A31 gruß |
06.06.2014, 20:50 | #8 |
/// the machine /// TB-Ausbilder | Amazon Phishing Mail Link angeklickt Nach Malware, was sonst Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
11.06.2014, 23:32 | #9 |
| Amazon Phishing Mail Link angeklicktCode:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 11.06.2014 Suchlauf-Zeit: 22:07:37 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.06.11.07 Rootkit Datenbank: v2014.06.02.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Jusuf-Future Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 277966 Verstrichene Zeit: 8 Min, 17 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.212 - Bericht erstellt am 11/06/2014 um 22:19:14 # Aktualisiert 05/06/2014 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzername : Jusuf-Future - JUSUF-FUTURE-PC # Gestartet von : C:\Users\Jusuf-Future\Desktop\adwcleaner_3.212.exe # Option : Suchen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gefunden : HKCU\Software\Conduit Schlüssel Gefunden : HKCU\Software\OCS Schlüssel Gefunden : [x64] HKCU\Software\Conduit Schlüssel Gefunden : [x64] HKCU\Software\OCS Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\secman.DLL Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3} Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_google-sketchup_RASAPI32 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_google-sketchup_RASMANCS Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} ***** [ Browser ] ***** -\\ Internet Explorer v8.0.7601.17514 -\\ Mozilla Firefox v29.0.1 (de) [ Datei : C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\prefs.js ] Zeile gefunden : user_pref("keyword.URL", "hxxp://www.sm.de/?q="); ************************* AdwCleaner[R0].txt - [2406 octets] - [11/06/2014 22:19:14] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2466 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Professional x64 Ran by Jusuf-Future on 11.06.2014 at 22:36:28,11 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\secman.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_google-sketchup_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_google-sketchup_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_google-sketchup_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_google-sketchup_RASMANCS ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free registry cleaner" Successfully deleted: [Folder] "C:\Users\Jusuf-Future\AppData\Roaming\microsoft\windows\start menu\programs\free registry cleaner" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 12.06.2014 at 0:05:35,59 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 Ran by Jusuf-Future (administrator) on JUSUF-FUTURE-PC on 12-06-2014 00:28:57 Running from C:\Users\Jusuf-Future\Desktop Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\vsserv.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Sphinx Software) D:\Programme\Windows8FirewallControl\Windows8FirewallService.exe (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\bdagent.exe (Sphinx Software) D:\Programme\Windows8FirewallControl\Windows8FirewallControl.exe ( ) D:\Programme\Copy Handler\ch64.exe (Dropbox, Inc.) C:\Users\Jusuf-Future\AppData\Roaming\Dropbox\bin\Dropbox.exe (BitDefender S.R.L.) D:\Programme\Bitdefender\BitDefender 2011\updatesrv.exe (Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe (Mozilla Corporation) D:\Programme\Thunderbird\thunderbird.exe (TeamViewer GmbH) D:\Programme\TeamViewer9\TeamViewer_Service.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Copy Handler] => [X] HKLM\...\Run: [Windows8FirewallControl] => D:\Programme\Windows8FirewallControl\Windows8FirewallControl.exe [1204224 2013-09-30] (Sphinx Software) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKU\S-1-5-21-1984611812-295292874-3938284050-1000\...\Run: [Copy Handler] => D:\Programme\Copy Handler\ch64.exe [756736 2010-03-07] ( ) HKU\S-1-5-21-1984611812-295292874-3938284050-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-05-14] (Glarysoft Ltd) Startup: C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Jusuf-Future\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamViewer 9.lnk ShortcutTarget: TeamViewer 9.lnk -> D:\Programme\TeamViewer9\TeamViewer.exe (TeamViewer GmbH) BootExecute: autocheck autochk * ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKLM - {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - DefaultScope {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - {4518051C-6EA3-4AA8-87B1-A1172D75D191} URL = hxxp://www.sm.de/?q={searchTerms} Toolbar: HKLM - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - D:\Programme\BitDefender\BitDefender 2011\IEToolbar.dll (BitDefender S.R.L.) Toolbar: HKLM-x32 - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - D:\Programme\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll (BitDefender S.R.L.) Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default FF SearchEngineOrder.1: SuchMaschine FF Homepage: about:home FF Keyword.URL: hxxp://www.sm.de/?q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.2 - D:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 - D:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\searchplugins\search_engine.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25] FF Extension: anonymoX - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\client@anonymox.net.xpi [2014-05-24] FF Extension: Adblock Plus - C:\Users\Jusuf-Future\AppData\Roaming\Mozilla\Firefox\Profiles\4j54q48y.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-14] FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ FF Extension: BitDefender Antiphishing Toolbar - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ [] FF HKLM-x32\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ FF Extension: BitDefender Antiphishing Toolbar - D:\Programme\BitDefender\BitDefender 2011\bdaphffext\ [] FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Services (Whitelisted) ================= S3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [46904 2013-12-17] (Hewlett-Packard Company) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer9; D:\Programme\TeamViewer9\TeamViewer_Service.exe [5037888 2014-06-06] (TeamViewer GmbH) S3 Update Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [467248 2010-11-30] (BitDefender) R2 Updatesrv; D:\Programme\BitDefender\BitDefender 2011\updatesrv.exe [53224 2014-01-18] (BitDefender S.R.L.) R2 VSSERV; D:\Programme\BitDefender\BitDefender 2011\vsserv.exe [2660624 2014-01-18] (BitDefender S.R.L.) R2 Windows8FirewallService; D:\Programme\Windows8FirewallControl\Windows8FirewallService.exe [3806720 2013-09-30] (Sphinx Software) [File not signed] ==================== Drivers (Whitelisted) ==================== S3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [591968 2010-11-29] (BitDefender) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [1186272 2010-11-29] (BitDefender) R3 bdfm; C:\Windows\System32\DRIVERS\bdfm.sys [162896 2010-05-13] (BitDefender S.R.L. Bucharest, ROMANIA) R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [431176 2011-03-24] (BitDefender) R1 bdfwfpf; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [99408 2010-08-20] (BitDefender) R0 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-06-02] (Glarysoft Ltd) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] () R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2014-04-10] (Sony Ericsson Mobile Communications) S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-12 00:28 - 2014-06-12 00:28 - 00008730 _____ () C:\Users\Jusuf-Future\Desktop\FRST.txt 2014-06-12 00:28 - 2014-06-12 00:28 - 00000000 ____D () C:\Users\Jusuf-Future\Desktop\FRST-OlderVersion 2014-06-12 00:05 - 2014-06-12 00:05 - 00002092 _____ () C:\Users\Jusuf-Future\Desktop\JRT.txt 2014-06-11 22:36 - 2014-06-11 22:36 - 00000000 ____D () C:\Windows\ERUNT 2014-06-11 22:19 - 2014-06-11 22:19 - 00002570 _____ () C:\Users\Jusuf-Future\Desktop\AdwCleaner[R0].txt 2014-06-11 22:18 - 2014-06-11 22:19 - 00000000 ____D () C:\AdwCleaner 2014-06-11 22:18 - 2014-06-11 22:18 - 00001165 _____ () C:\Users\Jusuf-Future\Desktop\mbam.txt 2014-06-11 22:06 - 2014-06-11 22:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-11 22:06 - 2014-06-11 22:06 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-11 22:06 - 2014-06-11 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-11 22:06 - 2014-06-11 22:06 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-11 22:06 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-11 22:06 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-06-11 22:06 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-06-11 22:05 - 2014-06-11 22:05 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Jusuf-Future\Desktop\mbam-setup-2.0.2.1012.exe 2014-06-11 22:05 - 2014-06-11 22:05 - 01333465 _____ () C:\Users\Jusuf-Future\Desktop\adwcleaner_3.212.exe 2014-06-11 22:05 - 2014-06-11 22:05 - 01016261 _____ (Thisisu) C:\Users\Jusuf-Future\Desktop\JRT.exe 2014-06-06 00:09 - 2014-06-06 00:09 - 00014658 _____ () C:\ComboFix.txt 2014-06-06 00:09 - 2014-06-06 00:09 - 00000000 ____D () C:\Users\Public\AppData\Local\temp 2014-06-06 00:09 - 2014-06-06 00:09 - 00000000 ____D () C:\Users\Default\AppData\Local\temp 2014-06-06 00:09 - 2014-06-06 00:09 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp 2014-06-05 23:45 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-06-05 23:45 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-06-05 23:45 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-06-05 23:45 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-06-05 23:45 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-06-05 23:45 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-06-05 23:45 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-06-05 23:45 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-06-05 23:35 - 2014-06-06 00:09 - 00000000 ____D () C:\Qoobox 2014-06-05 23:35 - 2014-06-06 00:02 - 00000000 ____D () C:\Windows\erdnt 2014-06-05 23:34 - 2014-06-05 23:34 - 05205146 ____R (Swearware) C:\Users\Jusuf-Future\Desktop\ComboFix.exe 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Eusing 2014-06-04 22:24 - 2014-06-12 00:28 - 00000000 ____D () C:\Users\Jusuf-Future\Desktop\frst1 2014-06-02 22:06 - 2014-06-12 00:28 - 00000000 ____D () C:\FRST 2014-06-02 22:02 - 2014-06-12 00:28 - 02081792 _____ (Farbar) C:\Users\Jusuf-Future\Desktop\FRST64.exe 2014-06-02 13:55 - 2014-05-14 10:39 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe 2014-06-02 09:46 - 2014-06-11 21:54 - 00000348 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-02 09:46 - 2014-06-04 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-02 09:46 - 2014-06-02 13:41 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-02 09:46 - 2014-06-02 09:46 - 00002672 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-02 09:45 - 2014-06-02 09:45 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-02 09:31 - 2014-06-02 09:46 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-05-31 09:26 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-31 09:26 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-31 09:26 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-31 09:26 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-31 09:26 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-31 09:26 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-30 23:43 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-30 23:43 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-30 23:43 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-30 23:43 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-30 23:43 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-30 23:43 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-30 23:43 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-30 23:43 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-30 23:43 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-30 23:43 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-30 23:43 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-30 23:43 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-30 23:43 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-30 23:43 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-30 23:43 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-30 23:43 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-30 23:43 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-30 23:43 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-30 23:43 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-30 23:43 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-30 23:43 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-30 23:43 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-30 23:43 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-30 23:43 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-30 23:43 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-30 23:43 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-30 23:43 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-30 23:43 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-30 23:43 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-30 23:43 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-30 23:43 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-30 23:43 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-30 23:43 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-30 23:43 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-30 23:43 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-30 23:43 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-30 23:43 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-30 23:43 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-30 23:43 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-30 23:43 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-30 23:43 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-30 23:43 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-30 23:43 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-30 23:43 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-05-25 14:25 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-05-25 14:25 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-05-25 14:25 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-05-25 14:25 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-05-25 14:25 - 2013-11-23 19:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-05-25 14:25 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-05-25 14:24 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-05-25 14:24 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-05-25 14:18 - 2014-05-25 14:18 - 00001376 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-25 12:00 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-05-25 11:54 - 2014-05-25 11:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-25 11:53 - 2014-05-25 11:53 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:51 - 2014-05-25 12:00 - 00011498 _____ () C:\Windows\IE11_main.log 2014-05-24 23:14 - 2014-06-04 23:01 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeHideIP 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\ProgramData\FreeHideIP 2014-05-14 10:33 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-14 10:33 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-14 10:33 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-14 10:33 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-14 10:33 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-14 10:33 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-14 10:33 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-14 10:33 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-14 10:33 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-14 10:33 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-14 10:33 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-14 10:33 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-14 10:33 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-14 10:33 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-14 10:33 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-14 10:33 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-14 10:33 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 10:33 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 10:33 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-14 10:33 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-14 10:33 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll ==================== One Month Modified Files and Folders ======= 2014-06-12 00:29 - 2014-06-12 00:28 - 00008730 _____ () C:\Users\Jusuf-Future\Desktop\FRST.txt 2014-06-12 00:29 - 2014-01-14 13:47 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Temp 2014-06-12 00:28 - 2014-06-12 00:28 - 00000000 ____D () C:\Users\Jusuf-Future\Desktop\FRST-OlderVersion 2014-06-12 00:28 - 2014-06-04 22:24 - 00000000 ____D () C:\Users\Jusuf-Future\Desktop\frst1 2014-06-12 00:28 - 2014-06-02 22:06 - 00000000 ____D () C:\FRST 2014-06-12 00:28 - 2014-06-02 22:02 - 02081792 _____ (Farbar) C:\Users\Jusuf-Future\Desktop\FRST64.exe 2014-06-12 00:05 - 2014-06-12 00:05 - 00002092 _____ () C:\Users\Jusuf-Future\Desktop\JRT.txt 2014-06-11 23:57 - 2014-01-14 13:47 - 01150394 _____ () C:\Windows\WindowsUpdate.log 2014-06-11 23:03 - 2014-05-01 22:16 - 00000000 ____D () d:\Programme\Thunderbird 2014-06-11 22:36 - 2014-06-11 22:36 - 00000000 ____D () C:\Windows\ERUNT 2014-06-11 22:25 - 2014-01-14 15:13 - 00000688 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-06-11 22:25 - 2014-01-14 15:13 - 00000000 ____D () d:\Programme\TeamViewer9 2014-06-11 22:19 - 2014-06-11 22:19 - 00002570 _____ () C:\Users\Jusuf-Future\Desktop\AdwCleaner[R0].txt 2014-06-11 22:19 - 2014-06-11 22:18 - 00000000 ____D () C:\AdwCleaner 2014-06-11 22:18 - 2014-06-11 22:18 - 00001165 _____ () C:\Users\Jusuf-Future\Desktop\mbam.txt 2014-06-11 22:07 - 2014-06-11 22:06 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-11 22:06 - 2014-06-11 22:06 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-06-11 22:06 - 2014-06-11 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-06-11 22:06 - 2014-06-11 22:06 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-11 22:05 - 2014-06-11 22:05 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Jusuf-Future\Desktop\mbam-setup-2.0.2.1012.exe 2014-06-11 22:05 - 2014-06-11 22:05 - 01333465 _____ () C:\Users\Jusuf-Future\Desktop\adwcleaner_3.212.exe 2014-06-11 22:05 - 2014-06-11 22:05 - 01016261 _____ (Thisisu) C:\Users\Jusuf-Future\Desktop\JRT.exe 2014-06-11 22:01 - 2009-07-14 06:45 - 00026944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-11 22:01 - 2009-07-14 06:45 - 00026944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-11 21:58 - 2014-01-14 14:10 - 00084112 _____ () C:\Users\Jusuf-Future\AppData\Local\GDIPFONTCACHEV1.DAT 2014-06-11 21:54 - 2014-06-02 09:46 - 00000348 _____ () C:\Windows\Tasks\GlaryInitialize 5.job 2014-06-11 21:54 - 2014-01-14 21:26 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\DropboxMaster 2014-06-11 21:54 - 2014-01-14 21:25 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Dropbox 2014-06-11 21:53 - 2014-02-06 11:07 - 00036647 _____ () C:\Windows\setupact.log 2014-06-11 21:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-06 21:45 - 2014-03-27 00:44 - 00085442 _____ () C:\Windows\PFRO.log 2014-06-06 00:09 - 2014-06-06 00:09 - 00014658 _____ () C:\ComboFix.txt 2014-06-06 00:09 - 2014-06-06 00:09 - 00000000 ____D () C:\Users\Public\AppData\Local\temp 2014-06-06 00:09 - 2014-06-06 00:09 - 00000000 ____D () C:\Users\Default\AppData\Local\temp 2014-06-06 00:09 - 2014-06-06 00:09 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp 2014-06-06 00:09 - 2014-06-05 23:35 - 00000000 ____D () C:\Qoobox 2014-06-06 00:02 - 2014-06-05 23:35 - 00000000 ____D () C:\Windows\erdnt 2014-06-06 00:01 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-06-05 23:34 - 2014-06-05 23:34 - 05205146 ____R (Swearware) C:\Users\Jusuf-Future\Desktop\ComboFix.exe 2014-06-04 23:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-04 23:13 - 2014-06-04 23:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Eusing 2014-06-04 23:01 - 2014-06-02 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 2014-06-04 23:01 - 2014-05-24 23:14 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeHideIP 2014-06-04 23:01 - 2014-05-06 09:47 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-04 23:01 - 2014-04-17 08:43 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\FreeAudioPack 2014-06-04 23:01 - 2014-01-26 16:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Spotify 2014-06-04 23:01 - 2014-01-24 12:51 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\MyPhoneExplorer 2014-06-04 23:01 - 2014-01-14 21:34 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\vlc 2014-06-04 23:01 - 2014-01-14 21:26 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-06-04 23:01 - 2014-01-14 21:23 - 00000000 ____D () C:\Windows\system32\Macromed 2014-06-04 23:01 - 2014-01-14 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-06-04 23:01 - 2014-01-14 15:02 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Copy Handler 2014-06-04 23:01 - 2014-01-14 13:48 - 00000000 ___RD () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-06-04 23:01 - 2014-01-14 13:48 - 00000000 ___RD () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-06-04 23:01 - 2014-01-14 13:47 - 00000000 ____D () C:\Users\Jusuf-Future 2014-06-04 23:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\Offline Web Pages 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2014-06-04 23:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-06-04 23:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-06-04 22:39 - 2009-07-14 06:45 - 04906360 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-06-02 17:50 - 2014-01-14 22:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-06-02 13:41 - 2014-06-02 09:46 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2014-06-02 09:46 - 2014-06-02 09:46 - 00002672 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5 2014-06-02 09:46 - 2014-06-02 09:31 - 00000000 ____D () C:\ProgramData\GlarySoft 2014-06-02 09:46 - 2014-01-14 14:39 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\GlarySoft 2014-06-02 09:45 - 2014-06-02 09:45 - 00020672 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys 2014-06-02 09:45 - 2014-01-26 16:12 - 00000739 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk 2014-06-02 09:45 - 2014-01-26 16:12 - 00000000 ____D () d:\Programme\CDBurnerXP 2014-06-02 09:44 - 2014-01-14 21:23 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-02 09:44 - 2014-01-14 21:23 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-02 09:40 - 2014-04-22 16:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2014-06-02 09:40 - 2014-04-17 08:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack 2014-06-02 09:40 - 2014-04-15 11:57 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled 2014-06-02 09:40 - 2014-03-29 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProcrastiTracker 2014-06-02 09:40 - 2014-01-24 12:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-06-02 09:40 - 2014-01-18 15:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitDefender 2011 2014-06-02 09:40 - 2014-01-14 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler 2014-06-02 09:39 - 2014-01-14 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-05-31 19:13 - 2014-01-26 16:13 - 00000000 ____D () C:\Users\Jusuf-Future\AppData\Local\Spotify 2014-05-25 14:18 - 2014-05-25 14:18 - 00001376 _____ () C:\Users\Jusuf-Future\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-25 14:17 - 2014-01-14 22:38 - 00000000 ____D () C:\Windows\Panther 2014-05-25 12:00 - 2014-05-25 11:51 - 00011498 _____ () C:\Windows\IE11_main.log 2014-05-25 11:54 - 2014-05-25 11:54 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-05-25 11:54 - 2014-05-25 11:54 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-05-25 11:54 - 2014-05-25 11:54 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-05-25 11:54 - 2014-05-25 11:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-05-25 11:54 - 2014-05-25 11:54 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-05-25 11:54 - 2014-05-25 11:54 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-05-25 11:53 - 2014-05-25 11:53 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:53 - 2014-05-25 11:53 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-05-25 11:48 - 2014-01-14 22:36 - 00699416 _____ () C:\Windows\system32\perfh007.dat 2014-05-25 11:48 - 2014-01-14 22:36 - 00149556 _____ () C:\Windows\system32\perfc007.dat 2014-05-25 11:48 - 2014-01-14 15:19 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-05-25 11:47 - 2009-07-14 07:13 - 01593956 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-24 23:14 - 2014-05-24 23:14 - 00000000 ____D () C:\ProgramData\FreeHideIP 2014-05-14 22:10 - 2014-01-14 14:33 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-14 22:08 - 2014-01-14 14:33 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-14 10:39 - 2014-06-02 13:55 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe Some content of TEMP: ==================== C:\Users\Jusuf-Future\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpsx3mm6.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-30 23:31 ==================== End Of Log ============================ --- --- --- |
12.06.2014, 08:54 | #10 |
/// the machine /// TB-Ausbilder | Amazon Phishing Mail Link angeklickt AdwCleaner musst du auch löschen lassen. ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.06.2014, 10:29 | #11 |
| Amazon Phishing Mail Link angeklickt hi schrauber, vielen dank für deine mühe, aber das ging mir jetzt alles zu lange. ich hab mein system neu aufgesetzt, das war die schnellere Lösung. danke für dein support und entschuldige die späte nachricht. lg, n. |
24.06.2014, 17:41 | #12 |
/// the machine /// TB-Ausbilder | Amazon Phishing Mail Link angeklickt ok.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Amazon Phishing Mail Link angeklickt |
amazon, angeklickt, benutzung, bitdefender, compu, computer, dateien, defender, erklären, geklickt, geladen, hoffe, jahre, kollege, link, mac, mail, peinlich, phishing, runter, schonmal, system, thread, win, win7 |