|
Plagegeister aller Art und deren Bekämpfung: Windows 7 - Startmenü fehlerhaft und keine Windows updatesWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
04.10.2014, 15:32 | #16 |
| Windows 7 - Startmenü fehlerhaft und keine Windows updates das funktioniert nicht wenn ich den adwcleaner starten will friert mein pc ein, auch wenn ich windows updates starten will. ich kann zwar meine mouse noch bewegen aber wenn ich auf etwas klicke kommt nix ,da kommt nur so nen ton so nen "bing".habs auch neu geladen geht nicht. hab auch 2 mal pc neugetsatet dann geht es auch nicht. und immer wieder kommt diese java meldung. |
04.10.2014, 15:39 | #17 |
/// TB-Ausbilder | Windows 7 - Startmenü fehlerhaft und keine Windows updates Servus,
__________________ComboFix neu laden und ausführen: Scan mit Combofix
|
04.10.2014, 17:01 | #18 |
| Windows 7 - Startmenü fehlerhaft und keine Windows updates wenn ich combofix laufen lasse kommt diese meldung:
__________________!! Warnung!!ES IST NICHT SICHER weiter zu machen! Der Inhalt des ComboFix-Anwendungspacketes wurde komprimitiert. Bitte lade eine frische Version von: hxxp://www.bleepingcomputer.com/combofix/how-to-use-combofix herunter. NBu bist vielleicht mit einem Virus infiziert,der Dateien modifiziert, bzw. infiziert 'Virut' und dann kann ich nur noch auf OK klicken soll ich laden? und das mit der Fahne neben der uhr aufm desktop da hab ich drauf geklickt und da soll ich eine "Sicherung machen" steht da,soll ich das machen? |
05.10.2014, 12:28 | #19 | |
/// TB-Ausbilder | Windows 7 - Startmenü fehlerhaft und keine Windows updatesZitat:
Jetzt nicht sichern, können wir machen, wenn der Rechner sauber ist (sofern wir ihn noch sauber bekommen). |
05.10.2014, 15:45 | #20 |
| Windows 7 - Startmenü fehlerhaft und keine Windows updates da ist jetzt ein combofix ordner auf C;\ mit vielen dateien aber keine combofix.txt was können wir jetzt noch machen OMG. ich hab ne ndis.combofix.dat gefunden vielleicht hilft dir das ja.... FINDSTR -MI "update_load" %systemdrive%\cp*.nls >ndis00 2>nul FOR /F "TOKENS=*" %%G IN ( ndis00 ) DO @( DEL /A/F/Q "%%~G" IF NOT EXIST "%%~G" ECHO."%%~G">>drev.dat IF EXIST "%%~G" ECHO.%%~G . . . . failed to delete>>drev.dat )>n_%random% 2>&1 DEL ndis00 2>nul |
06.10.2014, 14:23 | #21 |
/// TB-Ausbilder | Windows 7 - Startmenü fehlerhaft und keine Windows updates Servus, lass mal ESET laufen: ESET Online Scanner
|
07.10.2014, 03:02 | #22 |
| Windows 7 - Startmenü fehlerhaft und keine Windows updatesCode:
ATTFilter C:\Program Files\FuzeZip\Helper.dll Variante von Win32/Toolbar.SearchSuite.P evtl. unerwünschte Anwendung C:\Program Files\FuzeZip\Uninstall.exe Variante von Win32/KoyoteLab.A evtl. unerwünschte Anwendung C:\ProgramData\Comodo\Cis\Quarantine\data\{CDDE6711-5BA5-44AD-A35E-7DE7081505BF} Variante von Win32/AdWare.iBryte.AM Anwendung C:\Users\All Users\Comodo\Cis\Quarantine\data\{CDDE6711-5BA5-44AD-A35E-7DE7081505BF} Variante von Win32/AdWare.iBryte.AM Anwendung E:\Users\All Users\Comodo\Cis\Quarantine\data\{CDDE6711-5BA5-44AD-A35E-7DE7081505BF} Variante von Win32/AdWare.iBryte.AM Anwendung nirgend gefunden. |
07.10.2014, 13:32 | #23 |
/// TB-Ausbilder | Windows 7 - Startmenü fehlerhaft und keine Windows updates Servus, welche Probleme gibt es derzeit außer Java und Windows updates? Wie läuft der Rechner sonst so? Schritt 1 Bitte lade dir rKill von Grinler auf deinen Desktop von einem der folgenden Links: RKill oder http://www.trojaner-board.de/85629-rkill-download.html
Schritt 2 Downloade dir bitte ESET services repair und speichere es auf den Desktop.
Schritt 3
Schritt 4 Downloade dir bitte Farbar Service Scanner
Poste bitte den Inhalt hier. Bitte poste mit deiner nächsten Antwort
|
09.10.2014, 16:09 | #24 |
| Windows 7 - Startmenü fehlerhaft und keine Windows updates ok also hier das rkill logfile: Code:
ATTFilter Rkill 2.6.8 by Lawrence Abrams (Grinler) hxxp://www.bleepingcomputer.com/ Copyright 2008-2014 BleepingComputer.com More Information about Rkill can be found at this link: hxxp://www.bleepingcomputer.com/forums/topic308364.html Program started at: 10/09/2014 04:04:20 PM in x86 mode. Windows Version: Windows 7 Ultimate Service Pack 1 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * No malware processes found to kill. Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Windows Defender Disabled [HKLM\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware" = dword:00000001 Checking Windows Service Integrity: * Windows Defender (WinDefend) is not Running. Startup Type set to: Manual Searching for Missing Digital Signatures: * No issues found. Checking HOSTS File: * No issues found. Program finished at: 10/09/2014 04:14:07 PM Execution time: 0 hours(s), 9 minute(s), and 47 seconds(s) und beim schritt 2 hat servicesrepair zwar den CCspuort ordner erstellt aber da war kein logfile und der pc musste auch nicht neustarten. hier logfile FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-10-2014 01 Ran by Plüming (administrator) on PLÜMING-PC on 09-10-2014 16:56:08 Running from C:\Users\Plüming\Desktop Loaded Profiles: Plüming & UpdatusUser (Available profiles: Plüming & UpdatusUser) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Nero AG) C:\Program Files\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10988176 2012-05-28] (Realtek Semiconductor) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1225944 2014-03-25] (COMODO) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms} BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\bin\jp2ssv.dll (Oracle Corporation) Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll" Tcpip\..\Interfaces\{3860F474-5B69-428A-A1E7-8947840FB662}: [NameServer] 192.168.1.1,156.154.70.22 FireFox: ======== FF ProfilePath: C:\Users\Plüming\AppData\Roaming\Mozilla\Firefox\Profiles\rjigi514.default-1370874045694 FF NewTab: hxxp://www.google.com/ FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files\Java\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-09-26] Chrome: ======= CHR CustomProfile: C:\Users\Plüming\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Plüming\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08] CHR Extension: (Google Wallet) - C:\Users\Plüming\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-04] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5306504 2014-04-16] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [1663192 2014-03-25] (COMODO) R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG) S2 VMware NAT Service; C:\Windows\system32\vmnat.exe [437976 2014-06-12] (VMware, Inc.) S2 SbieSvc; "H:\Program Files\Sandboxie\SbieSvc.exe" [X] S2 VMnetDHCP; C:\Windows\system32\vmnetdhcp.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20072 2014-04-16] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [607168 2014-04-16] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [43728 2014-04-16] (COMODO) S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [30976 2014-05-10] () R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [92656 2014-04-16] (COMODO) R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [55848 2010-03-29] (Atheros Communications, Inc.) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2009-07-16] () S3 SbieDrv; \??\H:\Program Files\Sandboxie\SbieDrv.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X] S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X] S2 VMnetBridge; system32\DRIVERS\vmnetbridge.sys [X] S2 VMnetuserif; \??\C:\Windows\system32\drivers\vmnetuserif.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-09 16:56 - 2014-10-09 16:58 - 00008322 _____ () C:\Users\Plüming\Desktop\FRST.txt 2014-10-09 16:55 - 2014-10-09 16:55 - 01101312 _____ (Farbar) C:\Users\Plüming\Desktop\FRST.exe 2014-10-09 16:55 - 2014-10-09 16:55 - 00000000 ____D () C:\Users\Plüming\Desktop\FRST-OlderVersion 2014-10-09 16:46 - 2014-10-09 16:46 - 00000000 ____D () C:\Users\Public\Desktop\CC Support 2014-10-09 16:44 - 2014-10-09 16:44 - 04009167 _____ () C:\Users\Plüming\Desktop\ServicesRepair.exe 2014-10-09 16:04 - 2014-10-09 16:14 - 00002352 _____ () C:\Users\Plüming\Desktop\Rkill.txt 2014-10-09 16:03 - 2014-10-09 16:04 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Plüming\Desktop\rkill.com 2014-10-07 03:51 - 2014-10-07 03:51 - 00000599 _____ () C:\Users\Plüming\Desktop\k.txt 2014-10-06 18:46 - 2014-10-06 18:46 - 02347384 _____ (ESET) C:\Users\Plüming\Downloads\esetsmartinstaller_deu.exe 2014-10-05 16:18 - 2014-10-05 16:18 - 00000000 ____D () C:\ComboFix 2014-10-05 16:14 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-10-05 16:05 - 2014-10-05 16:05 - 00001106 _____ () C:\Users\Plüming\Desktop\ComboFix.exe - Verknüpfung.lnk 2014-10-05 16:04 - 2014-10-05 16:05 - 05582481 ____R (Swearware) C:\Users\Plüming\Downloads\ComboFix.exe 2014-10-04 16:06 - 2014-10-04 16:06 - 01375089 _____ () C:\Users\Plüming\Desktop\AdwCleaner_3.311.exe 2014-10-03 23:33 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-10-03 23:33 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-10-03 23:05 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-10-03 23:05 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2014-10-03 23:05 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2014-10-03 23:03 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-10-03 23:02 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-10-03 23:02 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-10-03 23:02 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-10-03 23:02 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-10-03 23:02 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-10-03 23:02 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-10-03 23:02 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-10-03 23:02 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-10-03 23:02 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-10-03 23:02 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-10-03 22:56 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-10-03 22:56 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-10-03 22:56 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-10-03 22:56 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-10-03 22:56 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-10-03 22:56 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-10-03 22:53 - 2014-10-03 23:02 - 393839153 _____ () C:\Users\Plüming\Desktop\ANTI-VIRUS.rar 2014-10-03 17:31 - 2014-10-03 18:12 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-10-02 00:58 - 2014-10-02 03:59 - 00054040 _____ () C:\files.log 2014-10-01 23:43 - 2014-10-02 05:57 - 00046819 _____ () C:\folders.log 2014-10-01 23:43 - 2014-10-02 05:57 - 00000000 ____D () C:\zoek 2014-10-01 19:23 - 2014-10-02 05:57 - 00082639 _____ () C:\zoek-results.log 2014-10-01 18:51 - 2014-10-02 00:07 - 00000000 ____D () C:\zoek_backup 2014-10-01 18:31 - 2014-10-01 18:31 - 00052440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\fhtyy.sys 2014-10-01 18:30 - 2014-10-01 18:31 - 00018168 _____ () C:\mbam-log-2014-10-01 (18-14-02).xml 2014-10-01 18:13 - 2014-10-03 17:31 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-10-01 18:13 - 2014-10-03 17:30 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-10-01 18:13 - 2014-10-01 18:31 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-10-01 18:13 - 2014-10-01 18:13 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-10-01 18:13 - 2014-10-01 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-10-01 18:13 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-10-01 18:13 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-10-01 17:19 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-10-01 17:18 - 2014-10-01 17:25 - 00000000 ____D () C:\AdwCleaner 2014-10-01 17:16 - 2014-10-01 17:16 - 00000000 __SHD () C:\Users\Plüming\AppData\Local\EmieUserList 2014-10-01 17:16 - 2014-10-01 17:16 - 00000000 __SHD () C:\Users\Plüming\AppData\Local\EmieSiteList 2014-10-01 14:49 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-09-30 17:21 - 2014-08-18 23:30 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-30 17:20 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-30 16:32 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-09-30 16:31 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-30 16:31 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-09-30 16:31 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-09-30 16:31 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-09-30 16:29 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-09-30 05:22 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-09-30 02:18 - 2014-09-30 02:19 - 00700726 _____ () C:\Windows\system32\prfh0416.dat 2014-09-30 02:18 - 2014-09-30 02:19 - 00145832 _____ () C:\Windows\system32\prfc0416.dat 2014-09-30 02:18 - 2014-09-30 02:17 - 00323154 _____ () C:\Windows\system32\prfi0416.dat 2014-09-30 02:18 - 2014-09-30 02:17 - 00038536 _____ () C:\Windows\system32\prfd0416.dat 2014-09-30 02:17 - 2014-10-03 23:11 - 00000000 ____D () C:\Windows\system32\Drivers\pt-BR 2014-09-30 02:17 - 2014-09-30 02:17 - 00000000 ____D () C:\Windows\pt-BR 2014-09-30 01:51 - 2014-09-30 01:51 - 00000000 ____D () C:\Windows\system32\Drivers\ro-RO 2014-09-30 01:51 - 2014-09-30 01:51 - 00000000 ____D () C:\Windows\ro-RO 2014-09-30 01:42 - 2014-09-30 01:42 - 00000000 ____D () C:\Windows\system32\Drivers\bg-BG 2014-09-30 01:42 - 2014-09-30 01:42 - 00000000 ____D () C:\Windows\bg-BG 2014-09-30 01:34 - 2014-09-30 02:19 - 00644510 _____ () C:\Windows\system32\perfh01F.dat 2014-09-30 01:34 - 2014-09-30 02:19 - 00138460 _____ () C:\Windows\system32\perfc01F.dat 2014-09-30 01:34 - 2014-09-30 01:32 - 00285034 _____ () C:\Windows\system32\perfi01F.dat 2014-09-30 01:34 - 2014-09-30 01:32 - 00037160 _____ () C:\Windows\system32\perfd01F.dat 2014-09-30 01:32 - 2014-09-30 05:34 - 00000000 ____D () C:\Windows\system32\Drivers\tr-TR 2014-09-30 01:32 - 2014-09-30 01:32 - 00000000 ____D () C:\Windows\tr-TR 2014-09-30 01:32 - 2014-09-30 01:32 - 00000000 ____D () C:\Windows\system32\tr 2014-09-30 01:18 - 2014-09-30 01:18 - 00000000 ____D () C:\Windows\th-TH 2014-09-30 01:18 - 2014-09-30 01:18 - 00000000 ____D () C:\Windows\system32\Drivers\th-TH 2014-09-30 01:18 - 2014-09-30 01:18 - 00000000 ____D () C:\Windows\system32\0409 2014-09-29 19:45 - 2014-09-29 19:51 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-29 19:37 - 2012-07-26 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-09-29 19:37 - 2012-07-26 05:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-09-29 19:37 - 2012-07-26 05:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-09-29 19:37 - 2012-07-26 05:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-09-29 19:37 - 2012-07-26 05:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-09-29 19:37 - 2012-07-26 04:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-09-29 19:37 - 2012-07-26 04:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-09-29 19:37 - 2012-06-02 16:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-09-29 19:36 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-09-29 19:36 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-09-29 19:35 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-09-29 19:35 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-09-29 19:23 - 2013-05-10 06:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-09-29 19:23 - 2013-05-10 06:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 02185728 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 01812992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-09-29 19:09 - 2014-09-29 19:09 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-09-29 19:09 - 2014-09-29 19:09 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-09-29 19:09 - 2014-09-29 19:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-09-29 19:09 - 2014-09-29 19:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-29 19:09 - 2014-09-29 19:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 17455104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 11769856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-29 19:08 - 2014-09-29 19:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-29 19:08 - 2014-09-29 19:08 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00327872 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-09-29 19:08 - 2014-09-29 19:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-09-29 19:08 - 2014-09-29 19:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-29 19:07 - 2014-09-29 19:07 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-09-29 19:07 - 2014-09-29 19:07 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-09-29 19:07 - 2014-09-29 19:07 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-09-29 19:07 - 2014-09-29 19:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-09-29 19:07 - 2014-09-29 19:07 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-09-29 19:06 - 2014-09-29 19:06 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-09-29 19:06 - 2014-09-29 19:06 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-09-29 19:03 - 2014-09-29 19:03 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-09-29 19:03 - 2014-09-29 19:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-09-29 18:59 - 2014-09-29 18:59 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-09-29 18:56 - 2014-09-29 19:15 - 00015105 _____ () C:\Windows\IE11_main.log 2014-09-29 18:44 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2014-09-29 18:44 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-09-29 18:44 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-09-29 18:44 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-09-29 18:44 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-09-29 18:44 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-09-29 18:44 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-09-29 18:44 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-09-29 18:44 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-09-29 18:44 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-09-29 18:44 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-09-29 18:42 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-09-29 18:42 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-09-29 18:42 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-09-29 18:42 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-09-29 18:42 - 2012-08-21 22:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2014-09-29 18:41 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-09-29 18:41 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-09-29 18:41 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-09-29 18:41 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-09-29 18:41 - 2013-02-12 05:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-09-29 18:41 - 2012-08-22 19:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-09-29 18:41 - 2012-07-04 21:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2014-09-29 18:41 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-09-29 18:41 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-09-29 18:39 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-09-29 18:39 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-09-29 18:39 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-09-29 18:39 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-09-29 18:38 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-09-29 18:38 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-09-29 18:38 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-29 18:38 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-29 18:38 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-09-29 18:38 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-09-29 18:38 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-09-29 18:38 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-09-29 18:38 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-09-29 18:38 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-09-29 18:37 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-09-29 18:37 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-09-29 18:37 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-09-29 18:37 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-09-29 18:37 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-09-29 18:37 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-09-29 18:37 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-09-29 18:37 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-09-29 18:37 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-09-29 18:37 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-09-29 18:36 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-09-29 18:36 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-09-29 18:36 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-09-29 18:36 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-09-29 18:36 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-09-29 18:36 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-09-29 18:36 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-09-29 18:36 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-09-29 18:36 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-09-29 18:36 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-09-29 18:36 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-09-29 18:36 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-09-29 18:36 - 2013-10-05 21:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-09-29 18:36 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-09-29 18:36 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-09-29 18:36 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-09-29 18:36 - 2013-06-06 06:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-09-29 18:36 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-09-29 18:36 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-09-29 18:36 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-09-29 18:36 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-09-29 18:36 - 2013-01-24 06:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-09-29 18:36 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-09-29 18:35 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-09-29 18:35 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-09-29 18:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-09-29 18:35 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-09-29 18:35 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-09-29 18:35 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-09-29 18:35 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-09-29 18:35 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-09-29 18:35 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-09-29 18:34 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-29 18:34 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-09-29 18:34 - 2012-11-29 00:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-09-29 18:34 - 2012-11-29 00:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-09-29 18:34 - 2012-11-29 00:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-09-29 18:34 - 2012-10-03 18:42 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2014-09-29 18:34 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2014-09-29 18:34 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2014-09-29 18:34 - 2012-10-03 18:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2014-09-29 18:34 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2014-09-29 18:34 - 2012-10-03 18:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-09-29 18:34 - 2012-10-03 17:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2014-09-29 18:34 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-09-29 18:34 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-09-29 18:34 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-09-29 18:34 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-09-29 18:34 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-09-29 18:34 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-09-29 18:34 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-09-29 18:34 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-09-29 18:34 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-09-29 18:34 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-09-29 18:33 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-09-29 18:33 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-09-29 18:33 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-09-29 18:33 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-09-29 18:33 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-09-29 18:33 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-09-29 18:33 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-09-29 18:33 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-09-29 18:33 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-09-29 18:33 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-09-29 18:33 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-09-29 18:33 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-09-29 18:33 - 2013-11-26 13:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-09-29 18:33 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-09-29 18:33 - 2013-10-12 04:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-09-29 18:33 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-09-29 18:33 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-09-29 18:33 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-09-29 18:33 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-09-29 18:33 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2014-09-29 18:33 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2014-09-29 18:33 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-09-29 18:32 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-09-29 18:32 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-09-29 18:32 - 2014-01-28 04:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-09-29 18:32 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-09-29 18:32 - 2013-11-27 03:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-09-29 18:32 - 2013-11-27 03:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-09-29 18:32 - 2013-11-27 03:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-09-29 18:32 - 2013-11-27 03:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-09-29 18:32 - 2013-11-27 03:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-09-29 18:32 - 2013-11-27 03:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-09-29 18:32 - 2013-11-27 03:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-09-29 18:32 - 2013-10-04 03:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-09-29 18:32 - 2013-10-04 03:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-09-29 18:32 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-09-29 18:32 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-09-29 18:32 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-09-29 18:32 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-09-29 18:32 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-09-29 18:32 - 2013-07-04 11:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-09-29 18:32 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-09-29 18:32 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-09-29 18:32 - 2013-03-19 05:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-09-29 18:32 - 2012-05-05 09:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-09-29 18:32 - 2012-05-01 06:44 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-09-29 18:28 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-09-29 18:28 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-09-29 18:28 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-09-29 18:28 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-09-29 18:28 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-09-29 18:28 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-09-29 18:28 - 2013-07-04 14:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-09-29 18:07 - 2013-02-27 06:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-09-29 18:00 - 2011-03-11 07:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2014-09-29 18:00 - 2011-03-11 07:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2014-09-29 18:00 - 2011-03-11 07:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2014-09-29 18:00 - 2011-03-11 07:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2014-09-29 18:00 - 2011-03-11 07:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2014-09-29 18:00 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-09-29 18:00 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2014-09-29 18:00 - 2011-03-11 06:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-09-29 17:52 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-09-29 17:52 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-09-29 17:52 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-09-29 17:52 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-09-29 17:50 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-09-29 17:50 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-09-29 17:50 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-09-29 17:49 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-09-29 17:49 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-09-29 17:33 - 2014-10-04 17:57 - 00001208 _____ () C:\Users\Plüming\Desktop\Neues Textdokument.txt 2014-09-29 17:29 - 2014-09-29 17:29 - 00000332 _____ () C:\Start_.cmd 2014-09-29 17:28 - 2014-09-29 17:28 - 00000000 ____D () C:\Qoobox 2014-09-29 17:27 - 2014-10-05 16:18 - 00000000 ___SD () C:\32788R22FWJFW 2014-09-29 17:27 - 2014-09-29 17:27 - 00000000 ____D () C:\Windows\erdnt 2014-09-29 17:13 - 2014-09-29 17:13 - 00000000 ____D () C:\TDSSKiller_Quarantine 2014-09-28 18:55 - 2014-10-05 19:09 - 00000000 ____D () C:\Users\Plüming\AppData\Roaming\LumacDaemon 2014-09-28 18:54 - 2014-09-28 18:54 - 00002687 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lumac.lnk 2014-09-28 18:54 - 2014-09-28 18:54 - 00002681 _____ () C:\Users\Public\Desktop\Lumac.lnk 2014-09-28 18:54 - 2014-09-28 18:54 - 00000000 ____D () C:\Users\Plüming\AppData\Local\Firstload 2014-09-28 17:04 - 2014-09-28 17:04 - 00000000 ____D () C:\Users\Plüming\AppData\Roaming\Abelssoft 2014-09-28 17:04 - 2014-09-28 17:04 - 00000000 ____D () C:\Users\Plüming\AppData\Local\Abelssoft 2014-09-28 17:04 - 2014-09-28 17:04 - 00000000 ____D () C:\ProgramData\XDMessagingv4 2014-09-28 17:03 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\system32\dhRichClient3.dll 2014-09-28 17:03 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\system32\sqlite36_engine.dll 2014-09-27 18:21 - 2014-10-09 16:56 - 00000000 ____D () C:\FRST 2014-09-26 09:15 - 2014-09-26 09:15 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-17 21:07 - 2014-09-17 21:09 - 00000000 ____D () C:\Users\Plüming\AppData\Roaming\VMware 2014-09-17 21:07 - 2014-09-17 21:09 - 00000000 ____D () C:\Users\Plüming\AppData\Local\VMware 2014-09-15 19:34 - 2014-09-15 19:34 - 00000000 ____D () C:\Users\Pl%C3%BCming 2014-09-15 19:30 - 2014-09-15 19:30 - 00000000 ____D () C:\Users\Plüming\Documents\Electronic Arts ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-09 16:54 - 2012-06-21 14:09 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-10-09 16:04 - 2013-06-10 14:05 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-633634576-854393678-1960327611-1000UA.job 2014-10-09 16:00 - 2012-06-20 17:47 - 01823578 _____ () C:\Windows\WindowsUpdate.log 2014-10-09 16:00 - 2009-07-14 06:34 - 00027168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-10-09 16:00 - 2009-07-14 06:34 - 00027168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-10-09 15:55 - 2014-02-04 10:20 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-10-09 15:55 - 2012-06-20 18:12 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-09 15:55 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-10-09 15:55 - 2009-07-14 06:39 - 00080387 _____ () C:\Windows\setupact.log 2014-10-08 20:14 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing 2014-10-07 17:01 - 2012-06-21 13:59 - 01563502 _____ () C:\Windows\PFRO.log 2014-10-06 22:40 - 2013-06-10 14:05 - 00001076 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-633634576-854393678-1960327611-1000Core.job 2014-10-06 17:41 - 2013-08-05 17:29 - 00000000 ____D () C:\Users\Plüming\AppData\Roaming\vlc 2014-10-05 16:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-10-05 16:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\th-TH 2014-10-05 16:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\ro-RO 2014-10-05 16:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pt-BR 2014-10-05 16:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-10-05 16:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\bg-BG 2014-10-04 21:50 - 2012-09-16 13:46 - 00000000 ____D () C:\ProgramData\Origin 2014-10-04 15:39 - 2009-07-14 06:33 - 00282056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-10-03 23:14 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-10-03 23:11 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2014-10-03 22:44 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Defender 2014-10-02 00:08 - 2012-12-04 17:16 - 00000000 ____D () C:\Program Files\Java 2014-10-01 18:31 - 2009-07-14 04:37 - 00000000 _SHDC () C:\Windows\$NtUninstallKB14099$ 2014-10-01 18:31 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Cursors 2014-09-30 02:17 - 2009-07-14 10:56 - 00000000 ____D () C:\Program Files\Windows Journal 2014-09-30 02:17 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\XPSViewer 2014-09-30 02:17 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\winrm 2014-09-30 02:17 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\WCN 2014-09-30 02:17 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\slmgr 2014-09-30 02:17 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-09-30 02:17 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-09-30 02:17 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-09-30 02:17 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\DVD Maker 2014-09-30 02:17 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\MUI 2014-09-30 02:17 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\com 2014-09-30 02:17 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\IME 2014-09-30 02:17 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System 2014-09-30 01:18 - 2009-07-14 10:47 - 00000000 ____D () C:\Windows\DigitalLocker 2014-09-30 01:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-09-30 00:03 - 2010-02-09 21:56 - 00005908 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-29 23:41 - 2012-06-20 18:26 - 00063160 _____ () C:\Users\Plüming\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\zh-TW 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\zh-CN 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\sv-SE 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pt-PT 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\nl-NL 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\ko-KR 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\it-IT 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\hu-HU 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\fr-FR 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\fi-FI 2014-09-29 23:19 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\el-GR 2014-09-29 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\ru-RU 2014-09-29 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\nb-NO 2014-09-29 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\ja-JP 2014-09-28 20:19 - 2012-07-03 17:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES 2014-09-28 20:19 - 2012-06-20 18:08 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-09-28 20:10 - 2014-08-16 16:32 - 00000000 ____D () C:\ProgramData\VMware 2014-09-28 20:07 - 2012-06-21 15:25 - 00000000 ____D () C:\Users\Plüming\AppData\Roaming\BitTorrent 2014-09-26 17:17 - 2012-07-12 18:17 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-09-26 17:17 - 2012-07-12 18:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-09-26 17:02 - 2013-06-10 14:05 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-09-26 10:48 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-25 21:07 - 2013-06-10 14:07 - 00002328 _____ () C:\Users\Plüming\Desktop\Google Chrome.lnk 2014-09-15 19:56 - 2012-09-16 13:14 - 00000000 ____D () C:\Program Files\Electronic Arts Some content of TEMP: ==================== C:\Users\Plüming\AppData\Local\Temp\jre-8u20-windows-au.exe C:\Users\Plüming\AppData\Local\Temp\MouseKeyboardCenterx86_1031.exe C:\Users\Plüming\AppData\Local\Temp\NERO_TMP_0000.EXE C:\Users\Plüming\AppData\Local\Temp\NERO_TMP_0001.EXE C:\Users\Plüming\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-06 18:30 ==================== End Of Log ============================ --- --- --- und hier addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-10-2014 01 Ran by Plüming at 2014-10-09 16:59:58 Running from C:\Users\Plüming\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: COMODO Antivirus (Enabled - Up to date) {B74CC7D2-B407-E1DC-1033-DD315BCDC8C8} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: COMODO Antivirus (Enabled - Up to date) {0C2D2636-923D-EE52-2A83-E643204A8275} FW: COMODO Firewall (Enabled) {8F7746F7-FE68-E084-3B6C-7404A51E8FB3} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.7.700.202 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) ArcaniA - Fall of Setarrif (HKLM\...\{BA1F2D65-B22F-47C7-A3D0-A7827DF20272}_is1) (Version: - Nordic Games GmbH) ArcaniA - Gothic 4 (HKLM\...\{EE74D039-45D7-44E9-BF95-B9CFB015964F}_is1) (Version: - Nordic Games GmbH) Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.22 - Atheros Communications Inc.) Avidemux 2.6 (32-bit) (HKLM\...\Avidemux 2.6) (Version: 2.6.8.9046 - ) COMODO Internet Security Premium (HKLM\...\{40F962CF-3C1E-44EB-A319-5590BEEB90CF}) (Version: 6.3.35694.2953 - COMODO Security Solutions Inc.) Die Sims - Tierisch gut drauf (HKLM\...\{7C32C567-DC0F-4C80-B06C-7873850A2E06}) (Version: - ) DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.84 - DivX, LLC) Freemake Video Converter Version 4.1.4 (HKLM\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation) FuzeZip (HKCU\...\FuzeZip) (Version: 1.0.0.135055 - Koyote-Lab Inc.) <==== ATTENTION Google Chrome (HKCU\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.) IsoBuster 3.1 (HKLM\...\IsoBuster_is1) (Version: 3.1 - Smart Projects) Java 7 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217017FF}) (Version: 7.0.250 - Oracle) Java 8 Update 5 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218005FF}) (Version: 8.0.50 - Oracle Corporation) Java Auto Updater (Version: 2.8.05.13 - Oracle, Inc.) Hidden Java SE Development Kit 7 Update 10 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle) Java SE Development Kit 7 Update 9 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170090}) (Version: 1.7.0.90 - Oracle) Java SE Development Kit 8 Update 5 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation) Java(TM) 6 Update 37 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216037FF}) (Version: 6.0.370 - Oracle) Java(TM) SE Development Kit 6 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160000}) (Version: 1.6.0.0 - Sun Microsystems, Inc.) Java(TM) SE Runtime Environment 6 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160000}) (Version: 1.6.0.0 - Sun Microsystems, Inc.) Lumac (HKLM\...\InstallShield_{5DE11949-2B11-4F13-BAD5-1C237122CFDB}) (Version: 1.1.92.0 - Firstload) Lumac (Version: 1.1.92.0 - Firstload) Hidden MakeTorrent v2.1 (HKLM\...\MakeTorrent 2) (Version: - ) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Medal of Honor Warfighter Update.v322991-=AviaRa=- 1.00 (HKLM\...\Medal of Honor Warfighter Update.v322991-=AviaRa=- 1.00) (Version: - ) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Version: 4.5.51209 - Microsoft Corporation) Hidden Microsoft Age of Empires II (HKLM\...\Age of Empires 2.0) (Version: - ) Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 (HKLM\...\{6A86554B-8928-30E4-A53C-D7337689134D}) (Version: 10.0.30319 - Microsoft Corporation) Mozilla Firefox 32.0.3 (x86 de) (HKLM\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Nero Burning ROM (Version: 12.0.20000 - Nero AG) Hidden Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden Nero BurningROM 12 (HKLM\...\{3D9167B2-87EB-4713-90B4-E46F2CAFE28D}) (Version: 12.0.00300 - Nero AG) Nero ControlCenter (Version: 11.0.15200 - Nero AG) Hidden Nero ControlCenter Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden Nero Core Components (Version: 11.0.18100 - Nero AG) Hidden Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden No-IP DUC (HKLM\...\NoIPDUC) (Version: 4.1.0 - Vitalwerks Internet Solutions LLC) NVIDIA 3D Vision Controller-Treiber 296.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 296.10 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 296.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 296.10 - NVIDIA Corporation) NVIDIA Grafiktreiber 296.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 296.10 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.62.312 - NVIDIA Corporation) Hidden NVIDIA PhysX (Version: 9.12.0213 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.12.0213 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.9610 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 296.10 (Version: 296.10 - NVIDIA Corporation) Hidden NVIDIA Update 1.7.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.7.11 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.7.11 - NVIDIA Corporation) Hidden Origin (HKLM\...\Origin) (Version: 9.0.13.2135 - Electronic Arts, Inc.) Prerequisite installer (Version: 12.0.0002 - Nero AG) Hidden Project 64 version 2.1.0.1 (HKLM\...\Project 64_is1) (Version: 2.1.0.1 - ) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6649 - Realtek Semiconductor Corp.) Resource Hacker Version 3.6.0 (HKLM\...\ResourceHacker_is1) (Version: - ) Sandboxie 4.12 (32-bit) (HKLM\...\Sandboxie) (Version: 4.12 - Sandboxie Holdings, LLC) Shark007 Standard Codecs (HKLM\...\{898E81AD-6DB9-4750-866B-B8958C5DC7AA}) (Version: 1.7.0 - Shark007) SolveigMM Video Splitter (HKLM\...\SolveigMM Video Splitter 3.5.1210.2) (Version: 3.5.1210.2 - Solveig Multimedia) TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden VLC media player 2.0.8 (HKLM\...\VLC media player) (Version: 2.0.8 - VideoLAN) Windows 7 Codec Pack 4.0.8 (HKLM\...\Windows 7 - Codec Pack) (Version: 4.0.8 - Windows 7 Codec Pack) WinRAR 5.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Plüming\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\Plüming\AppData\Local\Google\Chrome\Application\37.0.2062.124\delegate_execute.exe (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Plüming\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Plüming\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.) CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> "C:\Users\Plüming\AppData\Local\Google\Update\1.3.21.153\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> "C:\Users\Plüming\AppData\Local\Google\Update\1.3.21.153\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> "C:\Users\Plüming\AppData\Local\Google\Update\1.3.21.153\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> "C:\Users\Plüming\AppData\Local\Google\Chrome\Application\29.0.1547.66\delegate_execute.exe" No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\UpdatusUser\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\UpdatusUser\AppData\Local\Google\Update\1.3.24.15\psuser.dll No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\UpdatusUser\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\UpdatusUser\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> "C:\Users\Plüming\AppData\Local\Google\Update\1.3.21.153\GoogleUpdateOnDemand.exe" No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\UpdatusUser\AppData\Local\Google\Update\1.3.21.153\psuser.dll No File CustomCLSID: HKU\S-1-5-21-633634576-854393678-1960327611-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\UpdatusUser\AppData\Local\Google\Update\1.3.24.7\psuser.dll No File ==================== Restore Points ========================= 09-10-2014 14:39:44 Geplanter Prüfpunkt ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:04 - 2011-12-22 16:11 - 00000833 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {2833E31A-C0F5-4A11-A66F-BEF58906042B} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO) Task: {45E1198F-B1FD-47B0-8C4F-6136711CD52A} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO) Task: {518AF47E-699F-4AE7-91B3-158894CE3B5D} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-08-29] () Task: {5FEEE692-DC86-4EE6-96F8-0B4C905E49F3} - System32\Tasks\Google Updater and Installer => C:\Users\Plüming\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-10] (Google Inc.) Task: {84CC5C44-E251-440C-81A2-635686952744} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-633634576-854393678-1960327611-1000UA => C:\Users\Plüming\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-10] (Google Inc.) Task: {95711075-8D2B-4F17-886B-8E2AC8E8FB19} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-633634576-854393678-1960327611-1000Core => C:\Users\Plüming\AppData\Local\Google\Update\GoogleUpdate.exe [2013-06-10] (Google Inc.) Task: {BEDA4044-6DD7-42AB-8405-BAAB43A287AC} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-03-18] (Oracle Corporation) Task: {C8E1E350-F548-49BA-833E-506927311A3B} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO) Task: {F0605A01-8BE3-4971-A4C8-5F47B52A99D0} - System32\Tasks\Google Update => C:\Users\Plüming\AppData\Local\Google\Desktop\Install\{400b67f6-d073-2ceb-8e11-a31ac83593d2}\❤≸⋙\Ⱒ☠⍨\*ﯹ๛\{400b67f6-d073-2ceb-8e11-a31ac83593d2}\GoogleUpdate.exe Task: {F9A41EB9-66E4-4E13-89D0-926CD892C1B9} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-633634576-854393678-1960327611-1000Core.job => C:\Users\Plüming\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-633634576-854393678-1960327611-1000UA.job => C:\Users\Plüming\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-09-26 09:15 - 2014-09-26 09:15 - 03715184 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2012-02-29 13:26 - 2012-02-29 13:26 - 00360768 _____ () C:\Program Files\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll 2014-09-26 17:17 - 2014-09-26 17:17 - 16825520 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll 2013-04-15 19:39 - 2013-04-15 19:39 - 00070352 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Windows\$NtUninstallKB14099$:SummaryInformation AlternateDataStreams: C:\ProgramData\TEMP:373E1720 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\14148183.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\14148183.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\Services: NAUpdate => 2 MSCONFIG\Services: TuneUp.UtilitiesSvc => 2 ========================= Accounts: ========================== Administrator (S-1-5-21-633634576-854393678-1960327611-500 - Administrator - Disabled) Gast (S-1-5-21-633634576-854393678-1960327611-501 - Limited - Disabled) Plüming (S-1-5-21-633634576-854393678-1960327611-1000 - Administrator - Enabled) => C:\Users\Plüming UpdatusUser (S-1-5-21-633634576-854393678-1960327611-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= Name: VMware Network Application Interface Description: VMware Network Application Interface Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: VMnetuserif Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. Name: VMware Virtual Ethernet Adapter for VMnet8 Description: VMware Virtual Ethernet Adapter for VMnet8 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. Name: VMware Bridge Protocol Description: VMware Bridge Protocol Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: VMnetBridge Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (10/08/2014 04:07:21 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (10/06/2014 06:34:30 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (10/05/2014 04:40:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Lumac.exe, Version: 1.1.92.0, Zeitstempel: 0x51d2e158 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x531599f6 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000812f ID des fehlerhaften Prozesses: 0xf90 Startzeit der fehlerhaften Anwendung: 0xLumac.exe0 Pfad der fehlerhaften Anwendung: Lumac.exe1 Pfad des fehlerhaften Moduls: Lumac.exe2 Berichtskennung: Lumac.exe3 Error: (10/05/2014 04:40:19 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: Lumac.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.Runtime.Remoting.RemotingException Stack: Server stack trace: at System.Runtime.Remoting.Channels.Ipc.IpcPort.Read(Byte[] data, Int32 offset, Int32 length) at System.Runtime.Remoting.Channels.Ipc.PipeStream.Read(Byte[] buffer, Int32 offset, Int32 size) at System.Runtime.Remoting.Channels.SocketHandler.ReadFromSocket(Byte[] buffer, Int32 offset, Int32 count) at System.Runtime.Remoting.Channels.SocketHandler.Read(Byte[] buffer, Int32 offset, Int32 count) at System.Runtime.Remoting.Channels.SocketHandler.ReadAndMatchFourBytes(Byte[] buffer) at System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadAndMatchPreamble() at System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadVersionAndOperation(UInt16& operation) at System.Runtime.Remoting.Channels.Ipc.IpcClientHandler.ReadHeaders() at System.Runtime.Remoting.Channels.Ipc.IpcClientTransportSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportHeaders& responseHeaders, Stream& responseStream) at System.Runtime.Remoting.Channels.BinaryClientFormatterSink.SyncProcessMessage(IMessage msg) at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(System.Runtime.Remoting.Messaging.IMessage, System.Runtime.Remoting.Messaging.IMessage) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(System.Runtime.Remoting.Proxies.MessageData ByRef, Int32) at Lumac.Util.SingleInstance`1+IPCRemoteService[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].InvokeFirstInstance(System.Collections.Generic.IList`1<System.String>) at Lumac.Util.SingleInstance`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].SignalFirstInstance(System.String, System.Collections.Generic.IList`1<System.String>) at Lumac.Util.SingleInstance`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].InitializeAsFirstInstance(System.String) at Lumac.App.Main() Error: (10/04/2014 06:27:24 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (10/04/2014 05:06:12 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (10/03/2014 06:49:17 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (10/03/2014 06:22:40 PM) (Source: MsiInstaller) (EventID: 11706) (User: Plüming-PC) Description: Product: Lumac -- Error 1706. No valid source could be found for product Lumac. The Windows Installer cannot continue. Error: (10/01/2014 03:41:31 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (09/30/2014 06:19:15 PM) (Source: MsiInstaller) (EventID: 11706) (User: Plüming-PC) Description: Product: Lumac -- Error 1706. No valid source could be found for product Lumac. The Windows Installer cannot continue. System errors: ============= Error: (10/09/2014 04:35:06 PM) (Source: volsnap) (EventID: 36) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (10/09/2014 03:55:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "VMware DHCP Service" ist vom Dienst "VMware Network Application Interface" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%2 Error: (10/09/2014 03:55:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "VMware NAT Service" ist vom Dienst "VMware Network Application Interface" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%2 Error: (10/09/2014 03:55:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "VMware Network Application Interface" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/09/2014 03:55:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "VMware Bridge Protocol" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/09/2014 03:55:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Sandboxie Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/08/2014 03:30:31 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "VMware DHCP Service" ist vom Dienst "VMware Network Application Interface" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%2 Error: (10/08/2014 03:30:31 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "VMware NAT Service" ist vom Dienst "VMware Network Application Interface" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%2 Error: (10/08/2014 03:30:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "VMware Network Application Interface" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (10/08/2014 03:30:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "VMware Bridge Protocol" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Microsoft Office Sessions: ========================= Error: (10/08/2014 04:07:21 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3 Error: (10/06/2014 06:34:30 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3 Error: (10/05/2014 04:40:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Lumac.exe1.1.92.051d2e158KERNELBASE.dll6.1.7601.18409531599f6e04343520000812ff9001cfe0a9ebc6ea92H:\Program Files\Lumac\Lumac.exeC:\Windows\system32\KERNELBASE.dll9207d56d-4c9d-11e4-83cd-c860006a20ce Error: (10/05/2014 04:40:19 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: Lumac.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.Runtime.Remoting.RemotingException Stack: Server stack trace: at System.Runtime.Remoting.Channels.Ipc.IpcPort.Read(Byte[] data, Int32 offset, Int32 length) at System.Runtime.Remoting.Channels.Ipc.PipeStream.Read(Byte[] buffer, Int32 offset, Int32 size) at System.Runtime.Remoting.Channels.SocketHandler.ReadFromSocket(Byte[] buffer, Int32 offset, Int32 count) at System.Runtime.Remoting.Channels.SocketHandler.Read(Byte[] buffer, Int32 offset, Int32 count) at System.Runtime.Remoting.Channels.SocketHandler.ReadAndMatchFourBytes(Byte[] buffer) at System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadAndMatchPreamble() at System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadVersionAndOperation(UInt16& operation) at System.Runtime.Remoting.Channels.Ipc.IpcClientHandler.ReadHeaders() at System.Runtime.Remoting.Channels.Ipc.IpcClientTransportSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportHeaders& responseHeaders, Stream& responseStream) at System.Runtime.Remoting.Channels.BinaryClientFormatterSink.SyncProcessMessage(IMessage msg) at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(System.Runtime.Remoting.Messaging.IMessage, System.Runtime.Remoting.Messaging.IMessage) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(System.Runtime.Remoting.Proxies.MessageData ByRef, Int32) at Lumac.Util.SingleInstance`1+IPCRemoteService[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].InvokeFirstInstance(System.Collections.Generic.IList`1<System.String>) at Lumac.Util.SingleInstance`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].SignalFirstInstance(System.String, System.Collections.Generic.IList`1<System.String>) at Lumac.Util.SingleInstance`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].InitializeAsFirstInstance(System.String) at Lumac.App.Main() Error: (10/04/2014 06:27:24 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3 Error: (10/04/2014 05:06:12 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3 Error: (10/03/2014 06:49:17 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3 Error: (10/03/2014 06:22:40 PM) (Source: MsiInstaller) (EventID: 11706) (User: Plüming-PC) Description: Product: Lumac -- Error 1706. No valid source could be found for product Lumac. The Windows Installer cannot continue.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (10/01/2014 03:41:31 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3 Error: (09/30/2014 06:19:15 PM) (Source: MsiInstaller) (EventID: 11706) (User: Plüming-PC) Description: Product: Lumac -- Error 1706. No valid source could be found for product Lumac. The Windows Installer cannot continue.(NULL)(NULL)(NULL)(NULL)(NULL) ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz Percentage of memory in use: 46% Total physical RAM: 2047.12 MB Available physical RAM: 1087.02 MB Total Pagefile: 4094.23 MB Available Pagefile: 2861.46 MB Total Virtual: 2047.88 MB Available Virtual: 1930.38 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:28.54 GB) (Free:1.41 GB) NTFS Drive d: (Neu) (CDROM) (Total:3.6 GB) (Free:0 GB) UDF Drive e: () (Fixed) (Total:18.62 GB) (Free:8.49 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows XP) (Size: 18.6 GB) (Disk ID: 00000080) Partition 1: (Active) - (Size=18.6 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 28.6 GB) (Disk ID: CE73B166) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=28.5 GB) - (Type=07 NTFS) Attempted reading MBR returned 0 bytes. Could not read MBR for disk 2. ==================== End Of Log ============================ Code:
ATTFilter Farbar Service Scanner Version: 21-07-2014 Ran by Plüming (administrator) on 09-10-2014 at 17:03:45 Running from "C:\Users\Plüming\Desktop" Microsoft Windows 7 Ultimate Service Pack 1 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ Windows Update: ============ Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== WinDefend Service is not running. Checking service configuration: The start type of WinDefend service is set to Demand. The default start type is Auto. The ImagePath of WinDefend service is OK. The ServiceDll of WinDefend service is OK. Windows Defender Disabled Policy: ========================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware"=DWORD:1 Other Services: ============== File Check: ======== C:\Windows\system32\nsisvc.dll => File is digitally signed C:\Windows\system32\Drivers\nsiproxy.sys => File is digitally signed C:\Windows\system32\dhcpcore.dll => File is digitally signed C:\Windows\system32\Drivers\afd.sys => File is digitally signed C:\Windows\system32\Drivers\tdx.sys => File is digitally signed C:\Windows\system32\Drivers\tcpip.sys => File is digitally signed C:\Windows\system32\dnsrslvr.dll => File is digitally signed C:\Windows\system32\mpssvc.dll => File is digitally signed C:\Windows\system32\bfe.dll => File is digitally signed C:\Windows\system32\Drivers\mpsdrv.sys => File is digitally signed C:\Windows\system32\SDRSVC.dll => File is digitally signed C:\Windows\system32\vssvc.exe => File is digitally signed C:\Windows\system32\wscsvc.dll => File is digitally signed C:\Windows\system32\wbem\WMIsvc.dll => File is digitally signed C:\Windows\system32\wuaueng.dll => File is digitally signed C:\Windows\system32\qmgr.dll => File is digitally signed C:\Windows\system32\es.dll => File is digitally signed C:\Windows\system32\cryptsvc.dll => File is digitally signed C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed C:\Windows\system32\ipnathlp.dll => File is digitally signed C:\Windows\system32\iphlpsvc.dll => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed **** End of log **** ach ja und wie mein pc sonst so läuft: er fährt normal hoch. dannach aufm desktop lädt er erstmal alle programme die ich anklicke aber ganz langsam,bestimmt 3-5 minuten und dann kommt diese java meldung wieder. auch internet startet manchmal erst wenn die java meldung kamm. |
09.10.2014, 18:50 | #25 |
/// TB-Ausbilder | Windows 7 - Startmenü fehlerhaft und keine Windows updates Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start CloseProcesses: Task: {F0605A01-8BE3-4971-A4C8-5F47B52A99D0} - System32\Tasks\Google Update => C:\Users\Plüming\AppData\Local\Google\Desktop\Install\{400b67f6-d073-2ceb-8e11-a31ac83593d2}\❤≸⋙\Ⱒ☠⍨\*ﯹ๛\{400b67f6-d073-2ceb-8e11-a31ac83593d2}\GoogleUpdate.exe C:\Users\Plüming\AppData\Local\Google\Desktop\Install\{400b67f6-d073-2ceb-8e11-a31ac83593d2} EmptyTemp: end Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Deinstalliere über die Systemsteuerung: Java 7 Update 25 Java 8 Update 5 Java(TM) 6 Update 37 Java SE Development Kit 7 Update 10 Java SE Development Kit 7 Update 9 Java SE Development Kit 8 Update 5 Java(TM) SE Development Kit 6 Java(TM) SE Runtime Environment 6 Rechner neu starten Downloade und installiere dir bitte nun:Starte deinen Rechner nach der Installation neu auf. Schritt 3 Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit) | SystemLook (64 bit)
Schritt 4
Gibt es immer noch Probleme mit Java? Wenn ja, wie lautet die Fehlermeldung? Bitte poste mit deiner nächsten Antwort
|
15.10.2014, 19:34 | #26 |
/// TB-Ausbilder | Windows 7 - Startmenü fehlerhaft und keine Windows updates Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen! |
Themen zu Windows 7 - Startmenü fehlerhaft und keine Windows updates |
bereit, fehlercode 0x80000003, fehlercode 0xc0000005, fehlercode 0xe0434352, fehlercode 24, fehlercode 39, fehlercode windows, win32/adware.ibryte.am, win32/koyotelab.a, win32/toolbar.searchsuite.p, windows updates |