Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   win32.downloader.gen - Entfernung mit AdwCleaner ausreichend? (https://www.trojaner-board.de/141119-win32-downloader-gen-entfernung-adwcleaner-ausreichend.html)

matsuyama 06.09.2013 23:30
win32.downloader.gen - Entfernung mit AdwCleaner ausreichend?
 
Hallo,
ich bin neu hier und habe mich jetzt extra wegen einem Plagegeist namens "win32.downloader.gen" angemeldet. Mein Virenscanner von Trend Micro hat nichts gefunden, SpyBot Search & Destroy aber eben diese eine Malware und zwar in der Datei "C:\END". Entfernung hat mit diesem Program nicht geklappt (wininit nicht möglich). Die betroffene Datei ist vor ca. einer Woche entstanden, was zeitlich gesehen ungefähr mit dem Download einiger Codecs (von Chip.de) zusammenfällt.

Nachdem ich mich hier eingelesen hatte, habe ich zunächst den TeaTimer von SS&D deaktiviert und dann das Programm AdwCleaner heruntergeladen. Dieses hat auch prompt einige Ergebnisse geliefert, die ich dann alle entfernt habe. Bei erneutem Suchen nach einem Neustart finden jetzt weder SS&D noch AdwC noch etwas. Bedeutet das, dass nun alles wieder im Reinen ist? Passwörter werde ich nach einer gesicherten Bereinigung aber auf jeden Fall ändern.

Hier noch das Log-File von AdwCleaner:
Code:
# AdwCleaner v3.002 - Bericht erstellt am 06/09/2013 um 23:36:33
# Updated 01/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername :
# Gestartet von : C:\Users\FB\Downloads\adwcleaner_3002.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\FB\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\FB\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\ey4oncak.Standard-Benutzer\jetpack
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\ey4oncak.Standard-Benutzer\foxydeal.sqlite

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [firejump@firejump.net]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\heoldelcflnigdllmlopiefhkkobendj
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\Software\DeviceVM
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v12.0 (de)

[ Datei : C:\Users\FB\AppData\Roaming\Mozilla\Firefox\Profiles\vx9hefpm.default\prefs.js ]


[ Datei : C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\ey4oncak.Standard-Benutzer\prefs.js ]


*************************

AdwCleaner[R0].txt - [2377 octets] - [06/09/2013 23:35:15]
AdwCleaner[S0].txt - [2200 octets] - [06/09/2013 23:36:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2260 octets] ##########

schrauber 07.09.2013 07:08
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


matsuyama 07.09.2013 11:55
Toll, dass du mir hilfst! Danke schonmal :)

FRST:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2013
Ran by FB on 07-09-2013 11:19:18
Running from C:\Users\FB\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\AMSP_LogServer.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMDiag.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mim.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-23] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-17] (CANON INC.)
HKLM\...\Run: [Trend Micro Titanium] - C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1374328 2013-05-29] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] - C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [209712 2013-02-04] (Trend Micro Inc.)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.7\ICQ.exe [127040 2011-12-26] (ICQ, LLC.)
HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation)
HKLM-x32\...\Run: [Ulead AutoDetector v2] - C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2006-11-29] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\ssmmgr.exe [618496 2010-01-19] ()
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2011-12-09] (Nullsoft, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-09-08] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [180269 2011-12-25] (RealNetworks, Inc.)
HKLM-x32\...\Run: [MimBoot] - C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimboot.exe [11776 2005-03-09] (Musicmatch, Inc.)
HKLM-x32\...\Run: [TrayServer] - C:\Program Files (x86)\MAGIX\Video_deluxe_MX\TrayServer_de.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://vaioportal.sony.eu/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
SearchScopes: HKCU - {3287C2E4-68A5-491B-9659-15DC8AA85D40} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms}
SearchScopes: HKCU - {E3B53517-CACC-4784-89E0-17B7B186E236} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe64.dll (Trend Micro Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg32.dll (Trend Micro Inc.)
BHO-x32: TSToolbarBHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.)
BHO-x32: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll ()
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - TrendMicro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg.dll (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} -  No File
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.5.1331\6.8.1094\TmIEPlg32.dll (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\FB\AppData\Roaming\Mozilla\Firefox\Profiles\vx9hefpm.default
FF Homepage: hxxp://www.t-online.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2027 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=1.0.2.2088 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1040 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\FB\AppData\Roaming\Mozilla\Firefox\Profiles\vx9hefpm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [tmbepff-7.5@trendmicro.com] C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2012-04-26] (Adobe Systems)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros)
S2 CCALib8; C:\Program Files (x86)\Canon\CAL\CALMAIN.exe [96341 2005-09-30] (Canon Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [x]

==================== Drivers (Whitelisted) ====================

S1 acedrv06; C:\Windows\system32\drivers\acedrv06.sys [147456 2011-12-25] ()
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S3 pfc; C:\Windows\SysWow64\drivers\pfc.sys [10368 2006-01-19] (Padus, Inc.)
S2 SSPORT; C:\Windows\SysWow64\Drivers\SSPORT.sys [11576 2009-04-23] (Samsung Electronics)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [108584 2012-12-21] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [174016 2012-12-21] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [46392 2012-08-24] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [94520 2012-12-07] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [77184 2012-12-21] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [210232 2012-07-06] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105744 2012-05-02] (Trend Micro Inc.)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [x]
S3 MxlW2k; No ImagePath
S3 pfc; system32\drivers\pfc.sys [x]
S2 SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [x]
U2 TMAgent;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-07 11:17 - 2013-09-07 11:18 - 01948604 _____ (Farbar) C:\Users\FB\Downloads\FRST64.exe
2013-09-07 00:10 - 2013-09-06 23:38 - 00002348 _____ C:\Users\Internet\Downloads\AdwCleaner[S0].txt
2013-09-07 00:10 - 2013-09-06 23:34 - 01037134 _____ C:\Users\Internet\Downloads\adwcleaner_3002.exe
2013-09-06 23:38 - 2013-09-06 23:38 - 00002348 _____ C:\Users\FB\Downloads\AdwCleaner[S0].txt
2013-09-06 23:35 - 2013-09-07 00:47 - 00000000 ____D C:\AdwCleaner
2013-09-06 23:34 - 2013-09-06 23:34 - 01037134 _____ C:\Users\FB\Desktop\adwcleaner_3002.exe
2013-09-05 00:10 - 2013-09-05 00:11 - 00000000 ____D C:\mm15
2013-09-05 00:06 - 2013-09-05 00:07 - 00000000 ____D C:\Windows\SysWOW64\C2MP
2013-09-05 00:05 - 2013-09-05 00:05 - 21916168 _____ (Windows 7 - Codec Pack) C:\Users\FB\Downloads\windows.7.codec.pack.v4.0.8.setup.exe
2013-09-04 23:58 - 2013-09-04 23:58 - 00000000 ____D C:\Users\FB\Downloads\lame3.99.5
2013-09-04 23:55 - 2013-09-04 23:55 - 00650657 _____ C:\Users\FB\Downloads\lame3.99.5.zip
2013-09-03 20:28 - 2013-08-02 19:29 - 00217176 _____ C:\Windows\SysWOW64\unrar.dll
2013-09-03 19:15 - 2013-09-03 19:15 - 00000000 ____D C:\Users\Internet\Downloads\lame3.99.5
2013-08-30 21:00 - 2013-08-30 21:01 - 00000000 ____D C:\Users\FB\Documents\Freemake
2013-08-30 21:00 - 2013-08-30 21:01 - 00000000 ____D C:\ProgramData\Freemake
2013-08-30 21:00 - 2013-08-30 21:00 - 00001320 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Users\FB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-08-30 20:54 - 2013-08-30 20:55 - 28267424 _____ (Ellora Assets Corporation                                  ) C:\Users\Internet\Downloads\FreemakeVideoConverter_4.0.4.0.exe
2013-08-30 01:20 - 2011-06-24 16:31 - 00703488 _____ C:\Windows\system32\xvidcore.dll
2013-08-30 01:20 - 2011-05-23 09:49 - 00173568 _____ C:\Windows\system32\xvid.ax
2013-08-30 01:04 - 2013-08-30 01:05 - 00234544 _____ C:\Windows\RegBootClean64.exe
2013-08-29 21:36 - 2013-08-29 21:36 - 00039896 _____ C:\Windows\SysWOW64\DiscHandler.exe
2013-08-15 02:04 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 02:04 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 02:04 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 02:04 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 02:04 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 02:04 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 02:04 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 02:04 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 02:04 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 02:04 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 02:04 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 02:04 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 02:04 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 02:04 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-15 02:03 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 01:57 - 2013-08-15 01:59 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 00:45 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 00:45 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 00:45 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 00:45 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 00:45 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-15 00:45 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-15 00:45 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-15 00:45 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-15 00:44 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-15 00:44 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-15 00:44 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-15 00:44 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-15 00:44 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-15 00:44 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-15 00:44 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-15 00:44 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 00:44 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-15 00:44 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-15 00:44 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-15 00:44 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-15 00:44 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-15 00:44 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-15 00:44 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-15 00:44 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-15 00:44 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-15 00:44 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-15 00:44 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-07 11:18 - 2013-09-07 11:17 - 01948604 _____ (Farbar) C:\Users\FB\Downloads\FRST64.exe
2013-09-07 11:18 - 2011-12-14 17:52 - 01548929 _____ C:\Windows\WindowsUpdate.log
2013-09-07 11:15 - 2011-12-14 18:35 - 00122039 _____ C:\Windows\setupact.log
2013-09-07 00:47 - 2013-09-06 23:35 - 00000000 ____D C:\AdwCleaner
2013-09-07 00:20 - 2009-07-14 06:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-07 00:20 - 2009-07-14 06:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-07 00:17 - 2011-08-08 22:00 - 00708282 _____ C:\Windows\system32\perfh007.dat
2013-09-07 00:17 - 2011-08-08 22:00 - 00151886 _____ C:\Windows\system32\perfc007.dat
2013-09-07 00:17 - 2009-07-14 07:13 - 01643448 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-07 00:12 - 2011-08-08 12:20 - 00000000 ____D C:\ProgramData\NVIDIA
2013-09-07 00:12 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-06 23:38 - 2013-09-07 00:10 - 00002348 _____ C:\Users\Internet\Downloads\AdwCleaner[S0].txt
2013-09-06 23:38 - 2013-09-06 23:38 - 00002348 _____ C:\Users\FB\Downloads\AdwCleaner[S0].txt
2013-09-06 23:34 - 2013-09-07 00:10 - 01037134 _____ C:\Users\Internet\Downloads\adwcleaner_3002.exe
2013-09-06 23:34 - 2013-09-06 23:34 - 01037134 _____ C:\Users\FB\Desktop\adwcleaner_3002.exe
2013-09-06 14:17 - 2013-03-29 16:11 - 00000306 __RSH C:\ProgramData\ntuser.pol
2013-09-05 16:57 - 2011-12-28 16:06 - 00000000 ____D C:\Uni
2013-09-05 01:28 - 2011-02-11 01:03 - 01621342 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-05 01:20 - 2012-01-13 01:34 - 00305036 _____ C:\test.xml
2013-09-05 00:45 - 2011-12-25 01:59 - 00000000 ____D C:\Users\Public\Documents\MAGIX_MusicMaker15Premium
2013-09-05 00:11 - 2013-09-05 00:10 - 00000000 ____D C:\mm15
2013-09-05 00:07 - 2013-09-05 00:06 - 00000000 ____D C:\Windows\SysWOW64\C2MP
2013-09-05 00:05 - 2013-09-05 00:05 - 21916168 _____ (Windows 7 - Codec Pack) C:\Users\FB\Downloads\windows.7.codec.pack.v4.0.8.setup.exe
2013-09-04 23:58 - 2013-09-04 23:58 - 00000000 ____D C:\Users\FB\Downloads\lame3.99.5
2013-09-04 23:55 - 2013-09-04 23:55 - 00650657 _____ C:\Users\FB\Downloads\lame3.99.5.zip
2013-09-03 20:00 - 2012-01-19 03:44 - 00000000 ____D C:\Users\Internet\AppData\Roaming\Mp3tag
2013-09-03 19:27 - 2011-12-26 18:37 - 00000000 ____D C:\Users\Internet\AppData\Roaming\Skype
2013-09-03 19:15 - 2013-09-03 19:15 - 00000000 ____D C:\Users\Internet\Downloads\lame3.99.5
2013-09-02 01:34 - 2011-12-15 17:38 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-08-31 14:28 - 2011-12-14 19:11 - 01419430 _____ C:\Windows\PFRO.log
2013-08-30 22:14 - 2011-12-15 17:48 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-08-30 21:01 - 2013-08-30 21:00 - 00000000 ____D C:\Users\FB\Documents\Freemake
2013-08-30 21:01 - 2013-08-30 21:00 - 00000000 ____D C:\ProgramData\Freemake
2013-08-30 21:01 - 2011-12-24 22:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 21:00 - 2013-08-30 21:00 - 00001320 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Users\FB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-08-30 21:00 - 2013-08-30 21:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-08-30 20:55 - 2013-08-30 20:54 - 28267424 _____ (Ellora Assets Corporation                                  ) C:\Users\Internet\Downloads\FreemakeVideoConverter_4.0.4.0.exe
2013-08-30 01:11 - 2012-12-10 20:14 - 00000000 ____D C:\Program Files\DivX
2013-08-30 01:11 - 2012-12-10 20:11 - 00000000 ____D C:\ProgramData\DivX
2013-08-30 01:05 - 2013-08-30 01:04 - 00234544 _____ C:\Windows\RegBootClean64.exe
2013-08-30 01:05 - 2011-12-14 19:36 - 00000000 ____D C:\ProgramData\Trend Micro
2013-08-29 23:24 - 2011-12-25 01:41 - 00000000 ____D C:\Users\FB\AppData\Local\CrashDumps
2013-08-29 21:36 - 2013-08-29 21:36 - 00039896 _____ C:\Windows\SysWOW64\DiscHandler.exe
2013-08-28 21:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-28 19:33 - 2011-12-25 16:33 - 00000000 ____D C:\Users\Internet\AppData\Local\VirtualStore
2013-08-28 19:24 - 2013-01-05 01:56 - 00021504 ___SH C:\Users\Internet\Thumbs.db
2013-08-15 01:59 - 2013-08-15 01:57 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 01:57 - 2011-12-14 20:31 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-07 02:39

==================== End Of Log ============================
--- --- ---

--- --- ---


Addition:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-09-2013
Ran by FB at 2013-09-07 11:20:05
Running from C:\Users\FB\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 
ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2)
Adobe AIR (x32 Version: 2.5.1.17730)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.6) MUI (x32 Version: 10.1.6)
Advertising Center (x32 Version: 0.0.0.1)
Alps Pointing-device for VAIO
Apple Application Support (x32 Version: 1.3.2)
Apple Software Update (x32 Version: 2.1.1.116)
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.142)
ArcSoft WebCam Companion 4 (x32 Version: 4.0.21.392)
Atheros WiFi Driver Installation (x32 Version: 3.0)
Bing Bar (x32 Version: 7.0.850.0)
Bluetooth Win7 Suite (64) (Version: 7.3.0.100)
Cambridge English Pronouncing Dictionary - 17th Edition (x32)
Canon Camera Access Library (x32 Version: 8.1.1.17)
Canon Camera Support Core Library (x32 Version: 7.3.1.6)
Canon Camera Window DC_DV 5 for ZoomBrowser EX (x32 Version: 5.4.5.17)
Canon Camera Window DC_DV 6 for ZoomBrowser EX (x32 Version: 6.2.0.8)
Canon Camera Window MC 6 for ZoomBrowser EX (x32 Version: 6.1.0.7)
Canon G.726 WMP-Decoder (x32 Version: 1.0.1.3)
CANON iMAGE GATEWAY Task (x32 Version: 1.1.0.2)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32)
Canon Internet Library for ZoomBrowser EX (x32 Version: 1.4.1.3)
Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 2.2.0.13)
Canon MP Navigator EX 3.0 (x32)
Canon MP640 series Benutzerregistrierung (x32)
Canon MP640 series MP Drivers
Canon RAW Image Task for ZoomBrowser EX (x32 Version: 2.3.0.11)
Canon RemoteCapture Task for ZoomBrowser EX (x32 Version: 1.5.0.5)
Canon Utilities Easy-PhotoPrint EX (x32)
Canon Utilities My Printer (x32)
Canon Utilities Solution Menu (x32)
Canon Utilities ZoomBrowser EX (x32 Version: 5.6.0.27)
CD-LabelPrint (x32)
Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6612.1000)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
Corel WinDVD (x32 Version: 10.0.5.800)
D3DX10 (x32 Version: 15.4.2368.0902)
D-Fend Reloaded 1.2.1 (deinstallieren) (x32 Version: 1.2.1)
DolbyFiles (x32 Version: 2.0)
exant HD Audio (Version: 8.54.0.53)
Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.27.0)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Freemake Video Converter Version 4.0.4 (x32 Version: 4.0.4)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
ICQ 7.7 Build #6082 Banner Remover 1.0 (x32)
ICQ7.7 (x32 Version: 7.7)
ImagXpress (x32 Version: 7.0.74.0)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046)
Interlok driver setup x64 (Version: 5.8.13)
Jack Orlando Director's Cut (x32 Version: 1.01)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Lucky Luke (x32)
MAGIX Burn routines (x32 Version: 9.0.0.193)
MAGIX Foto Manager 2006 (D) (x32 Version: 3.3.0.89)
MAGIX Goya burnR 1.3.1.3 (D) (x32 Version: 1.3.1.3)
MAGIX Music Maker 15 Premium 15.0.0.19 (D) (x32 Version: 15.0.0.19)
MAGIX Music Manager 2006 (D) (x32 Version: 7.2.0.133)
MAGIX Online Druck Service (D) (x32 Version: 2.3.2.0)
MAGIX Screenshare (x32 Version: 4.3.6.1987)
MAGIX Screenshare 4.3.6.1987 (D) (x32 Version: 4.3.6.1987)
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)
MAGIX Video deluxe MX (x32 Version: 11.0.0.38)
Media Gallery (Version: 1.5.0.16020)
Media Markt Fotoservice 4.4 (x32)
MediaInfo Lite 0.7.52 (x32 Version: 0.7.52)
Menu Templates - Starter Kit (x32 Version: 9.0.4.0)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0)
Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0)
Microsoft PowerPoint Viewer (x32 Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft XML Parser (x32 Version: 8.0.7820.0)
Movie Templates - Starter Kit (x32 Version: 9.0.4.0)
Mozilla Firefox 12.0 (x86 de) (x32 Version: 12.0)
Mp3tag v2.49b (x32 Version: v2.49b)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Musicmatch® Jukebox (x32 Version: 10.00.2058)
Nero 9 (x32)
Nero BurningROM (x32 Version: 9.0.0.0)
Nero BurnRights (x32 Version: 2.99.6.100)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero CoverDesigner (x32 Version: 4.0.3.100)
Nero CoverDesigner Help (x32 Version: 4.0.0.0)
Nero DiscSpeed (x32 Version: 4.99.5.105)
Nero DriveSpeed (x32 Version: 3.99.5.105)
Nero Express (x32 Version: 9.0.0.0)
Nero InfoTool (x32 Version: 5.99.5.105)
Nero Installer (x32 Version: 2.0.0.1)
Nero WaveEditor (x32 Version: 5.0.10.0)
Nero WaveEditor Help (x32 Version: 5.0.10.0)
NeroBurningROM (x32 Version: 9.0.6.100)
NeroExpress (x32 Version: 9.0.6.100)
Nokia Connectivity Cable Driver (Version: 7.1.32.69)
NVIDIA 3D Vision Treiber 268.31 (Version: 268.31)
NVIDIA Grafiktreiber 268.31 (Version: 268.31)
NVIDIA HD-Audiotreiber 1.2.22.1 (Version: 1.2.22.1)
NVIDIA Install Application (Version: 2.265.41.0)
NVIDIA PhysX (x32 Version: 9.10.0514)
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6831)
NVIDIA Systemsteuerung 268.31 (Version: 268.31)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2)
PDF-Viewer (Version: 2.5.210.0)
PMB (x32 Version: 5.5.02.12220)
PMB VAIO Edition Plug-in (Version: 1.5.10.05300)
PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06010)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
PowerDVD (x32)
ProjectX 0.90.4.00 (x32)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.10)
QUICKfind (x32)
QuickTime (x32 Version: 7.68.75.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
RealPlayer (x32)
Realtek PCIE Card Reader (x32 Version: 6.1.7600.77)
Remote Keyboard (x32 Version: 1.1.1.03020)
Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070)
RollerCoaster Tycoon (x32)
Skype™ 5.10 (x32 Version: 5.10.116)
Sony Corporation (Version: 1.0.0)
Spybot - Search & Destroy (x32 Version: 1.6.2)
SSLx64 (Version: 1.0.0)
SSLx86 (x32 Version: 1.0.0)
Text-To-Speech-Runtime (x32 Version: 1.0.0.0)
Trend Micro Titanium (Version: 6.00)
Trend Micro Titanium Maximum Security (Version: 6.0)
Ulead PhotoImpact 12 (x32 Version: 12.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2)
VAIO - Media Gallery (x32 Version: 1.5.0.16020)
VAIO - PMB VAIO Edition Guide (x32 Version: 1.6.00.06030)
VAIO - PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06140)
VAIO - Remote Play mit PlayStation®3 (x32 Version: 1.1.0.15070)
VAIO - Remote-Tastatur  (x32 Version: 1.0.1.03020)
VAIO Care (x32 Version: 6.4.2.11150)
VAIO Control Center (x32 Version: 4.5.0.03040)
VAIO Data Restore Tool (x32 Version: 1.6.0.13140)
VAIO Easy Connect (x32 Version: 1.1.2.01120)
VAIO Event Service (x32 Version: 5.5.0.03040)
VAIO Gate (x32 Version: 2.4.0.06210)
VAIO Gate Default (x32 Version: 2.4.0.03240)
VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280)
VAIO Hero Screensaver - Summer 2011 Screensaver (x32)
VAIO Improvement (x32 Version: 1.0.0.14150)
VAIO Improvement Validation (Version: 1.0.4.01190)
VAIO Quick Web Access (x32 Version: 1.4.5.3)
VAIO Sample Contents (x32 Version: 1.4.2.09010)
VAIO Smart Network (x32 Version: 3.5.0.02280)
VAIO Update (x32 Version: 5.6.1.02150)
VAIO Update Merge Module x64 (Version: 5.6.10270)
VAIO Update Merge Module x64 (Version: 5.7.13130)
VAIO-Handbuch (x32 Version: 2.0.0.02250)
VAIO-Support für Übertragungen (x32 Version: 1.4.0.14230)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VCCx86 (x32 Version: 1.0.0)
VESx64 (Version: 1.0.0)
VESx86 (x32 Version: 1.0.0)
VIx64 (Version: 1.0.0)
VIx86 (x32 Version: 1.0.0)
VLC media player 1.1.11 (x32 Version: 1.1.11)
VSNx64 (Version: 1.0.0)
VU5x64 (Version: 1.0.0)
VU5x86 (x32 Version: 1.0.0)
VU5x86 (x32 Version: 1.1.0)
VWSTx86 (x32 Version: 1.0.0)
Wartung Samsung CLP-620 Series (x32)
Winamp (x32 Version: 5.623 )
Windows 7 Codec Pack 4.0.8 (x32 Version: 4.0.8)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
WinRAR Archivierer (x32)
WinZip (x32)
Zip Motion Block Video codec (Remove Only) (x32)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Елемент керування Windows Live Mesh ActiveX для віддалених підключень (x32 Version: 15.4.5722.2)
Основи Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================

20-07-2013 20:59:01 Geplanter Prüfpunkt
14-08-2013 19:08:19 Geplanter Prüfpunkt
14-08-2013 23:56:51 Windows Update
28-08-2013 19:23:15 Geplanter Prüfpunkt
31-08-2013 00:27:37 Windows Update
04-09-2013 23:23:15 Windows Update
06-09-2013 21:52:26 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {085F6BA5-CEF7-4C1F-8472-A65B60D6465E} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-06-21] (Sony Corporation)
Task: {157D4A64-77E8-4553-87B1-F2196B16C191} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
Task: {1E7980E3-6134-4BA6-949E-4688C6CACCB6} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-06-21] (Sony Corporation)
Task: {1FF9EABE-0EB3-49C9-96EF-034FAE155119} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2012-01-17] (Sony Corporation)
Task: {326E9784-81A9-4BF7-84C8-DAF61F4E75EF} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)
Task: {34F9E854-C091-4ACA-884B-25DF8501A9CF} - System32\Tasks\{C26025EE-9285-4207-9D18-87321ED98F43} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?page=tsProgressBar
Task: {39FFB469-EA83-4B9B-AB64-1F58EFAB3E31} - System32\Tasks\SONY\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-06-21] (Sony Corporation)
Task: {3C01D04B-727F-4D4F-AF2C-0370F7CA7AC7} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
Task: {43297928-8ED1-45F4-A5CD-ABDA33D091CE} - System32\Tasks\User_Feed_Synchronization-{F78E29C5-8F9D-4657-9811-7592FE64263A} => C:\Windows\system32\msfeedssync.exe [2013-03-22] (Microsoft Corporation)
Task: {7BA89835-CE8A-4130-AF22-24B59BD25CCD} - System32\Tasks\{AAAFA468-C255-4BA7-A9B9-66A62036F2E0} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?page=tsProgressBar
Task: {8B7EDE0A-182E-434A-B58F-C1C48FE24035} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient
Task: {A34FE6CA-99E7-4437-9E61-8FD155AA0D58} - System32\Tasks\{FE13566C-2A31-4B86-A6AA-603836F9A097} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?page=tsProgressBar
Task: {A42D5450-11A5-4AB1-BE37-08C26178792D} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {B5B73758-28F8-42EF-92A7-C84F5BFE15BA} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation)
Task: {BB3D5157-6164-4564-AED7-C17F1246AF8A} - System32\Tasks\{57E86CE9-7BB6-4A9D-8D9D-00D4B20F4FCF} => D:\setup.exe
Task: {D4D6E397-2C97-41F5-B630-40E8E0E6707B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {E958A119-3ECA-49A8-A7DE-A2796D1AFD87} - System32\Tasks\{913DC0BB-5FB2-4858-8C7E-30F136A4CD1F} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/en/abandoninstall?page=tsMain

==================== Loaded Modules (whitelisted) =============

2011-08-08 12:19 - 2011-08-08 11:06 - 08105576 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2011-12-25 20:04 - 2005-06-07 13:26 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2011-08-08 13:09 - 2011-06-21 11:55 - 00069120 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIOGateShellExt.dll
2013-04-08 13:10 - 2013-02-04 16:11 - 00174728 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\tmdshell.dll
2012-01-16 21:53 - 2012-01-16 21:53 - 00331776 _____ (Florian Heidenreich) C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll
2011-02-17 09:52 - 2011-02-17 05:06 - 00107376 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\Vxdif.dll
2011-02-17 09:52 - 2011-02-17 05:06 - 00219504 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.DLL
2011-02-17 09:52 - 2011-02-17 05:06 - 00039792 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\EzAuto.dll
2011-02-17 09:52 - 2011-02-17 05:06 - 01415536 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApRes.dll
2011-02-17 09:52 - 2011-02-17 05:06 - 00279408 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint\EzLaunch.DLL
2011-12-15 17:31 - 2009-03-23 19:00 - 00113152 _____ (CANON INC.) C:\Program Files\Canon\MyPrinter\cnmpu.dll
2011-12-15 17:31 - 2009-04-06 19:00 - 00065536 _____ (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMyRes.dll
2013-03-29 16:10 - 2012-05-02 21:27 - 00049664 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_49.dll
2013-03-29 16:10 - 2012-05-02 21:24 - 00064512 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_49.dll
2013-03-29 16:11 - 2012-07-13 14:22 - 00141280 ____N (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilJsonHandle.dll
2013-03-29 16:11 - 2012-07-13 13:35 - 00098032 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilDebugLog.dll
2013-03-29 16:11 - 2012-07-13 13:36 - 00582632 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilInstallation.dll
2013-03-29 16:11 - 2012-07-13 13:35 - 00093400 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilComponentInfo.dll
2013-03-29 16:11 - 2012-07-13 13:36 - 00090816 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilMsgBuffer.dll
2013-03-29 16:11 - 2012-07-13 13:35 - 00030552 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilGenericLoader.dll
2013-03-29 16:11 - 2012-07-13 13:36 - 00016136 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilThread.dll
2013-03-29 16:10 - 2012-07-13 13:32 - 00382312 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\outer_AMSP_ClientLibrary.dll
2013-03-29 16:11 - 2012-07-13 13:36 - 00107808 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilIPC.dll
2013-03-29 16:11 - 2012-07-13 13:36 - 00138208 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\utilRPC.dll
2013-03-29 17:03 - 2012-10-19 19:52 - 00046272 _____ (Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\SkypeInstaller.dll
2011-02-17 09:52 - 2011-02-17 05:06 - 00107376 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\VXDIF.DLL
2011-08-08 13:14 - 2011-11-15 11:27 - 00083104 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCUtility.dll
2011-08-08 13:14 - 2011-11-02 16:40 - 00059528 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Care\KeyUtilities.dll
2011-08-08 13:14 - 2011-02-14 14:23 - 00022720 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Care\Metrics.dll
2011-08-08 13:09 - 2011-06-21 11:55 - 00080896 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Gate\x64\VAIOGateNotifications.dll
2011-08-08 12:22 - 2011-02-15 09:26 - 00041984 _____ (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\viaggregator.dll
2013-08-15 00:44 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-01-09 19:49 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\kernel32.dll
2013-01-09 19:49 - 2012-11-30 06:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNELBASE.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\USER32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.dll
2009-07-14 01:25 - 2009-07-14 03:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\syswow64\LPK.dll
2013-01-09 19:51 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\syswow64\USP10.dll
2012-02-16 12:59 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\syswow64\msvcrt.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.dll
2009-07-14 01:11 - 2009-07-14 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2013-08-15 00:44 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\syswow64\RPCRT4.dll
2012-07-11 14:19 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SspiCli.dll
2009-07-14 01:12 - 2009-07-14 03:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPTBASE.dll
2013-05-15 16:45 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\SHLWAPI.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.dll
2011-12-14 20:02 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.dll
2013-08-15 00:45 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPT32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\syswow64\MSASN1.dll
2013-08-15 00:45 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.dll
2009-07-14 01:28 - 2009-07-14 03:15 - 00828928 _____ (Microsoft Corporation) C:\Windows\syswow64\MSCTF.dll
2011-12-14 20:02 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\syswow64\CFGMGR32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.dll
2011-12-14 20:02 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\syswow64\DEVOBJ.dll
2009-07-14 01:44 - 2009-07-14 03:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\syswow64\CLBCatQ.DLL
2009-07-14 01:33 - 2009-07-14 03:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00269824 _____ (Microsoft Corporation) C:\Windows\syswow64\WLDAP32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\syswow64\NSI.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.DLL
2012-04-11 13:40 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\imagehlp.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00119808 _____ (Microsoft Corporation) C:\Windows\syswow64\IMM32.dll
2011-08-08 12:23 - 2011-01-22 15:15 - 00096768 _____ (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SnyUtils.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00079360 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESStorageProtect.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00056832 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESUSBKeyboard.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00062464 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESSuEvent.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00108032 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESTransform.dll
2011-08-08 12:23 - 2011-01-22 15:15 - 00018432 _____ (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SonyInfo.dll
2011-08-08 12:22 - 2011-02-15 09:26 - 00034816 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Improvement\viaggregator.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00225280 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESPerform.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00084992 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESRemoteKey.dll
2009-07-14 01:37 - 2009-07-14 03:15 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CRYPTSP.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcRtRemote.dll
2011-08-08 12:23 - 2011-01-22 15:15 - 00109568 _____ (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SSLProxyCOM.dll
2011-09-08 16:17 - 2011-09-08 16:17 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVCP100.dll
2011-09-08 16:17 - 2011-09-08 16:17 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVCR100.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SXS.DLL
2011-08-08 12:26 - 2011-03-04 17:05 - 00192512 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\CommonSetting.dll
2013-01-09 19:49 - 2012-11-30 06:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNEL32.dll
2013-05-15 16:45 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\shell32.dll
2013-08-15 18:52 - 2013-08-15 18:52 - 00019968 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\898df551d58233f57a678406a6eb470d\IAStorDataMgrSvc.ni.exe
2013-08-15 18:52 - 2013-08-15 18:52 - 00219136 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\6293ff10d662de11fd55cca92f9acd45\IAStorDataMgr.ni.dll
2013-08-15 18:52 - 2013-08-15 18:52 - 00475136 _____ (Intel Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\ebdb3050959d9be47d33d2c77d6cc291\IAStorUtil.ni.dll
2013-08-15 18:52 - 2013-08-15 18:52 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\cd9a4b4dbc1a4b564ebed696e18cadb6\IsdiInterop.ni.dll
2011-08-08 12:12 - 2010-09-13 18:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-07-14 18:45 - 2013-07-14 18:45 - 00014336 _____ (Intel Corp.) C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\34002b75cd0faab68bf8079299c1aa46\IAStorCommon.ni.dll
2011-08-08 12:42 - 2008-09-04 17:06 - 00055808 _____ (ArcSoft, Inc.) C:\Windows\system\ArcSoftKsUFilter.dll
2011-08-08 12:20 - 2011-02-01 12:57 - 01892352 _____ (Apache Software Foundation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00071168 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsg.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00035840 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsgHook.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00301568 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESCommonUI.dll
2011-08-08 12:26 - 2011-03-05 16:42 - 00089600 _____ (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESAppMon.dll
2011-12-14 20:02 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\oleaut32.dll
2013-08-15 02:04 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\wininet.dll
2009-07-14 01:15 - 2009-07-14 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\syswow64\normaliz.DLL
2013-08-15 02:04 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\syswow64\iertutil.dll
2013-08-15 00:45 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\crypt32.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\psapi.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.dll
2010-11-27 00:25 - 2010-11-27 00:25 - 00013312 _____ (Sony Corporation) C:\Program Files (x86)\Sony\PMB\XpStorageDevice_WinXp2k.dll
2013-08-15 02:04 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\WININET.dll
2013-08-15 02:04 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\syswow64\urlmon.dll
2010-10-28 22:50 - 2010-10-28 22:50 - 00303616 _____ (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcherLOC.DLL
2009-07-14 02:03 - 2009-07-14 03:15 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINMM.dll
2011-12-15 17:09 - 2006-08-15 01:20 - 00098304 ____N (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\u32Comm.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\comdlg32.dll
2011-12-15 17:09 - 2004-07-26 18:11 - 00028672 ____N () C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\DetMethod.dll
2011-12-15 17:09 - 2004-11-29 10:59 - 00036864 ____N (Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor_Res.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00394240 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\CoreDll.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\shlwapi.DLL
2011-12-26 19:08 - 2005-03-09 20:10 - 00061440 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimSessionManager.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00363008 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimDB.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00023040 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\AttributeInfo.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00025600 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\ThreadUtils.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00033792 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\UsageBracketing.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 01589248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2009-07-13 23:04 - 2009-07-14 03:15 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSJINT40.DLL
2011-12-26 19:08 - 2005-03-09 20:10 - 00143360 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\DeviceManager.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00086528 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\EventMgr.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00811008 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mimJobs.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00069632 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\licmgr.dll
2011-12-26 19:08 - 2005-02-11 17:20 - 00122880 _____ () C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mmgit.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00057344 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mmdrm.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00051200 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\TrackUtils.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00034816 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\ObjectManager.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00024064 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortalServices2.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00270976 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Enforce.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00765952 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Crypt.dll
2011-12-26 19:08 - 2005-03-09 20:11 - 00092672 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMReg.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00551936 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\SkinnedCtrls.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00079360 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\FileTagObj.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00115200 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\LocalDisk_Factory.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00100864 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Stream_Factory.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00118784 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\CdDvd_Factory.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00133120 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Portable_Factory.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00081920 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Stream_DO.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00056320 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Metadatacache.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00100352 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\TOD_Factory.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00460288 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortableAgent.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00025600 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortableDevice2.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00011776 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PortableDevice.dll
2011-12-26 19:08 - 2005-02-11 17:20 - 00897152 _____ (MUSICMATCH, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\mmlicmgr.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00107008 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\TOD_DO.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00181760 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\WavMp3Tag.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00090112 _____ (TODO: <Company name>) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\GraphicsUtils.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00164352 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\components\stingray.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00035840 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\FileCacheMgr.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00454144 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\BasicObjs.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00033792 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\components\mxlobj.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00270336 _____ (MusicMatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMSAL32.DLL
2011-12-26 19:08 - 2005-03-09 20:10 - 00034816 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\DummyTagObj.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00037376 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\WinMsgObject.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00199680 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\WmaObj.dll
2009-07-13 23:04 - 2009-07-14 03:15 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00206848 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\LocalDisk_DO.dll
2011-12-26 19:09 - 2005-02-08 13:04 - 00331776 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\Plugins\Portable2004\WMDM\MDPlugin.dll
2010-11-21 05:25 - 2010-11-21 05:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINHTTP.dll
2012-01-31 18:25 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00054784 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PlaylistFileObj.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00061952 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PlaylistM3UFileObj.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00047104 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\PlaylistPLSFileObj.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00041472 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMInet.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00093696 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\NetUtilsDLL.dll
2011-12-26 19:08 - 2005-03-09 20:10 - 00077824 _____ (Musicmatch, Inc.) C:\Program Files (x86)\Musicmatch\Musicmatch Jukebox\MMHttp.dll
2012-05-18 18:41 - 2012-04-21 03:16 - 00838584 _____ (sqlite.org) C:\Program Files (x86)\Mozilla Firefox\mozsqlite3.dll
2012-05-18 18:41 - 2012-04-21 03:16 - 01952696 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-08-06 18:32 - 2013-03-12 04:57 - 00906264 ____N (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\Module\20002\7.5.1136\7.5.1136\firefoxextension\components\TmBpFf.dll
2011-04-24 08:01 - 2011-04-24 08:01 - 00235112 _____ () C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2011-12-14 20:02 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\Users\Internet\Cookies:XvJd6vJ0cakcPsRMel0
AlternateDataStreams: C:\Users\Internet\Thumbs.db:encryptable


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/07/2013 07:46:15 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CALMAIN.exe, Version: 8.1.0.14, Zeitstempel: 0x433d11f9
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00009966
ID des fehlerhaften Prozesses: 0xa48
Startzeit der fehlerhaften Anwendung: 0xCALMAIN.exe0
Pfad der fehlerhaften Anwendung: CALMAIN.exe1
Pfad des fehlerhaften Moduls: CALMAIN.exe2
Berichtskennung: CALMAIN.exe3

Error: (09/07/2013 00:14:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 11:52:06 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 11:39:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 11:15:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 02:19:07 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 05:27:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: CALMAIN.exe, Version: 8.1.0.14, Zeitstempel: 0x433d11f9
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00009966
ID des fehlerhaften Prozesses: 0xa0c
Startzeit der fehlerhaften Anwendung: 0xCALMAIN.exe0
Pfad der fehlerhaften Anwendung: CALMAIN.exe1
Pfad des fehlerhaften Moduls: CALMAIN.exe2
Berichtskennung: CALMAIN.exe3

Error: (09/05/2013 01:42:31 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 00:14:05 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/04/2013 09:39:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/07/2013 11:15:19 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (09/07/2013 07:46:15 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Canon Camera Access Library 8" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/07/2013 00:12:44 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
acedrv06

Error: (09/07/2013 00:12:43 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/07/2013 00:12:43 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (09/07/2013 00:12:26 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\MxlW2k.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (09/07/2013 00:12:26 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\drivers\pfc.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (09/07/2013 00:10:50 AM) (Source: DCOM) (User: )
Description: {D0AAD3D6-EB93-4363-A24E-2C3D80CDBAC7}

Error: (09/06/2013 11:50:36 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
acedrv06

Error: (09/06/2013 11:50:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================
Error: (09/07/2013 07:46:15 AM) (Source: Application Error)(User: )
Description: CALMAIN.exe8.1.0.14433d11f9msvcrt.dll7.0.7601.177444eeaf722c000000500009966a4801ceab4e35eae5c3C:\Program Files (x86)\Canon\CAL\CALMAIN.exeC:\Windows\syswow64\msvcrt.dllcee3521d-1780-11e3-85ba-78843cedd408

Error: (09/07/2013 00:14:12 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 11:52:06 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 11:39:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 11:15:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/06/2013 02:19:07 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 05:27:12 PM) (Source: Application Error)(User: )
Description: CALMAIN.exe8.1.0.14433d11f9msvcrt.dll7.0.7601.177444eeaf722c000000500009966a0c01ceaa2cd40998e3C:\Program Files (x86)\Canon\CAL\CALMAIN.exeC:\Windows\syswow64\msvcrt.dlla2aff130-163f-11e3-8a49-78843cedd408

Error: (09/05/2013 01:42:31 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/05/2013 00:14:05 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/04/2013 09:39:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-09-07 00:12:25.964
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-07 00:12:25.917
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 23:50:18.574
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 23:50:18.527
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 23:37:27.165
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 23:37:27.118
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 23:13:27.210
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 23:13:27.164
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 14:17:20.900
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-09-06 14:17:20.838
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\acedrv06.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 8173.86 MB
Available physical RAM: 6011.82 MB
Total Pagefile: 16345.9 MB
Available Pagefile: 13933.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:684.53 GB) (Free:114.4 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: A9D7A0A0)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=685 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Sorry für den Doppelpost, aber seit ich FRST verwendet habe, kann ich nichts mehr downloaden: "C:\Users\name\AppData\Local\Temp konnte nicht gespeichert werden, weil Sie die Inhalte dieses Ordners nicht ändern können."

Was ist das jetzt wieder?

schrauber 07.09.2013 14:51
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

matsuyama 07.09.2013 17:20
Hm irgendwie werden die Probleme immer mehr ... wg dem Downloadproblem hatte ich den Schreibschutz-Haken des Temp-Ordners entfernt und ihn für alle Benutzer verfügbar gemacht, was aber nichts gebracht hat. Wenn ich jetzt irgendwelche Dateien wie zB Bilder öffnen will, erscheint eine Melsung, dass ich keibe ausreichwnde Berechtigung dazu hätte. In der Ordnerbeschreibung stand, dass die Datei von einem anderen Computer sei. Die Sicherungskopie funktioniert auf einem anderen PC allerdings einwqndfrei. Außerdem kam vorhin auch bei Firefox eine Fehlermeldung (irgendwas mit Schutz konnte nicht geladen werden). Werde dann wohl einfach alles neuinstallieren, dann ist auf jeden Fall wieder alles sauber.

schrauber 07.09.2013 21:21
hi,

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)
Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
  • Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST Download FRST 32-Bit | FRST 64-Bit
  • Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.
  • Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:
Über den Boot Manager:
  • Starte den Rechner neu.
  • Während dem Hochfahren drücke mehrmals die F8 Taste
  • Wähle nun Computer reparieren.
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Mit Windows CD/DVD (auch bei Windows 8 möglich):
  • Lege die Windows CD in dein Laufwerk.
  • Starte den Rechner neu und starte von der CD.
  • Wähle die Spracheinstellungen und klicke "Weiter".
  • Klicke auf Computerreparaturoptionen !
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Wähle in den Reparaturoptionen: Eingabeaufforderung
  • Gib nun bitte notepad ein und drücke Enter.
  • Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
    Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.
  • Schließe Notepad wieder
  • Gib nun bitte folgenden Befehl ein.
    e:\frst.exe bzw. e:\frst64.exe
    Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.
  • Akzeptiere den Disclaimer mit Ja und klicke Untersuchen
Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).



Alle Zeitangaben in WEZ +1. Es ist jetzt 12:35 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131