Trojaner-Board - http://wisersearch.com/?channel=de

Hallo zusammen,

Ich habe das Problem, dass seit kurzem im Firefox immer hxxp://wisersearch.com/?channel=de_nt aufgeht, wenn ich einen neuen Tab öffne. Ich kann das auch nicht ausstellen.

Ich würde mich sehr freuen, wenn mir jemand helfen kann :)

Da in den anderen Themen Farbar's Recovery Scan Tool als erstes genutzt wird, habe ich schonmal einen Scan durchgeführt:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 05

Ran by sebast (administrator) on SEBAST-PC on 18-12-2013 23:37:53

Running from C:\Users\sebast\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(CloudBees, Inc.) C:\Program Files (x86)\Jenkins\jenkins.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe

(Danga Interactive, Inc.) D:\server\memcached.exe

(Sun Microsystems, Inc.) C:\Program Files (x86)\Jenkins\jre\bin\java.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Gemalto N.V.) C:\Users\sebast\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(hxxp://tortoisesvn.net) C:\Program Files (x86)\bin\TSVNCache.exe

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE

(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\SamsungFastStart\SmartRestarter.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe

(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2011-05-19] (Realtek Semiconductor)

HKLM\...\Run: [TortoiseHgOverlayIconServer] - C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe [52688 2011-08-01] ()

HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2779024 2011-04-07] (CANON INC.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Miranda Fusion] - C:\Program Files (x86)\MirandaFusion\fusiontools\mfstart.exe [1122241 2012-06-12] (Miranda Fusion Team)

HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\sebast\AppData\Local\Akamai\netsession_win.exe"

HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\sebast\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-03-28] (Gemalto N.V.)

HKCU\...\Run: [KSS] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)

HKCU\...\Run: [SSync] - C:\Users\sebast\AppData\Roaming\SSync\SSync.exe [36864 2013-04-09] ()

HKCU\...\Run: [DataMgr] - C:\Users\sebast\AppData\Roaming\DataMgr\DataMgr.exe [168824 2013-10-09] (HTTO Group, Ltd.)

HKCU\...\Run: [OMESupervisor] - C:\Users\sebast\AppData\Local\omesuperv.exe [2230128 2013-11-27] ()

HKCU\...\Run: [SCheck] - C:\Users\sebast\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-09] ()

HKCU\...\Run: [Snoozer] - C:\Users\sebast\AppData\Roaming\Snz\Snz.exe [1226901 2013-11-27] ()

HKCU\...\Run: [Intermediate] - C:\Users\sebast\AppData\Roaming\Intermediate\Intermediate.exe [36864 2013-04-09] ()

MountPoints2: {0dfd43a3-0c3f-11e1-8fb0-961f9313a37f} - F:\unlock.exe autoplay=true

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1611160 2011-03-28] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()

HKLM-x32\...\Run: [THGuard] - C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe [1086880 2012-10-23] (Mischel Internet Security)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [226920 2011-05-04] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [192616 2011-05-04] (NVIDIA Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://wisersearch.com/?channel=de

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com

SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://wisersearch.com/search.php?channel=de&q={searchTerms}

SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://wisersearch.com/search.php?channel=de&q={searchTerms}

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()

BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\31.0.1650.63\npchrome_frame.dll (Google Inc.)

Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File

Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File

Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\31.0.1650.63\npchrome_frame.dll (Google Inc.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 80.69.100.214 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default

FF Homepage: about:home

FF Keyword.URL: hxxp://wisersearch.com/search.php?channel=de&q=

FF NetworkProxy: "autoconfig_url", "199.195.109.23"

FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, kdice.com"

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @sun.com/npsopluginmi;version=1.0 - C:\Program Files (x86)\OpenOffice.org 3\program ()

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\sebast\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF SearchPlugin: C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\searchplugins\search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: VWC Cocoon - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\firefox-support@vworldc.com

FF Extension: FoxyProxy Standard - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\foxyproxy@eric.h.jung

FF Extension: ProxTube - Unblock YouTube - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\ich@maltegoetz.de

FF Extension: Ask Toolbar - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\toolbar@ask.com

FF Extension: FireShot - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}

FF Extension: Html Validator - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e}

FF Extension: ColorZilla - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}

FF Extension: Live HTTP Headers - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}

FF Extension: Page Speed - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}

FF Extension: Firebug - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\firebug@software.joehewitt.com.xpi

FF Extension: Ghostery - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\firefox@ghostery.com.xpi

FF Extension: Wiktionary and Google Translate - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\googledictionary@toptip.ca.xpi

FF Extension: Grooveshark Unlocker - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\groovesharkUnlocker@overlord1337.xpi

FF Extension: ipFuck - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\ipfuck@p4ul.info.xpi

FF Extension: Self-Destructing Cookies - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi

FF Extension: OfferMosquito - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\om@offermosquito.com.xpi

FF Extension: Dict.cc Translation - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\searchdictcc@roughael.xpi

FF Extension: Simple New Tab - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\snt@dotlabs.co.xpi

FF Extension: Text to Voice - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\text2voice@vik.josh.xpi

FF Extension: YSlow - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\yslow@yahoo-inc.com.xpi

FF Extension: Tamper Data - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi

FF Extension: Adblock Plus - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: BetterPrivacy - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi

FF Extension: Greasemonkey - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
 

Chrome: 

=======

CHR HomePage: http:\/\/wisersearch.com\/?channel=de

CHR RestoreOnStartup: "http:\/\/wisersearch.com\/?channel=de"],"restore_on_startup_migrated":true,"restore_on_startup"

CHR DefaultSearchURL: http:\/\/wisersearch.com\/search.php?channel=de&q={searchTerms}

CHR Extension: (OfferMosquito) - C:\Users\sebast\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk\0.7.1_0

CHR Extension: (Word CaptureX Extension) - C:\Users\sebast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0

CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\sebast\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0

CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\Deskperience\Word Capture\wcxChrome.crx
 

==================== Services (Whitelisted) =================
 

S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [397176 2012-08-16] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-08-16] (BlueStack Systems, Inc.)

S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [246256 2010-08-25] (CyberLink)

R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8998800 2013-05-09] (DisplayLink Corp.)

R2 Jenkins; C:\Program Files (x86)\Jenkins\jenkins.exe [36584 2012-08-08] (CloudBees, Inc.)

R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)

S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)

R2 memcached Server; D:\server\memcached.exe [86016 2008-09-24] (Danga Interactive, Inc.)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()

S3 wampapache; C:\Program Files\wamp\bin\apache\apache2.2.17\bin\httpd.exe [20549 2010-12-31] (Apache Software Foundation)

S3 wampmysqld; C:\Program Files\wamp\bin\mysql\mysql5.5.8\bin\mysqld.exe [8133120 2010-12-31] ()

S2 MongoDB; "C:\Program Files (x86)\MongoDb\bin\mongod" --logpath  "d:\server\mongo\logs"  --logappend  --dbpath  "d:\server\mongo\data"  --directoryperdb  --service  
 

==================== Drivers (Whitelisted) ====================
 

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [74616 2012-08-16] (BlueStack Systems)

S3 DisplayLinkUsbIo_x64; C:\Windows\System32\DRIVERS\DisplayLinkUsbIo_x64_7.2.47873.0.sys [44944 2013-05-13] ()

S3 NSNDIS5; C:\windows\SysWow64\NSNDIS5.SYS [17280 2004-03-24] (Printing Communications Assoc., Inc. (PCAUSA))

S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-07-13] (Windows (R) 2003 DDK 3790 provider)

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-18 23:37 - 2013-12-18 23:38 - 00020651 _____ C:\Users\sebast\Downloads\FRST.txt

2013-12-18 23:37 - 2013-12-18 23:37 - 00000000 ____D C:\FRST

2013-12-18 23:35 - 2013-12-18 23:36 - 02192805 _____ (Farbar) C:\Users\sebast\Downloads\FRST64.exe

2013-12-18 20:57 - 2013-12-18 20:57 - 00000000 ____D C:\Users\sebast\AppData\Roaming\Snz

2013-12-18 20:56 - 2013-12-18 20:56 - 00000000 ____D C:\Users\sebast\AppData\Roaming\SCheck

2013-12-12 18:48 - 2013-12-12 18:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-12 18:20 - 2013-12-12 18:20 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-12-11 18:48 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll

2013-12-11 18:48 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL

2013-12-11 18:48 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL

2013-12-11 18:48 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll

2013-12-11 18:46 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-12-11 18:46 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2013-12-11 18:46 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2013-12-11 18:46 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2013-12-11 18:46 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2013-12-11 18:46 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2013-12-11 18:46 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-12-11 18:46 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-12-11 18:46 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2013-12-11 18:46 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2013-12-11 18:46 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-12-11 18:46 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2013-12-11 18:46 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2013-12-11 18:46 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2013-12-11 18:46 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2013-12-11 18:46 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2013-12-11 18:46 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2013-12-11 18:46 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-12-11 18:46 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2013-12-11 18:46 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll

2013-12-11 18:46 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2013-12-11 18:46 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2013-12-11 18:46 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2013-12-11 18:46 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2013-12-11 18:46 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2013-12-11 18:46 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-12-11 18:46 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-12-11 18:46 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2013-12-11 18:46 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2013-12-11 18:46 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2013-12-11 18:46 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2013-12-11 18:12 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll

2013-12-11 18:12 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

2013-12-11 18:12 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll

2013-12-11 18:12 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll

2013-12-11 18:12 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll

2013-12-11 18:12 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll

2013-12-11 18:12 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2013-12-11 18:12 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll

2013-12-11 18:12 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll

2013-12-11 18:12 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx

2013-12-11 18:12 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll

2013-12-11 18:12 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx

2013-12-11 18:12 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll

2013-12-11 18:12 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe

2013-12-11 18:12 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe

2013-12-11 18:12 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe

2013-12-11 18:12 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe

2013-12-11 18:12 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys

2013-12-11 18:12 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys

2013-12-10 21:38 - 2013-12-10 21:38 - 09293192 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe

2013-12-04 19:27 - 2013-12-04 19:27 - 00000948 _____ C:\Users\sebast\Desktop\einkaufsliste_wildschwein.txt

2013-12-04 19:02 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\windows\system32\IEUDINIT.EXE

2013-12-04 18:58 - 2013-12-04 18:58 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe

2013-12-04 18:57 - 2013-12-04 19:03 - 00010277 _____ C:\windows\IE11_main.log

2013-11-27 13:14 - 2013-11-27 13:14 - 02230128 _____ C:\Users\sebast\AppData\Local\omesuperv.exe

2013-11-19 18:34 - 2013-11-20 19:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
 

==================== One Month Modified Files and Folders =======
 

2013-12-18 23:38 - 2013-12-18 23:37 - 00020651 _____ C:\Users\sebast\Downloads\FRST.txt

2013-12-18 23:37 - 2013-12-18 23:37 - 00000000 ____D C:\FRST

2013-12-18 23:36 - 2013-12-18 23:35 - 02192805 _____ (Farbar) C:\Users\sebast\Downloads\FRST64.exe

2013-12-18 23:36 - 2012-04-10 18:02 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2013-12-18 23:17 - 2011-08-14 09:28 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-18 22:47 - 2011-06-23 02:02 - 01247326 _____ C:\windows\WindowsUpdate.log

2013-12-18 21:02 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-18 21:02 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-18 20:57 - 2013-12-18 20:57 - 00000000 ____D C:\Users\sebast\AppData\Roaming\Snz

2013-12-18 20:57 - 2013-11-05 21:37 - 00000000 ____D C:\Users\sebast\AppData\Roaming\Intermediate

2013-12-18 20:57 - 2012-08-16 20:03 - 00000000 ____D C:\Program Files (x86)\Jenkins

2013-12-18 20:56 - 2013-12-18 20:56 - 00000000 ____D C:\Users\sebast\AppData\Roaming\SCheck

2013-12-18 20:56 - 2011-08-12 11:58 - 00000000 ____D C:\Users\sebast\AppData\Roaming\TortoiseHg

2013-12-18 20:54 - 2011-08-14 09:28 - 00001106 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-18 20:54 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT

2013-12-18 20:54 - 2009-07-14 05:51 - 00109741 _____ C:\windows\setupact.log

2013-12-18 20:53 - 2012-05-15 19:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-17 23:57 - 2013-07-23 22:07 - 00000000 ____D C:\windows\system32\MRT

2013-12-17 23:53 - 2011-08-26 20:31 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2013-12-12 18:49 - 2013-12-12 18:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-12 18:20 - 2013-12-12 18:20 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-12-12 18:20 - 2011-08-14 09:28 - 00000000 ____D C:\Program Files (x86)\Google

2013-12-12 18:00 - 2011-06-23 01:27 - 00654852 _____ C:\windows\system32\perfh007.dat

2013-12-12 18:00 - 2011-06-23 01:27 - 00130434 _____ C:\windows\system32\perfc007.dat

2013-12-12 18:00 - 2009-07-14 06:13 - 01500294 _____ C:\windows\system32\PerfStringBackup.INI

2013-12-12 17:56 - 2009-07-14 06:09 - 00000000 ____D C:\windows\System32\Tasks\WPD

2013-12-12 17:54 - 2009-07-14 05:45 - 00320048 _____ C:\windows\system32\FNTCACHE.DAT

2013-12-11 18:45 - 2012-01-28 19:55 - 00000000 ____D C:\Users\sebast\AppData\Local\TGitCache

2013-12-11 18:45 - 2011-08-26 20:23 - 00000000 ____D C:\Users\sebast\AppData\Roaming\SoftGrid Client

2013-12-11 18:12 - 2011-08-14 09:28 - 00004106 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-11 18:12 - 2011-08-14 09:28 - 00003854 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-10 21:38 - 2013-12-10 21:38 - 09293192 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe

2013-12-10 21:38 - 2012-04-10 18:02 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe

2013-12-10 21:38 - 2012-04-10 18:02 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater

2013-12-10 21:38 - 2011-08-12 17:42 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-07 21:41 - 2011-08-12 10:56 - 00000000 ____D C:\Users\sebast\AppData\Local\TSVNCache

2013-12-07 21:41 - 2009-07-14 06:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT

2013-12-06 18:01 - 2011-08-12 09:30 - 00001421 _____ C:\Users\sebast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-06 08:20 - 2009-07-14 04:20 - 00000000 ____D C:\windows\PolicyDefinitions

2013-12-05 00:07 - 2011-11-18 16:17 - 00000000 ____D C:\Users\sebast\.gimp-2.6

2013-12-04 19:27 - 2013-12-04 19:27 - 00000948 _____ C:\Users\sebast\Desktop\einkaufsliste_wildschwein.txt

2013-12-04 19:03 - 2013-12-04 18:57 - 00010277 _____ C:\windows\IE11_main.log

2013-12-04 18:58 - 2013-12-04 18:58 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe

2013-12-03 20:50 - 2013-03-31 17:31 - 00000000 ____D C:\Users\sebast\AppData\Local\posterXXL.de Bestellsoftware

2013-12-01 21:33 - 2011-08-12 12:39 - 00000000 ____D C:\Users\sebast\AppData\Local\CrashDumps

2013-11-27 13:14 - 2013-11-27 13:14 - 02230128 _____ C:\Users\sebast\AppData\Local\omesuperv.exe

2013-11-26 12:54 - 2013-12-11 18:46 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-11 18:46 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-11 18:46 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-11 18:46 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-11 18:46 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-11 18:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-11 18:46 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-11 18:46 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-11 18:46 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-11 18:46 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-11 18:46 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-11 18:46 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-11 18:46 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-11 18:46 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-11 18:46 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-11 18:46 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-11 18:46 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-11 18:46 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-11 18:46 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-11 18:46 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-11 18:46 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-11 18:46 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-11 18:46 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-11 18:46 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-11 18:46 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-11 18:46 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-11-26 07:40 - 2013-12-11 18:46 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-11 18:46 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-11 18:46 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-11 18:46 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-11 18:46 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2013-11-24 21:38 - 2013-11-07 19:12 - 00000000 ____D C:\Users\sebast\AppData\Roaming\MultiBit

2013-11-24 10:47 - 2010-11-21 04:47 - 00530832 _____ C:\windows\PFRO.log

2013-11-23 19:26 - 2013-12-11 18:12 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 18:12 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

2013-11-23 12:53 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache

2013-11-22 23:17 - 2012-10-15 19:02 - 00000000 ____D C:\Users\sebast\Desktop\brettspiel

2013-11-20 19:03 - 2013-11-19 18:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-11-19 03:33 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
 

Some content of TEMP:

====================

C:\Users\sebast\AppData\Local\Temp\9IlwQp7T.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\AskSLib.dll

C:\Users\sebast\AppData\Local\Temp\COMAP.EXE

C:\Users\sebast\AppData\Local\Temp\dHveNM.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\DivXSetup.exe

C:\Users\sebast\AppData\Local\Temp\drm_dialogs.dll

C:\Users\sebast\AppData\Local\Temp\drm_dyndata_7330014.dll

C:\Users\sebast\AppData\Local\Temp\i4jd1650756124982940720.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel0.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel1.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel10.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel11.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel12.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel13.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel14.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel15.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel16.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel17.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel18.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel19.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel2.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel20.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel21.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel22.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel23.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel24.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel25.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel26.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel27.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel28.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel29.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel3.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel30.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel31.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel32.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel33.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel34.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel35.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel36.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel37.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel38.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel39.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel4.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel40.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel41.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel42.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel43.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel44.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel45.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel46.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel47.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel48.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel49.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel5.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel6.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel7.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel8.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel9.exe

C:\Users\sebast\AppData\Local\Temp\jansi-64-1.9.dll

C:\Users\sebast\AppData\Local\Temp\jna1965974385895275069.dll

C:\Users\sebast\AppData\Local\Temp\jna2917729154468339943.dll

C:\Users\sebast\AppData\Local\Temp\jna3893844829801886916.dll

C:\Users\sebast\AppData\Local\Temp\jna5033372025507777895.dll

C:\Users\sebast\AppData\Local\Temp\jre-7u2-windows-i586-iftw.exe

C:\Users\sebast\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe

C:\Users\sebast\AppData\Local\Temp\MSETUP4.EXE

C:\Users\sebast\AppData\Local\Temp\muHXkz.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\O3idD.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\pdf24-creator-update.exe

C:\Users\sebast\AppData\Local\Temp\proxy_util_ia64.dll

C:\Users\sebast\AppData\Local\Temp\qMXd.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\restarter3052782909741045167.exe

C:\Users\sebast\AppData\Local\Temp\restarter3290417190738810666.exe

C:\Users\sebast\AppData\Local\Temp\restarter3727799878567880566.exe

C:\Users\sebast\AppData\Local\Temp\restarter4292971627753220705.exe

C:\Users\sebast\AppData\Local\Temp\restarter728052776811063486.exe

C:\Users\sebast\AppData\Local\Temp\setup.exe

C:\Users\sebast\AppData\Local\Temp\Shockwave_Installer_FF.exe

C:\Users\sebast\AppData\Local\Temp\SkypeSetup.exe

C:\Users\sebast\AppData\Local\Temp\uninstall.exe

C:\Users\sebast\AppData\Local\Temp\vistalauncher3529440184516386002.exe

C:\Users\sebast\AppData\Local\Temp\vistalauncher4267906922042466095.exe

C:\Users\sebast\AppData\Local\Temp\xmlUpdater.exe

C:\Users\sebast\AppData\Local\Temp\ZdI9H.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\_isD1A.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-05 19:40
 

==================== End Of Log ============================

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-12-2013 05

Ran by sebast at 2013-12-18 23:39:34

Running from C:\Users\sebast\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

„Windows Live Essentials“ (x32 Version: 15.4.3502.0922)

„Windows Live Mail“ (x32 Version: 15.4.3502.0922)

„Windows Live Messenger“ (x32 Version: 15.4.3502.0922)

„Windows Live“ fotogalerija (x32 Version: 15.4.3502.0922)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)

Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)

Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629)

Agatha Christie - Death on the Nile (x32 Version: 2.2.0.82)

Age of Empires Online (x32 Version: 1.0.0000.1)

ArgoUML 0.34 (x32 Version: 0.34)

Article Wizard (x32 Version: 1.0.0)

Ask Toolbar (x32 Version: 1.13.1.0) <==== ATTENTION

AVI ReComp 1.5.3 (x32 Version: 1.5.3)

AviSynth 2.5 (x32)

BatteryLifeExtender (x32 Version: 1.0.11)

Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)

Beyond Compare Version 3.3.1 (x32)

Biet-O-Matic v2.14.8 (x32 Version: 2.14.8)

Bitcoin (HKCU Version: 0.8.5)

BlueStacks (x32 Version: 0.7.3.766)

Bpgnview v 2.01 (x32)

Build-a-lot (x32 Version: 2.2.0.82)

CamStudio (x32)

Canon Easy-PhotoPrint EX (x32)

Canon Easy-WebPrint EX (x32)

Canon IJ Network Scanner Selector EX (x32)

Canon IJ Network Tool (x32)

CANON iMAGE GATEWAY MyCamera Download Plugin (x32 Version: 3.1.1.2)

CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.9.0.9)

Canon MG5300 series Benutzerregistrierung (x32)

Canon MG5300 series MP Drivers

Canon MOV Decoder (x32 Version: 1.8.0.7)

Canon MOV Encoder (x32 Version: 1.6.0.1)

Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.7.0.4)

Canon MP Navigator EX 5.0 (x32)

Canon My Printer (x32)

Canon Solution Menu EX (x32)

Canon Utilities CameraWindow DC 8 (x32 Version: 8.4.0.3)

Canon Utilities CameraWindow Launcher (x32 Version: 7.5.0.2)

Canon Utilities Movie Uploader for YouTube (x32 Version: 1.2.0.7)

Canon Utilities MyCamera (x32 Version: 7.4.0.2)

Canon Utilities PhotoStitch (x32 Version: 3.1.22.46)

Canon Utilities ZoomBrowser EX (x32 Version: 6.7.0.24)

Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.5.0.9)

ChargeableUSB (x32 Version: 1.0.0.0)

Chuzzle Deluxe (x32 Version: 2.2.0.82)

Composer - Php Dependency Manager (x32)

CPUID HWMonitor 1.23

CyberLink Media Suite (x32 Version: 8.0.2227)

CyberLink MediaShow (x32 Version: 5.0.1130a)

CyberLink Power2Go (x32 Version: 6.1.3802)

CyberLink PowerDirector (x32 Version: 8.0.3306)

CyberLink PowerDVD 10 (x32 Version: 10.0.2310.52)

CyberLink YouCam (x32 Version: 3.1.3509)

D3DX10 (x32 Version: 15.4.2368.0902)

Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.82)

DisplayLink Core Software (Version: 7.2.47873.0)

DisplayLink Graphics (Version: 7.0.43577.0)

DivX-Setup (x32 Version: 2.6.1.84)

Easy Content Share (x32 Version: 1.0)

Easy Display Manager (x32 Version: 3.2)

Easy Migration (x32 Version: 1.0)

Easy Network Manager (x32 Version: 4.4.7)

Easy SpeedUp Manager (x32 Version: 2.1.1.1)

EasyBatteryManager (x32 Version: 4.0.0.4)

EasyFileShare (x32 Version: 1.0.11)

ETDWare PS/2-X64 10.7.14.12_WHQL (Version: 10.7.14.12)

Farm Frenzy (x32 Version: 2.2.0.82)

Fast Start (x32 Version: 2.2.0.0)

FeedAgent (x32 Version: 1.1.0)

FileZilla Client 3.2.7.1 (x32 Version: 3.2.7.1)

FlashDevelop 4.0.1 (x32 Version: 4.0.1-RTM)

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)

Foxit Reader 5.0 (x32 Version: 5.0.2.718)

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)

Galerie foto Windows Live (x32 Version: 15.4.3502.0922)

Game Alarm (HKCU)

GIMP 2.6.11 (x32 Version: 2.6.11)

Git version 1.7.8-preview20111206 (x32 Version: 1.7.8-preview20111206)

Google Chrome (x32 Version: 32.0.1700.41)

Google Earth (x32 Version: 7.1.2.2041)

Google Update Helper (x32 Version: 1.3.22.3)

Insaniquarium Deluxe (x32 Version: 2.2.0.82)

inSSIDer (x32 Version: 2.1.5)

Intel PROSet Wireless

Intel(R) Control Center (x32 Version: 1.2.1.1007)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)

Intel(R) Processor Graphics (x32 Version: 8.15.10.2266)

Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046)

Intel® PROSet/Wireless WiFi-Software (Version: 15.00.0000.0642)

IrfanView (remove only) (x32 Version: 4.35)

Java 7 Update 25 (64-bit) (Version: 7.0.250)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

Java(TM) 6 Update 29 (x32 Version: 6.0.290)

Java(TM) SE Development Kit 7 (x32 Version: 1.7.0.0)

Jenkins 1.477 (x32 Version: 0.1.477)

JetBrains PhpStorm 3.0.3 (x32 Version: 111.344)

JetBrains PhpStorm 4.0.3 (x32 Version: 117.746)

JetBrains PhpStorm 5.0.1 (x32 Version: 121.215)

JetBrains PhpStorm 6.0.1 (x32 Version: 129.291)

John Deere Drive Green (x32 Version: 2.2.0.82)

Junk Mail filter update (x32 Version: 15.4.3502.0922)

Kaspersky Security Scan (x32 Version: 12.0.1.340)

Konz 2013 (x32 Version: 1.00.0000)

LogMeIn Hamachi (x32 Version: 2.1.0.294)

McAfee Security Scan Plus (x32 Version: 3.0.285.6)

Mesh Runtime (x32 Version: 15.4.5722.2)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)

Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)

Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)

Microsoft Office 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Sync Framework 2.0 Core Components (x64) ENU  (Version: 2.0.1578.0)

Microsoft Sync Framework 2.0 Provider Services (x64) ENU  (Version: 2.0.1578.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Miranda Fusion 3.2.6.0 (x32 Version: 3.2.6.0)

Movie Color Enhancer (x32 Version: 1.0)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)

Mozilla Maintenance Service (x32 Version: 26.0)

Mozilla Thunderbird 24.0.1 (x86 de) (x32 Version: 24.0.1)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT_amd64 (x32 Version: 15.4.2862.0708)

MultiBit 0.5.14 (x32 Version: 0.5.14)

NetBeans IDE 7.0.1 (x32 Version: 7.0.1)

Network Stumbler 0.4.0 (remove only) (x32)

Notepad++ (x32 Version: 5.9.3)

NVIDIA Control Panel 266.72 (Version: 266.72)

NVIDIA Graphics Driver 266.72 (Version: 266.72)

NVIDIA Install Application (Version: 2.265.39.0)

NVIDIA Optimus 1.0.15 (Version: 1.0.15)

NVIDIA Update Components (Version: 1.0.15)

OpenOffice.org 3.3 (x32 Version: 3.3.9567)

Oracle JRockit JDK R28.2.2 for Java SE 6 with JRMC 4.1 (64-bit)

Oracle JRockit JRE R28.2.2 for Java SE 6 (64-bit)

Oracle VM VirtualBox 4.1.20 (Version: 4.1.20)

PartyPoker (x32)

PDF24 Creator 4.5.0 (x32)

Peggle (x32 Version: 2.2.0.82)

Penguins! (x32 Version: 2.2.0.82)

PhoneShare (x32 Version: 9.1.4)

Plants vs. Zombies (x32 Version: 2.2.0.82)

Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)

Polar Golfer (x32 Version: 2.2.0.82)

Pošta Windows Live (x32 Version: 15.4.3502.0922)

posterXXL.de Bestellsoftware 4.80 (x32)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)

RailsInstaller 2.0.1 (HKCU Version: 2.0.1)

Realtek Ethernet Controller Driver (x32 Version: 7.44.421.2011)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6378)

Samsung AnyWeb Print (x32 Version: 2.0.67.1)

Samsung Printer Live Update (x32)

Samsung Recovery Solution 5 (x32 Version: 5.0.0.9)

Samsung Support Center (x32 Version: 1.1.24)

Samsung Universal Print Driver (x32 Version: 2.02.05.00:27)

Samsung Universal Scan Driver (x32 Version: 1.2.5.0)

Samsung Update Plus (x32 Version: 3.0.1.17)

SanDiskSecureAccess_Manager.exe (HKCU Version: 1.1.19755)

Sencha Cmd (x32 Version: 3.0.2.288)

Ski Challenge 13 (DE) (HKCU)

Skype™ 5.10 (x32 Version: 5.10.116)

Spelling Dictionaries Support For Adobe Reader 9 (x32 Version: 9.0.0)

Steuer 2012 (HKCU Version: 20.00.8137)

Strange Eons (x32)

swMSM (x32 Version: 12.0.0.1)

SyncToy 2.1 (x64) (Version: 2.1.0)

Thief 1.25 (x32 Version: 1.25)

TomTom HOME (x32 Version: 2.9.4)

TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)

TortoiseGit 1.7.6.0 (64 bit) (Version: 1.7.6.0)

TortoiseHg 2.1.2 (x64) (Version: 2.1.2)

TortoiseSVN 1.6.16.21511 (64 bit) (Version: 1.6.21511)

Total Commander (Remove or Repair) (x32 Version: 7.56a)

TreeSize Free V2.7 (x32 Version: 2.7)

TripleA Version 1_3_2_2 (x32)

TripleA Version 1_7_0_3 (x32)

TrojanHunter 5.5 (x32 Version: 5.5)

Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.0.82.0)

Unity Web Player (HKCU Version: 2.6.1f3_31223)

Unlocker 1.9.1-x64 (Version: 1.9.1)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

User Guide (x32 Version: 1.5)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)

VLC media player 1.1.11 (x32 Version: 1.1.11)

VobSub 2.23 (x32 Version: 2.23)

WampServer 2.1 (x32)

WildTangent Games (x32 Version: 1.0.1.5)

WildTangent ORB Game Console (x32)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live fotoattēlu galerija (x32 Version: 15.4.3502.0922)

Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live Foto-galerija (x32 Version: 15.4.3502.0922)

Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)

Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)

Windows Live Fotótár (x32 Version: 15.4.3502.0922)

Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922)

Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3508.1109)

Windows Live Mail (x32 Version: 15.4.3502.0922)

Windows Live Mesh (x32 Version: 15.4.3502.0922)

Windows Live Messenger (x32 Version: 15.4.3502.0922)

Windows Live MIME IFilter (Version: 15.4.3502.0922)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live Pošta (x32 Version: 15.4.3502.0922)

Windows Live Remote Client (Version: 15.4.5722.2)

Windows Live Remote Client Resources (Version: 15.4.5722.2)

Windows Live Remote Service (Version: 15.4.5722.2)

Windows Live Remote Service Resources (Version: 15.4.5722.2)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

Windows Live Writer (x32 Version: 15.4.3502.0922)

Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

Windows Live 메일 (x32 Version: 15.4.3502.0922)

Windows Live 사진 갤러리 (x32 Version: 15.4.3502.0922)

Windows Live 필수 패키지 (x32 Version: 15.4.3502.0922)

Windows Live 影像中心 (x32 Version: 15.4.3502.0922)

Windows Live 照片库 (x32 Version: 15.4.3502.0922)

Windows Live 程式集 (x32 Version: 15.4.3502.0922)

Windows Live 程式集 (x32 Version: 15.4.3508.1109)

Windows Live 软件包 (x32 Version: 15.4.3502.0922)

Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)

Windows Liven sähköposti (x32 Version: 15.4.3502.0922)

Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)

WinRAR 4.01 (64-Bit) (Version: 4.01.0)

WordCaptureX Pro (x32 Version: 4.0.0)

WORLD IN CONFLICT (x32 Version: 1.0.0.0)

World of Tanks (x32)

Xvid 1.3.0 (x32 Version: 1.3.0)

yEd Graph Editor 3.11.1 (x32 Version: 3.11.1)

Zuma Deluxe (x32 Version: 2.2.0.95)

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)

Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)

Почта Windows Live (x32 Version: 15.4.3502.0922)

Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)

Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)

גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)

بريد Windows Live (x32 Version: 15.4.3502.0922)

معرض صور Windows Live (x32 Version: 15.4.3502.0922)
 

==================== Restore Points  =========================
 

24-11-2013 19:28:09 Windows-Sicherung

27-11-2013 22:00:26 Windows Update

01-12-2013 20:40:09 Windows-Sicherung

03-12-2013 23:34:34 Windows Update

04-12-2013 17:55:52 Windows Update

08-12-2013 18:57:23 Windows-Sicherung

11-12-2013 17:07:23 Windows Update

11-12-2013 17:45:55 Windows Update

15-12-2013 21:46:42 Windows-Sicherung

17-12-2013 21:29:21 Windows Update

17-12-2013 22:53:24 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-09-29 15:47 - 00000944 ____A C:\windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

127.0.0.1        tactics.local

127.0.0.1        fastmvc.local

127.0.0.1        rss.local

127.0.0.1        issues.local
 
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {050F22BB-4832-4850-8B32-0FC64D358E92} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-11-29] (Samsung Electronics Co., Ltd.)

Task: {22F2DD14-1E2E-4EF9-82DA-EE8D6D0CC5E3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-14] (Google Inc.)

Task: {23AA9306-3270-4AB9-B7D1-A6A12B2D81A2} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe [2011-01-11] (Samsung Electronics Co., Ltd.)

Task: {2EBF2C2D-1EA4-4D2A-A760-A87E29EC0F71} - System32\Tasks\advSRS5 => C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2010-11-17] (SEC)

Task: {3DA9A863-46F7-45B2-950F-143E4A76958D} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-12-18] (Samsung Electronics. Co. Ltd.)

Task: {3FBF94F0-F0DC-47F6-B32B-0F4F27A88646} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-08-01] (Microsoft Corporation)

Task: {4579918D-726F-415E-A032-ED7273C492BB} - System32\Tasks\WifiManager => C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe [2011-01-04] (Samsung Electronics Co., Ltd.)

Task: {5287F7C0-3E0F-4302-9FC4-B9B08508369E} - System32\Tasks\{4DCA6968-34DE-4540-8D31-E79F69B3D9EA} => Firefox.exe hxxp://ui.skype.com/ui/0/6.2.0.106/de/abandoninstall?page=tsProgressBar

Task: {584B1FDD-959B-407B-9AA9-6F9E205FA535} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [2011-02-07] (SAMSUNG Electronics)

Task: {774C9FE8-621C-4D38-992A-1C0319E7A73B} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2011-08-23] ()

Task: {7CECDC27-8ADF-42FC-8D43-035553711E22} - System32\Tasks\SmartRestarter => C:\Program Files\SAMSUNG\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.)

Task: {7E0FA152-695D-47D7-9F55-A998CA7D510C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {885CD3CB-7678-4966-9FEF-F36369378233} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-14] (Google Inc.)

Task: {89DB5E2E-FE80-47C4-ABDE-2A1CEE940ACD} - System32\Tasks\EasyPartitionManager => C:\Windows\MSetup\BA46-12225A02\EPM.exe

Task: {BA817E50-EB2E-4133-8E0B-4D27E252A271} - System32\Tasks\SUPBackground => C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe [2011-12-20] (Samsung Electronics)

Task: {D5059284-C3C6-49AF-825A-D37C20925A54} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated)

Task: {D5E6B9A4-4BBC-46BF-BB2E-E4657AD3FBE1} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)

Task: {E09AB57B-A43E-4050-BED3-456AC76CC10B} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2010-11-10] (CyberLink)

Task: {E7E8C7CD-1BD9-4809-B19E-05F3A2F260B3} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [2010-12-23] (Samsung Electronics Co., Ltd.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-12-10 19:45 - 2011-12-10 19:45 - 00083640 _____ () C:\Program Files\TortoiseGit\bin\zlib1.dll

2011-12-10 19:45 - 2011-12-10 19:45 - 00240312 _____ () C:\Program Files\TortoiseGit\bin\libgit2.dll

2009-08-23 18:24 - 2009-08-23 18:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2011-02-26 11:46 - 2011-02-26 11:46 - 00124928 _____ () C:\Program Files\TortoiseHg\win32api.pyd

2011-02-27 10:13 - 2011-02-27 10:13 - 00136704 _____ () C:\Program Files\TortoiseHg\pywintypes26.dll

2011-02-26 11:46 - 2011-02-26 11:46 - 00221184 _____ () C:\Program Files\TortoiseHg\win32gui.pyd

2011-02-26 11:45 - 2011-02-26 11:45 - 00026112 _____ () C:\Program Files\TortoiseHg\win32pipe.pyd

2011-02-26 11:45 - 2011-02-26 11:45 - 00019968 _____ () C:\Program Files\TortoiseHg\win32event.pyd

2011-02-26 11:45 - 2011-02-26 11:45 - 00138240 _____ () C:\Program Files\TortoiseHg\win32file.pyd

2011-02-26 11:46 - 2011-02-26 11:46 - 00136704 _____ () C:\Program Files\TortoiseHg\win32security.pyd

2011-08-01 18:57 - 2011-08-01 18:57 - 00011264 _____ () C:\Program Files\TortoiseHg\mercurial.osutil.pyd

2010-08-24 17:15 - 2010-08-24 17:15 - 00111616 _____ () C:\Program Files\TortoiseHg\_ctypes.pyd

2011-02-26 11:45 - 2011-02-26 11:45 - 00042496 _____ () C:\Program Files\TortoiseHg\win32process.pyd

2011-08-01 18:57 - 2011-08-01 18:57 - 00011776 _____ () C:\Program Files\TortoiseHg\mercurial.bdiff.pyd

2011-08-01 18:57 - 2011-08-01 18:57 - 00010752 _____ () C:\Program Files\TortoiseHg\mercurial.mpatch.pyd

2010-08-24 17:14 - 2010-08-24 17:14 - 00045568 _____ () C:\Program Files\TortoiseHg\_socket.pyd

2010-08-24 17:15 - 2010-08-24 17:15 - 01166336 _____ () C:\Program Files\TortoiseHg\_ssl.pyd

2010-08-24 17:15 - 2010-08-24 17:15 - 00587776 _____ () C:\Program Files\TortoiseHg\unicodedata.pyd

2011-08-01 18:57 - 2011-08-01 18:57 - 00008704 _____ () C:\Program Files\TortoiseHg\mercurial.base85.pyd

2011-08-01 18:57 - 2011-08-01 18:57 - 00008704 _____ () C:\Program Files\TortoiseHg\mercurial.diffhelpers.pyd

2011-08-01 18:57 - 2011-08-01 18:57 - 00011776 _____ () C:\Program Files\TortoiseHg\mercurial.parsers.pyd

2010-08-24 17:21 - 2010-08-24 17:21 - 00470528 _____ () C:\Program Files\TortoiseHg\_hashlib.pyd

2010-08-24 17:22 - 2010-08-24 17:22 - 00010752 _____ () C:\Program Files\TortoiseHg\select.pyd

2011-02-26 11:48 - 2011-02-26 11:48 - 00491008 _____ () C:\Program Files\TortoiseHg\pythoncom26.dll

2011-02-26 11:52 - 2011-02-26 11:52 - 00355840 _____ () C:\Program Files\TortoiseHg\win32com.shell.shell.pyd

2011-06-23 01:08 - 2010-12-17 02:37 - 00094208 _____ () C:\windows\system32\IccLibDll_x64.dll

2013-12-18 20:55 - 2013-12-18 20:55 - 00100019 _____ () C:\Windows\Temp\jffi3409290837447516505.tmp

2011-06-22 10:38 - 2006-08-12 04:48 - 00049152 _____ () C:\Program Files (x86)\Samsung\Easy Display Manager\HookDllPS2.dll

2012-02-15 00:05 - 2012-02-15 00:37 - 11796096 _____ () C:\Users\sebast\AppData\Roaming\SanDisk\My Vaults\dmBackup.dll

2012-12-07 15:15 - 2012-12-07 15:15 - 02126264 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtCore4.dll

2012-12-07 15:15 - 2012-12-07 15:15 - 07422392 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtGui4.dll

2012-12-07 15:15 - 2012-12-07 15:15 - 02453944 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtDeclarative4.dll

2012-12-07 15:15 - 2012-12-07 15:15 - 01270200 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtScript4.dll

2012-12-07 15:15 - 2012-12-07 15:15 - 00192952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtSql4.dll

2012-12-07 15:15 - 2012-12-07 15:15 - 00795064 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtNetwork4.dll

2011-06-22 10:21 - 2010-07-05 11:42 - 00203776 _____ () C:\Program Files (x86)\Samsung\Movie Color Enhancer\WinCRT.dll

2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2011-06-22 10:36 - 2010-05-07 15:22 - 01636864 _____ () C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll

2009-11-02 06:20 - 2009-11-02 06:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll

2009-11-02 06:23 - 2009-11-02 06:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll

2013-12-12 18:48 - 2013-12-12 18:49 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2011-12-10 19:40 - 2011-12-10 19:40 - 00071352 _____ () C:\Program Files\TortoiseGit\bin\zlib132.dll

2011-12-10 19:40 - 2011-12-10 19:40 - 00199352 _____ () C:\Program Files\TortoiseGit\bin\libgit232.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/18/2013 08:55:54 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/18/2013 08:54:48 PM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/15/2013 11:27:45 PM) (Source: Windows Backup) (User: )

Description: Die Sicherung war nicht erfolgreich. Fehler: "Der Sicherungsspeicherort ist ungültig. Ein in die Sicherung einbezogenes Volume kann nicht als Speicherort verwendet werden. (0x80780040)"
 

Error: (12/15/2013 10:46:47 PM) (Source: CVHSVC) (User: )

Description: Nur zur Information.

(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:
 

Error: (12/12/2013 05:56:03 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 05:55:10 PM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/12/2013 05:52:34 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 05:51:36 PM) (Source: BstHdAndroidSvc) (User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/08/2013 08:08:05 PM) (Source: Windows Backup) (User: )

Description: Die Sicherung war nicht erfolgreich. Fehler: "Der Sicherungsspeicherort ist ungültig. Ein in die Sicherung einbezogenes Volume kann nicht als Speicherort verwendet werden. (0x80780040)"
 

Error: (12/07/2013 09:42:09 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/18/2013 09:36:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Mongo DB" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 
 

Microsoft Office Sessions:

=========================

Error: (12/18/2013 08:55:54 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/18/2013 08:54:48 PM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/15/2013 11:27:45 PM) (Source: Windows Backup)(User: )

Description: Der Sicherungsspeicherort ist ungültig. Ein in die Sicherung einbezogenes Volume kann nicht als Speicherort verwendet werden. (0x80780040)
 

Error: (12/15/2013 10:46:47 PM) (Source: CVHSVC)(User: )

Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed:
 

Error: (12/12/2013 05:56:03 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 05:55:10 PM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/12/2013 05:52:34 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 05:51:36 PM) (Source: BstHdAndroidSvc)(User: )

Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.

   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (12/08/2013 08:08:05 PM) (Source: Windows Backup)(User: )

Description: Der Sicherungsspeicherort ist ungültig. Ein in die Sicherung einbezogenes Volume kann nicht als Speicherort verwendet werden. (0x80780040)
 

Error: (12/07/2013 09:42:09 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 30%

Total physical RAM: 8104.19 MB

Available physical RAM: 5601.13 MB

Total Pagefile: 16206.56 MB

Available Pagefile: 13206.98 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:273 GB) (Free:99.44 GB) NTFS

Drive d: () (Fixed) (Total:402.6 GB) (Free:23.53 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 699 GB) (Disk ID: 524706CB)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=273 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=403 GB) - (Type=OF Extended)

Partition 4: (Not Active) - (Size=23 GB) - (Type=27)
 

==================== End Of Log ============================

Hi leo, oder aharonov?

Vielen Dank schonmal für die schnelle Hilfe. Habe alles gemacht und sehe schon die Verbesserung im Firefox :) Unten findest du die Logs.
Weißt du woher diese PLugins normalerweise kommen? Ich habe gestern nichts installiert und war auch nicht großartig im Internet unterwegs ...

Beste Grüße,
Sebastian

Code:

# AdwCleaner v3.015 - Bericht erstellt am 19/12/2013 um 21:03:51

# Updated 10/12/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : sebast - SEBAST-PC

# Gestartet von : C:\Users\sebast\Downloads\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Users\sebast\AppData\Local\Temp\AskSearch

Ordner Gelöscht : C:\Users\sebast\AppData\LocalLow\boost_interprocess

Ordner Gelöscht : C:\Users\sebast\AppData\Roaming\Common\LuaRT

Ordner Gelöscht : C:\Users\sebast\AppData\Roaming\DataMgr

Ordner Gelöscht : C:\Users\sebast\AppData\Roaming\Intermediate

Ordner Gelöscht : C:\Users\sebast\AppData\Roaming\SCheck

Ordner Gelöscht : C:\Users\sebast\AppData\Roaming\Snz

Ordner Gelöscht : C:\Users\sebast\AppData\Roaming\SSync

Ordner Gelöscht : C:\Users\sebast\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk

Datei Gelöscht : C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\om@offermosquito.com.xpi

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\sebast\AppData\Local\omesuperv.exe

Datei Gelöscht : C:\Users\sebast\AppData\Local\Temp\Uninstall.exe

Datei Gelöscht : C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\searchplugins\search.xml
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_avi-recomp_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_avi-recomp_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_camstudio_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdf24-creator_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdf24-creator_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\OfferMosquito

Schlüssel Gelöscht : HKCU\Software\Protector

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - 127.0.0.1:9421
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
 

-\\ Mozilla Firefox v26.0 (de)
 

[ Datei : C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://wisersearch.com/search.php?channel=de&q=");

Zeile gelöscht : user_pref("keyword.URL", "hxxp://wisersearch.com/search.php?channel=de&q=");

Zeile gelöscht : user_pref("simplenewtab.url", "hxxp://wisersearch.com/?channel=de_nt");
 

-\\ Google Chrome v32.0.1700.41
 

[ Datei : C:\Users\sebast\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht : homepage
 

*************************
 

AdwCleaner[R0].txt - [5360 octets] - [19/12/2013 21:01:44]

AdwCleaner[S0].txt - [4947 octets] - [19/12/2013 21:03:51]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5007 octets] ##########

[CODE]

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-12-2013

Ran by sebast (administrator) on SEBAST-PC on 19-12-2013 21:09:55

Running from C:\Users\sebast\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(CloudBees, Inc.) C:\Program Files (x86)\Jenkins\jenkins.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe

(Danga Interactive, Inc.) D:\server\memcached.exe

(Sun Microsystems, Inc.) C:\Program Files (x86)\Jenkins\jre\bin\java.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(Samsung Electronics) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe

(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe

(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe

(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Gemalto N.V.) C:\Users\sebast\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(hxxp://tortoisesvn.net) C:\Program Files (x86)\bin\TSVNCache.exe

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE

(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\SamsungFastStart\SmartRestarter.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe

(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2011-05-19] (Realtek Semiconductor)

HKLM\...\Run: [TortoiseHgOverlayIconServer] - C:\Program Files\TortoiseHg\TortoiseHgOverlayServer.exe [52688 2011-08-01] ()

HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE [2779024 2011-04-07] (CANON INC.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [Miranda Fusion] - C:\Program Files (x86)\MirandaFusion\fusiontools\mfstart.exe [1122241 2012-06-12] (Miranda Fusion Team)

HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\sebast\AppData\Local\Akamai\netsession_win.exe"

HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\sebast\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-03-28] (Gemalto N.V.)

HKCU\...\Run: [KSS] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)

MountPoints2: {0dfd43a3-0c3f-11e1-8fb0-961f9313a37f} - F:\unlock.exe autoplay=true

HKLM-x32\...\Run: [CanonSolutionMenuEx] - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1611160 2011-03-28] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()

HKLM-x32\...\Run: [THGuard] - C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe [1086880 2012-10-23] (Mischel Internet Security)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [226920 2011-05-04] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [192616 2011-05-04] (NVIDIA Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\31.0.1650.63\npchrome_frame.dll (Google Inc.)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File

Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\31.0.1650.63\npchrome_frame.dll (Google Inc.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 80.69.100.214 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default

FF Homepage: about:home

FF NetworkProxy: "autoconfig_url", "199.195.109.23"

FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, kdice.com"

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @canon.com/MycameraPlugin - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @sun.com/npsopluginmi;version=1.0 - C:\Program Files (x86)\OpenOffice.org 3\program ()

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\sebast\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: VWC Cocoon - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\firefox-support@vworldc.com

FF Extension: FoxyProxy Standard - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\foxyproxy@eric.h.jung

FF Extension: ProxTube - Unblock YouTube - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\ich@maltegoetz.de

FF Extension: FireShot - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}

FF Extension: Html Validator - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e}

FF Extension: ColorZilla - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}

FF Extension: Live HTTP Headers - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}

FF Extension: Page Speed - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}

FF Extension: Firebug - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\firebug@software.joehewitt.com.xpi

FF Extension: Ghostery - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\firefox@ghostery.com.xpi

FF Extension: Wiktionary and Google Translate - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\googledictionary@toptip.ca.xpi

FF Extension: Grooveshark Unlocker - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\groovesharkUnlocker@overlord1337.xpi

FF Extension: ipFuck - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\ipfuck@p4ul.info.xpi

FF Extension: Self-Destructing Cookies - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi

FF Extension: Dict.cc Translation - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\searchdictcc@roughael.xpi

FF Extension: Simple New Tab - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\snt@dotlabs.co.xpi

FF Extension: Text to Voice - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\text2voice@vik.josh.xpi

FF Extension: YSlow - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\yslow@yahoo-inc.com.xpi

FF Extension: Tamper Data - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi

FF Extension: Adblock Plus - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: BetterPrivacy - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi

FF Extension: Greasemonkey - C:\Users\sebast\AppData\Roaming\Mozilla\Firefox\Profiles\dc9m9j8z.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR Extension: (Word CaptureX Extension) - C:\Users\sebast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0

CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\sebast\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0

CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\Deskperience\Word Capture\wcxChrome.crx
 

==================== Services (Whitelisted) =================
 

S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [246256 2010-08-25] (CyberLink)

R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8998800 2013-05-09] (DisplayLink Corp.)

R2 Jenkins; C:\Program Files (x86)\Jenkins\jenkins.exe [36584 2012-08-08] (CloudBees, Inc.)

R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)

S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.)

R2 memcached Server; D:\server\memcached.exe [86016 2008-09-24] (Danga Interactive, Inc.)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()

S3 wampapache; C:\Program Files\wamp\bin\apache\apache2.2.17\bin\httpd.exe [20549 2010-12-31] (Apache Software Foundation)

S3 wampmysqld; C:\Program Files\wamp\bin\mysql\mysql5.5.8\bin\mysqld.exe [8133120 2010-12-31] ()

S2 MongoDB; "C:\Program Files (x86)\MongoDb\bin\mongod" --logpath  "d:\server\mongo\logs"  --logappend  --dbpath  "d:\server\mongo\data"  --directoryperdb  --service  
 

==================== Drivers (Whitelisted) ====================
 

S3 DisplayLinkUsbIo_x64; C:\Windows\System32\DRIVERS\DisplayLinkUsbIo_x64_7.2.47873.0.sys [44944 2013-05-13] ()

S3 NSNDIS5; C:\windows\SysWow64\NSNDIS5.SYS [17280 2004-03-24] (Printing Communications Assoc., Inc. (PCAUSA))

S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-07-13] (Windows (R) 2003 DDK 3790 provider)

U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-19 21:09 - 2013-12-19 21:09 - 00000000 ____D C:\Users\sebast\Downloads\FRST-OlderVersion

2013-12-19 21:01 - 2013-12-19 21:03 - 00000000 ____D C:\AdwCleaner

2013-12-19 21:00 - 2013-12-19 21:00 - 01226750 _____ C:\Users\sebast\Downloads\adwcleaner.exe

2013-12-18 23:39 - 2013-12-18 23:39 - 00033364 _____ C:\Users\sebast\Downloads\Addition.txt

2013-12-18 23:37 - 2013-12-19 21:09 - 00017858 _____ C:\Users\sebast\Downloads\FRST.txt

2013-12-18 23:37 - 2013-12-19 21:09 - 00000000 ____D C:\FRST

2013-12-18 23:35 - 2013-12-19 21:09 - 02192581 _____ (Farbar) C:\Users\sebast\Downloads\FRST64.exe

2013-12-12 18:48 - 2013-12-12 18:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-12 18:20 - 2013-12-12 18:20 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-12-11 18:48 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll

2013-12-11 18:48 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL

2013-12-11 18:48 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL

2013-12-11 18:48 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll

2013-12-11 18:46 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-12-11 18:46 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2013-12-11 18:46 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2013-12-11 18:46 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2013-12-11 18:46 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2013-12-11 18:46 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2013-12-11 18:46 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-12-11 18:46 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-12-11 18:46 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2013-12-11 18:46 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2013-12-11 18:46 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-12-11 18:46 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2013-12-11 18:46 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2013-12-11 18:46 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2013-12-11 18:46 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2013-12-11 18:46 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2013-12-11 18:46 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2013-12-11 18:46 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-12-11 18:46 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2013-12-11 18:46 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll

2013-12-11 18:46 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2013-12-11 18:46 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2013-12-11 18:46 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2013-12-11 18:46 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2013-12-11 18:46 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2013-12-11 18:46 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-12-11 18:46 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-12-11 18:46 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2013-12-11 18:46 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2013-12-11 18:46 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2013-12-11 18:46 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2013-12-11 18:12 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll

2013-12-11 18:12 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

2013-12-11 18:12 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll

2013-12-11 18:12 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll

2013-12-11 18:12 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll

2013-12-11 18:12 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll

2013-12-11 18:12 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2013-12-11 18:12 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll

2013-12-11 18:12 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll

2013-12-11 18:12 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx

2013-12-11 18:12 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll

2013-12-11 18:12 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx

2013-12-11 18:12 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll

2013-12-11 18:12 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe

2013-12-11 18:12 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe

2013-12-11 18:12 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe

2013-12-11 18:12 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe

2013-12-11 18:12 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys

2013-12-11 18:12 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys

2013-12-10 21:38 - 2013-12-10 21:38 - 09293192 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe

2013-12-04 19:27 - 2013-12-04 19:27 - 00000948 _____ C:\Users\sebast\Desktop\einkaufsliste_wildschwein.txt

2013-12-04 19:02 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\windows\system32\IEUDINIT.EXE

2013-12-04 18:58 - 2013-12-04 18:58 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe

2013-12-04 18:57 - 2013-12-04 19:03 - 00010277 _____ C:\windows\IE11_main.log

2013-11-19 18:34 - 2013-11-20 19:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
 

==================== One Month Modified Files and Folders =======
 

2013-12-19 21:10 - 2013-12-18 23:37 - 00017858 _____ C:\Users\sebast\Downloads\FRST.txt

2013-12-19 21:09 - 2013-12-19 21:09 - 00000000 ____D C:\Users\sebast\Downloads\FRST-OlderVersion

2013-12-19 21:09 - 2013-12-18 23:37 - 00000000 ____D C:\FRST

2013-12-19 21:09 - 2013-12-18 23:35 - 02192581 _____ (Farbar) C:\Users\sebast\Downloads\FRST64.exe

2013-12-19 21:08 - 2012-08-16 20:03 - 00000000 ____D C:\Program Files (x86)\Jenkins

2013-12-19 21:07 - 2011-08-12 11:58 - 00000000 ____D C:\Users\sebast\AppData\Roaming\TortoiseHg

2013-12-19 21:05 - 2011-08-14 09:28 - 00001106 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-19 21:05 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT

2013-12-19 21:05 - 2009-07-14 05:51 - 00109797 _____ C:\windows\setupact.log

2013-12-19 21:04 - 2011-06-23 02:02 - 01260681 _____ C:\windows\WindowsUpdate.log

2013-12-19 21:03 - 2013-12-19 21:01 - 00000000 ____D C:\AdwCleaner

2013-12-19 21:00 - 2013-12-19 21:00 - 01226750 _____ C:\Users\sebast\Downloads\adwcleaner.exe

2013-12-19 21:00 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries

2013-12-19 20:58 - 2012-03-03 19:19 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic

2013-12-19 20:58 - 2011-08-17 19:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Games

2013-12-19 20:56 - 2011-08-14 09:28 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-19 20:55 - 2012-04-10 18:02 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2013-12-18 23:39 - 2013-12-18 23:39 - 00033364 _____ C:\Users\sebast\Downloads\Addition.txt

2013-12-18 21:02 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-18 21:02 - 2009-07-14 05:45 - 00020992 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-18 20:53 - 2012-05-15 19:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-17 23:57 - 2013-07-23 22:07 - 00000000 ____D C:\windows\system32\MRT

2013-12-17 23:53 - 2011-08-26 20:31 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2013-12-12 18:49 - 2013-12-12 18:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-12 18:20 - 2013-12-12 18:20 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk

2013-12-12 18:20 - 2011-08-14 09:28 - 00000000 ____D C:\Program Files (x86)\Google

2013-12-12 18:00 - 2011-06-23 01:27 - 00654852 _____ C:\windows\system32\perfh007.dat

2013-12-12 18:00 - 2011-06-23 01:27 - 00130434 _____ C:\windows\system32\perfc007.dat

2013-12-12 18:00 - 2009-07-14 06:13 - 01500294 _____ C:\windows\system32\PerfStringBackup.INI

2013-12-12 17:56 - 2009-07-14 06:09 - 00000000 ____D C:\windows\System32\Tasks\WPD

2013-12-12 17:54 - 2009-07-14 05:45 - 00320048 _____ C:\windows\system32\FNTCACHE.DAT

2013-12-11 18:45 - 2012-01-28 19:55 - 00000000 ____D C:\Users\sebast\AppData\Local\TGitCache

2013-12-11 18:45 - 2011-08-26 20:23 - 00000000 ____D C:\Users\sebast\AppData\Roaming\SoftGrid Client

2013-12-11 18:12 - 2011-08-14 09:28 - 00004106 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-12-11 18:12 - 2011-08-14 09:28 - 00003854 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-12-10 21:38 - 2013-12-10 21:38 - 09293192 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe

2013-12-10 21:38 - 2012-04-10 18:02 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe

2013-12-10 21:38 - 2012-04-10 18:02 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater

2013-12-10 21:38 - 2011-08-12 17:42 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-07 21:41 - 2011-08-12 10:56 - 00000000 ____D C:\Users\sebast\AppData\Local\TSVNCache

2013-12-07 21:41 - 2009-07-14 06:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT

2013-12-06 18:01 - 2011-08-12 09:30 - 00001421 _____ C:\Users\sebast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-06 08:20 - 2009-07-14 04:20 - 00000000 ____D C:\windows\PolicyDefinitions

2013-12-05 00:07 - 2011-11-18 16:17 - 00000000 ____D C:\Users\sebast\.gimp-2.6

2013-12-04 19:27 - 2013-12-04 19:27 - 00000948 _____ C:\Users\sebast\Desktop\einkaufsliste_wildschwein.txt

2013-12-04 19:03 - 2013-12-04 18:57 - 00010277 _____ C:\windows\IE11_main.log

2013-12-04 18:58 - 2013-12-04 18:58 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat

2013-12-04 18:58 - 2013-12-04 18:58 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec

2013-12-04 18:58 - 2013-12-04 18:58 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx

2013-12-04 18:58 - 2013-12-04 18:58 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll

2013-12-04 18:58 - 2013-12-04 18:58 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe

2013-12-04 18:58 - 2013-12-04 18:58 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe

2013-12-03 20:50 - 2013-03-31 17:31 - 00000000 ____D C:\Users\sebast\AppData\Local\posterXXL.de Bestellsoftware

2013-12-01 21:33 - 2011-08-12 12:39 - 00000000 ____D C:\Users\sebast\AppData\Local\CrashDumps

2013-11-26 12:54 - 2013-12-11 18:46 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-11 18:46 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-11 18:46 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-11 18:46 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-11 18:46 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-11 18:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-11 18:46 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-11 18:46 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-11 18:46 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-11 18:46 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-11 18:46 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-11 18:46 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-11 18:46 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-11 18:46 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-11 18:46 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-11 18:46 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-11 18:46 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-11 18:46 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-11 18:46 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-11 18:46 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-11 18:46 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-11 18:46 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-11 18:46 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-11 18:46 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-11 18:46 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-11 18:46 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-11-26 07:40 - 2013-12-11 18:46 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-11 18:46 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-11 18:46 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-11 18:46 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-11 18:46 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2013-11-24 21:38 - 2013-11-07 19:12 - 00000000 ____D C:\Users\sebast\AppData\Roaming\MultiBit

2013-11-24 10:47 - 2010-11-21 04:47 - 00530832 _____ C:\windows\PFRO.log

2013-11-23 19:26 - 2013-12-11 18:12 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 18:12 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

2013-11-23 12:53 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache

2013-11-22 23:17 - 2012-10-15 19:02 - 00000000 ____D C:\Users\sebast\Desktop\brettspiel

2013-11-20 19:03 - 2013-11-19 18:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2013-11-19 03:33 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
 

Some content of TEMP:

====================

C:\Users\sebast\AppData\Local\Temp\9IlwQp7T.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\AskSLib.dll

C:\Users\sebast\AppData\Local\Temp\COMAP.EXE

C:\Users\sebast\AppData\Local\Temp\dHveNM.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\DivXSetup.exe

C:\Users\sebast\AppData\Local\Temp\drm_dialogs.dll

C:\Users\sebast\AppData\Local\Temp\drm_dyndata_7330014.dll

C:\Users\sebast\AppData\Local\Temp\i4jd1650756124982940720.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel0.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel1.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel10.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel11.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel12.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel13.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel14.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel15.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel16.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel17.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel18.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel19.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel2.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel20.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel21.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel22.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel23.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel24.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel25.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel26.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel27.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel28.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel29.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel3.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel30.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel31.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel32.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel33.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel34.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel35.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel36.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel37.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel38.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel39.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel4.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel40.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel41.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel42.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel43.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel44.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel45.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel46.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel47.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel48.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel49.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel5.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel6.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel7.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel8.exe

C:\Users\sebast\AppData\Local\Temp\i4jdel9.exe

C:\Users\sebast\AppData\Local\Temp\jansi-64-1.9.dll

C:\Users\sebast\AppData\Local\Temp\jna1965974385895275069.dll

C:\Users\sebast\AppData\Local\Temp\jna2917729154468339943.dll

C:\Users\sebast\AppData\Local\Temp\jna3893844829801886916.dll

C:\Users\sebast\AppData\Local\Temp\jna5033372025507777895.dll

C:\Users\sebast\AppData\Local\Temp\jre-7u2-windows-i586-iftw.exe

C:\Users\sebast\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe

C:\Users\sebast\AppData\Local\Temp\MSETUP4.EXE

C:\Users\sebast\AppData\Local\Temp\muHXkz.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\O3idD.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\pdf24-creator-update.exe

C:\Users\sebast\AppData\Local\Temp\proxy_util_ia64.dll

C:\Users\sebast\AppData\Local\Temp\qMXd.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\Quarantine.exe

C:\Users\sebast\AppData\Local\Temp\restarter3052782909741045167.exe

C:\Users\sebast\AppData\Local\Temp\restarter3290417190738810666.exe

C:\Users\sebast\AppData\Local\Temp\restarter3727799878567880566.exe

C:\Users\sebast\AppData\Local\Temp\restarter4292971627753220705.exe

C:\Users\sebast\AppData\Local\Temp\restarter728052776811063486.exe

C:\Users\sebast\AppData\Local\Temp\setup.exe

C:\Users\sebast\AppData\Local\Temp\Shockwave_Installer_FF.exe

C:\Users\sebast\AppData\Local\Temp\SkypeSetup.exe

C:\Users\sebast\AppData\Local\Temp\vistalauncher3529440184516386002.exe

C:\Users\sebast\AppData\Local\Temp\vistalauncher4267906922042466095.exe

C:\Users\sebast\AppData\Local\Temp\xmlUpdater.exe

C:\Users\sebast\AppData\Local\Temp\ZdI9H.jnidispatch.dll

C:\Users\sebast\AppData\Local\Temp\_isD1A.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-05 19:40
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---