Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Laptop fährt nach Windows Update nicht mehr hoch (https://www.trojaner-board.de/168831-laptop-faehrt-windows-update-mehr-hoch.html)

Wackelino 19.07.2015 17:30
Laptop fährt nach Windows Update nicht mehr hoch
 
Habe heute 13 updaten installiert. Seitdem fährt der Rechner nicht mehr hoch. Stoppt beim Bild "Windows wird gestartet ". Kann dann der Rechner reparieren lassen, aber es ändert sich nichts. Sprich mit Starthilfe starten lassen. Eine bootdvd habe ich anscheinend nicht mehr. Unter Details erscheinen diverse Signatur Probleme , im abgesicherten Modus startet er auch nicht


Wer kann mir helfen?

schrauber 19.07.2015 18:36
hi,

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)
Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
  • Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST Download FRST 32-Bit | FRST 64-Bit
  • Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.
  • Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:
Über den Boot Manager:
  • Starte den Rechner neu.
  • Während dem Hochfahren drücke mehrmals die F8 Taste
  • Wähle nun Computer reparieren.
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Mit Windows CD/DVD (auch bei Windows 8 möglich):
  • Lege die Windows CD in dein Laufwerk.
  • Starte den Rechner neu und starte von der CD.
  • Wähle die Spracheinstellungen und klicke "Weiter".
  • Klicke auf Computerreparaturoptionen !
  • Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".
Wähle in den Reparaturoptionen: Eingabeaufforderung
  • Gib nun bitte notepad ein und drücke Enter.
  • Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
    Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.
  • Schließe Notepad wieder
  • Gib nun bitte folgenden Befehl ein.
    e:\frst.exe bzw. e:\frst64.exe
    Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.
  • Akzeptiere den Disclaimer mit Ja und klicke Untersuchen
Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).


Wackelino 19.07.2015 19:50
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-07-2015 01
Ran by SYSTEM on MININT-J5749VR on 19-07-2015 20:41:53
Running from H:\
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9644576 2009-12-14] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2149160 2010-05-20] (Synaptics Incorporated)
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePDRShortCut] => C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-03] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl8] => C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD8LanguageShortcut] => C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-14] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\TV\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2015-03-18] (Microsoft Corporation)
HKU\TV\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\TV\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
Startup: C:\Users\TV\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-01-12]
ShortcutTarget: Dropbox.lnk ->  (No File)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-17] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-17] (Malwarebytes Corporation)
S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-05-28] (Kaspersky Lab ZAO)
S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-05-28] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
S1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
S1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
S1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-17] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-19] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-06-17] (Malwarebytes Corporation)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-06-07] (Windows (R) 2003 DDK 3790 provider)
S3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys FA886682CFC5D36718D3E436AACF10B9
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Windows\system32\drivers\appid.sys 90C53BD47979FB8814F465A08B885102
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\athrx.sys 7D89B0C443F6068E5B27AA3B972069FF
C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bridge.sys 5C2F352A4E961D72518261257AAE204B
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys 404B7DF9CA4D1CB675045AF220FF3285
C:\Windows\System32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys 27667A788130A7F7A5858DE27572E6D7
C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ssudbus.sys E428DFFA96FAD07D8CA3C9082563A225
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys 87CE5C8965E101CCCED1F4675557E868
C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\GEARAspiWDM.sys 8E98D21EE06192492A5671A6144D092F
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\htcnprot.sys B8B1B284362E1D8135112573395D5DA5
C:\Windows\System32\drivers\HTTP.sys F61634BEC53F73702A10DE69F6DCAF57
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\iaStor.sys A5F72BB0D024E7E463344105BE613AE4
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\System32\DRIVERS\igdkmd64.sys 677AA5991026A65ADA128C4B59CF2BAD
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Impcd.sys DD587A55390ED2295BCE6D36AD567DA9
C:\Windows\System32\drivers\RTKVHD64.sys 801946CE25DD2179FE68599826B0BB88
C:\Windows\System32\DRIVERS\IntcDAud.sys C6C1F19205DA83C801BE7C25F4E2EE07
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys 96BB922A0981BC7432C8CF52B5410FE6
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kl1.sys 795EC29BA21F1D948FD6FD740C00B599
C:\Windows\System32\DRIVERS\klflt.sys D0C3AEF67932D2A80736FBCB956C017D
C:\Windows\System32\DRIVERS\klif.sys 41DF293A7F0418F5DDED9F0297DC68F3
C:\Windows\System32\DRIVERS\klim6.sys 31B69BFF28348503E4BD10C2A4F66D05
C:\Windows\System32\DRIVERS\klkbdflt.sys 8DA5BC75C3E8A995335642F26CAEA54B
C:\Windows\System32\DRIVERS\klmouflt.sys 72CF64FBF38CD681FA7F37176047E967
C:\Windows\System32\DRIVERS\klpd.sys 8C0EC95AD65A0DE3D6C040591D02BF02
C:\Windows\System32\DRIVERS\kltdi.sys 4828B3D2BC89B05E07101C6E60CE0A6A
C:\Windows\System32\DRIVERS\kneps.sys 91BC1C5B00275A4D7FD669EFF0DDEB2A
C:\Windows\System32\Drivers\ksecdd.sys C0A6C3D6E02B61B5D100FE17306C276F
C:\Windows\System32\Drivers\ksecpkg.sys 7A7328E427694CC7244235C3BC299F80
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\windows\system32\drivers\mbam.sys A8D28D5B3E2A528D1EF0E338E44F2820
C:\windows\system32\drivers\MBAMSwissArmy.sys 8F22037D3F5A6BB676525D825A1388B9
C:\windows\system32\drivers\mwac.sys AE757332EA130E94E646621CC695B52A
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys 87BCD1034CBF33537D4D4C251D39BA26
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys AE3334958D8F631FF14A0AEB3D7EFB3A
C:\Windows\System32\DRIVERS\mrxsmb.sys 1877EB1495CFBDAB27D6A32F6DDF3818
C:\Windows\System32\DRIVERS\mrxsmb10.sys 21AF322605D8C7F2A627C22634D1C9C9
C:\Windows\System32\DRIVERS\mrxsmb20.sys 45A03A0B6461EFBEE77E0A6AC2816EDA
C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys 1A29A59A4C5BA6F8C85062A613B7E2B2
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\drivers\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ED6E75158D28D33A2E2A020AC5B2B59D
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\drivers\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
C:\Windows\System32\Drivers\RDPWD.sys FE571E088C2D83619D2D48D4E961BF41
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Rt64win7.sys BAEFEE35D27A5440D35092CE10267BEC
C:\windows\SysWOW64\drivers\rtport.sys 4CA0DBA9E224473D664C25E411F5A3BD
C:\windows\system32\Drivers\SABI.sys 62DB6CC4B0818F1B5F3441241B098F12
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\serenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\System32\DRIVERS\ssudmdm.sys AAF6F247F1DC370C593B4430974EAD9C
C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\SynTP.sys 14FEB5052837D9277520088DCE549036
C:\Windows\System32\drivers\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\DRIVERS\tcpip.sys 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys 70988118145F5F10EF24720B97F35F65
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys E232A3B43A894BB327FC161529BD9ED1
C:\Windows\System32\drivers\tsusbflt.sys 17C6B51CBCCDED95B3CC14E22791F85E
C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
C:\Windows\System32\Drivers\usbaapl64.sys 5C3BE22E485B9BF11FCEFDC676C728D0
C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\system32\drivers\usbehci.sys 18A85013A3E0F7E1755365D287443965
C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
C:\Windows\system32\drivers\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbscan.sys 9661DA76B4531B2DA272ECCE25A8AF24
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3
C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7
C:\Windows\system32\drivers\usb8023x.sys 7B28E2FBE75115660FAB31079C0A9F29
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys 13A0DECD1794DE60A8427862C8669D27
C:\Windows\System32\DRIVERS\vwifimp.sys 49003B357D101CDC474937437ECF5ABC
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\system32\drivers\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\system32\drivers\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
C:\Windows\System32\DRIVERS\yk62x64.sys ==> MD5 is legit

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Three Months Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-19 17:44 - 2010-11-20 19:25 - 00606208 ____C (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2015-07-19 17:44 - 2010-11-20 19:24 - 01026560 ____C (Microsoft Corporation) C:\Windows\System32\mstime.dll
2015-07-19 17:44 - 2010-11-09 09:54 - 00049016 ____C (Microsoft Corporation) C:\Windows\SysWOW64\sirenacm.dll
2015-07-19 17:44 - 2009-07-13 17:40 - 00022016 ____C (Microsoft Corporation) C:\Windows\System32\corpol.dll
2015-07-19 17:44 - 2009-07-13 17:15 - 00018432 ____C (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll
2015-07-19 17:44 - 2009-06-17 17:15 - 00307400 ____C (McAfee, Inc.) C:\Windows\System32\Drivers\mfehidk.sys
2015-07-19 17:44 - 2009-06-17 17:15 - 00102600 ____C (McAfee, Inc.) C:\Windows\System32\Drivers\mfeavfk.sys
2015-07-19 17:44 - 2009-06-17 17:15 - 00049480 ____C (McAfee, Inc.) C:\Windows\System32\Drivers\mfesmfk.sys
2015-07-19 17:44 - 2009-06-17 17:08 - 00040904 ____C (McAfee, Inc.) C:\Windows\System32\Drivers\mferkdk.sys
2015-07-19 17:44 - 2009-06-10 12:45 - 00000003 ____C C:\Windows\System32\Drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf
2015-07-19 17:44 - 2009-04-08 21:23 - 00176144 ____C (McAfee, Inc.) C:\Windows\System32\Drivers\Mpfp.sys
2015-07-19 06:37 - 2015-07-19 06:37 - 00003608 ____N C:\bootsqm.dat
2015-07-19 06:36 - 2015-07-19 06:36 - 00000000 __SHD C:\found.001
2015-07-19 00:54 - 2015-07-19 00:54 - 04184064 ____C (BrightFort LLC ) C:\Users\TV\Downloads\spywareblastersetup52.exe
2015-07-18 22:48 - 2015-07-19 01:34 - 00254976 _____ (Microsoft Corporation) C:\Windows\System32\cewmdm.dll
2015-07-18 22:48 - 2015-07-19 01:34 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-18 22:48 - 2015-07-19 01:31 - 03180544 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2015-07-18 22:48 - 2015-07-19 01:31 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\RdpGroupPolicyExtension.dll
2015-07-18 22:48 - 2015-07-19 01:26 - 02087424 _____ (Microsoft Corporation) C:\Windows\System32\ole32.dll
2015-07-18 22:48 - 2015-07-19 01:26 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 01145856 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 01085440 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 00765440 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 00726528 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 00433664 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 00227328 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 00067584 _____ (Microsoft Corporation) C:\Windows\System32\acmigration.dll
2015-07-18 22:48 - 2015-07-19 01:08 - 00017856 _____ (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
2015-07-18 22:47 - 2015-07-19 01:18 - 03242496 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 01941504 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 00504320 _____ (Microsoft Corporation) C:\Windows\System32\msihnd.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 00128000 _____ (Microsoft Corporation) C:\Windows\System32\msiexec.exe
2015-07-18 22:47 - 2015-07-19 01:18 - 00112064 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2015-07-18 22:47 - 2015-07-19 01:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-18 22:47 - 2015-07-19 01:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-18 22:47 - 2015-07-19 01:18 - 00025088 _____ (Microsoft Corporation) C:\Windows\System32\msimsg.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 02343936 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 02158080 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 01804288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 01494016 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2015-07-18 22:44 - 2015-07-19 01:10 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-18 22:44 - 2015-07-19 01:10 - 01387520 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00816640 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00718336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00599040 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00453120 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00448512 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2015-07-18 22:44 - 2015-07-19 01:10 - 00421888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-18 22:44 - 2015-07-19 01:10 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00282112 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00248320 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00237056 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00173056 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2015-07-18 22:44 - 2015-07-19 01:10 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-18 22:44 - 2015-07-19 01:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00085504 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00055296 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2015-07-18 22:44 - 2015-07-19 01:10 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-07-18 22:44 - 2015-07-19 01:10 - 00000000 _____ C:\Windows\System32\wininet.dll
2015-07-18 22:44 - 2015-07-19 01:10 - 00000000 _____ C:\Windows\System32\ieframe.dll
2015-07-18 22:43 - 2015-07-19 01:14 - 17887744 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2015-07-18 22:43 - 2015-07-19 01:14 - 12386304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-18 22:43 - 2015-07-19 01:14 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-18 22:43 - 2015-07-19 01:14 - 02382848 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2015-07-18 22:43 - 2015-07-19 01:10 - 09750528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-18 22:43 - 2015-07-19 01:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2015-07-18 22:43 - 2015-07-19 01:10 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-07-18 22:41 - 2015-07-19 01:33 - 03154944 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 02603008 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00696320 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00192000 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00139776 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2015-07-18 22:41 - 2015-07-19 01:33 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00091136 _____ (Microsoft Corporation) C:\Windows\System32\WinSetupUI.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00037888 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00037376 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2015-07-18 22:41 - 2015-07-19 01:33 - 00036864 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-18 22:41 - 2015-07-19 01:33 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-18 22:41 - 2015-07-19 01:33 - 00012288 _____ (Microsoft Corporation) C:\Windows\System32\wu.upgrade.ps.dll
2015-07-18 22:40 - 2015-07-19 01:29 - 03207168 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2015-07-18 22:40 - 2015-07-19 01:28 - 00404992 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2015-07-18 22:40 - 2015-07-19 01:28 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 01480192 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 00229376 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 00188416 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2015-07-18 22:33 - 2015-07-19 01:25 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 01216512 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00729088 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00342016 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00315392 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00290816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2015-07-18 22:30 - 2015-07-19 01:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00159232 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2015-07-18 22:30 - 2015-07-19 01:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2015-07-18 22:30 - 2015-07-19 01:23 - 00129024 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2015-07-18 22:30 - 2015-07-19 01:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2015-07-18 22:30 - 2015-07-19 01:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00044032 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2015-07-18 22:30 - 2015-07-19 01:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00686080 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2015-07-18 22:29 - 2015-07-19 01:23 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-18 22:29 - 2015-07-19 01:23 - 00031232 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2015-07-18 22:29 - 2015-07-19 01:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2015-07-18 22:29 - 2015-07-19 01:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-18 21:24 - 2015-07-18 21:24 - 01187008 ____C (Adobe Systems Incorporated) C:\Users\TV\Downloads\flashplayer18_ha_install.exe
2015-07-06 07:57 - 2015-07-19 00:02 - 00000280 ____C C:\Windows\setupact.log
2015-07-06 07:57 - 2015-07-06 07:57 - 00000368 ____C C:\Windows\PFRO.log
2015-07-06 07:57 - 2015-07-06 07:57 - 00000000 ____C C:\Windows\setuperr.log
2015-07-04 22:55 - 2015-07-04 22:46 - 04197016 ____C (Kaspersky Lab ZAO) C:\Users\TV\Desktop\tdsskiller.exe
2015-07-04 22:36 - 2015-07-04 22:36 - 00036320 ____C C:\Users\TV\Documents\cc_20150705_083642.reg
2015-06-27 22:14 - 2015-07-04 22:25 - 00000000 ___DC C:\Program Files (x86)\Mozilla Firefox
2015-06-26 07:35 - 2015-06-26 23:16 - 00136408 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\594D652C.sys
2015-06-19 23:05 - 2015-07-19 01:10 - 00001212 ____C C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1473346268-2668242606-3040593410-1000UA.job
2015-06-19 23:05 - 2015-07-18 23:10 - 00001160 ____C C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1473346268-2668242606-3040593410-1000Core.job
2015-06-19 23:05 - 2015-06-19 23:05 - 00004176 ____C C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1473346268-2668242606-3040593410-1000UA
2015-06-19 23:05 - 2015-06-19 23:05 - 00003780 ____C C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1473346268-2668242606-3040593410-1000Core
2015-06-19 23:05 - 2015-06-19 23:05 - 00000000 ___DC C:\Users\TV\AppData\Local\Dropbox
2015-06-19 23:05 - 2015-06-19 23:05 - 00000000 ___DC C:\ProgramData\Dropbox
2015-06-12 22:35 - 2015-06-15 08:42 - 00136408 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\2EB35080.sys
2015-06-11 10:41 - 2015-06-11 15:11 - 14635008 _____ (Microsoft Corporation) C:\Windows\System32\wmp.dll
2015-06-11 10:41 - 2015-06-11 15:11 - 12625920 _____ (Microsoft Corporation) C:\Windows\System32\wmploc.DLL
2015-06-11 10:41 - 2015-06-11 15:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-11 10:41 - 2015-06-11 15:11 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-11 10:41 - 2015-06-11 15:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\System32\spwmp.dll
2015-06-11 10:41 - 2015-06-11 15:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-11 10:41 - 2015-06-11 15:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\msdxm.ocx
2015-06-11 10:41 - 2015-06-11 15:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\System32\dxmasf.dll
2015-06-11 10:41 - 2015-06-11 15:11 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-11 10:41 - 2015-06-11 15:11 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-11 10:40 - 2015-06-11 15:06 - 00193536 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 05569984 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 01728960 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 01255424 _____ (Microsoft Corporation) C:\Windows\System32\diagtrack.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 01162752 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00879104 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00879104 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00424960 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00404992 _____ (Microsoft Corporation) C:\Windows\System32\tracerpt.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00113664 _____ (Microsoft Corporation) C:\Windows\System32\sechost.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00104448 _____ (Microsoft Corporation) C:\Windows\System32\logman.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\System32\typeperf.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\relog.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00036864 _____ (Microsoft Corporation) C:\Windows\System32\UtcResources.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00019456 _____ (Microsoft Corporation) C:\Windows\System32\diskperf.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-11 10:40 - 2015-06-11 15:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2015-06-11 10:40 - 2015-06-11 15:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-11 10:40 - 2015-06-11 14:34 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll
2015-06-11 10:40 - 2015-06-11 14:34 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-11 10:39 - 2015-06-11 12:42 - 00069888 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\stream.sys
2015-06-08 23:22 - 2015-06-08 23:22 - 00136408 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\227E3BF0.sys
2015-05-22 22:36 - 2015-05-23 22:54 - 00136408 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\742667F6.sys
2015-05-20 00:35 - 2015-05-20 00:35 - 00136408 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\7A4258D2.sys
2015-05-19 06:43 - 2015-05-19 04:33 - 02720196 ____C (Thisisu) C:\Users\TV\Desktop\JRT_NEW.exe
2015-05-19 06:39 - 2015-05-19 06:39 - 02720307 ____C (Thisisu) C:\Users\TV\Desktop\JRT_6.7.0.exe
2015-05-18 00:01 - 2015-05-18 00:01 - 00000000 __SHD C:\found.000
2015-05-14 23:11 - 2015-05-14 23:11 - 00136408 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\330C1208.sys
2015-05-14 23:11 - 2015-05-14 23:11 - 00136408 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\155011CA.sys
2015-05-14 23:10 - 2015-05-14 23:10 - 00129752 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\33F21137.sys
2015-05-14 04:40 - 2015-06-06 22:02 - 00040960 ____C C:\Users\TV\Documents\tv.db3
2015-05-14 04:40 - 2015-06-06 22:02 - 00000000 ___DC C:\Users\TV\AppData\Roaming\AckiSoft
2015-05-14 04:38 - 2015-05-14 04:38 - 00001176 ____C C:\Users\Public\Desktop\FinanzmanagerV8.lnk
2015-05-14 04:38 - 2015-05-14 04:38 - 00000000 ___DC C:\Program Files (x86)\AckiSoft
2015-05-14 00:46 - 2015-05-14 05:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\System32\apphelp.dll
2015-05-14 00:46 - 2015-05-14 05:50 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-14 00:46 - 2015-05-14 05:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\System32\aelupsvc.dll
2015-05-14 00:46 - 2015-05-14 05:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\System32\sdbinst.exe
2015-05-14 00:46 - 2015-05-14 05:50 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-14 00:46 - 2015-05-14 05:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\shimeng.dll
2015-05-14 00:46 - 2015-05-14 05:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-13 13:34 - 2015-05-13 13:36 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 13:34 - 2015-05-13 13:36 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 06:50 - 2015-05-13 06:50 - 00129752 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\7E6554D7.sys
2015-05-13 06:50 - 2015-05-13 06:50 - 00129752 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\4A325504.sys
2015-05-13 06:34 - 2015-05-13 17:08 - 00460800 _____ (Microsoft Corporation) C:\Windows\System32\certcli.dll
2015-05-13 06:34 - 2015-05-13 17:08 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 06:34 - 2015-05-13 17:07 - 00328704 _____ (Microsoft Corporation) C:\Windows\System32\services.exe
2015-05-13 06:34 - 2015-05-13 16:36 - 01647104 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2015-05-13 06:34 - 2015-05-13 16:36 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 06:34 - 2015-05-13 16:36 - 01179136 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2015-05-13 06:34 - 2015-05-13 14:44 - 02543104 _____ (Microsoft Corporation) C:\Windows\System32\wpdshext.dll
2015-05-13 06:34 - 2015-05-13 14:44 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-13 06:31 - 2015-05-13 16:16 - 00275456 _____ (Microsoft Corporation) C:\Windows\System32\InkEd.dll
2015-05-13 06:31 - 2015-05-13 16:16 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-13 06:31 - 2015-05-13 16:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\System32\jnwmon.dll
2015-05-13 06:23 - 2015-05-13 14:22 - 00142336 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2015-05-13 06:23 - 2015-05-13 14:22 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-13 06:04 - 2015-05-13 06:17 - 02209792 ____C C:\Users\TV\Desktop\adwcleaner_4.204.exe
2015-05-01 22:32 - 2015-05-01 22:32 - 00129752 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\65237C36.sys
2015-04-30 23:26 - 2015-04-30 23:26 - 00129752 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\440D57D0.sys
2015-04-24 23:11 - 2015-04-24 23:11 - 00002491 ____C C:\Users\Public\Desktop\Safari.lnk
2015-04-24 23:09 - 2015-04-24 23:11 - 00000000 ___DC C:\Program Files (x86)\Safari

==================== Three Months Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-19 20:41 - 2014-11-07 11:25 - 00000000 ___DC C:\FRST
2015-07-19 17:46 - 2009-07-13 19:20 - 00000000 ___DC C:\Windows\SysWOW64\com
2015-07-19 17:45 - 2009-07-13 19:20 - 00000000 ___DC C:\Windows\System32\oobe
2015-07-19 17:45 - 2009-07-13 19:20 - 00000000 ___DC C:\Windows\System32\com
2015-07-19 17:41 - 2011-04-11 22:26 - 00000000 ___DC C:\ProgramData\WinClon
2015-07-19 06:38 - 2009-07-13 19:20 - 00000000 ___DC C:\Windows\PolicyDefinitions
2015-07-19 01:35 - 2012-09-12 10:56 - 01297002 ____C C:\Windows\WindowsUpdate.log
2015-07-19 01:30 - 2013-05-14 10:49 - 00000884 ____C C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-19 01:08 - 2014-12-12 08:09 - 00000000 ___DC C:\Windows\System32\appraiser
2015-07-19 01:08 - 2014-05-06 12:43 - 00000000 __SDC C:\Windows\System32\CompatTel
2015-07-19 01:07 - 2014-11-21 21:47 - 00001110 ____C C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-19 01:04 - 2011-04-11 22:13 - 00000000 ___DC C:\ProgramData\Temp
2015-07-19 00:43 - 2011-07-18 06:43 - 00000000 ___DC C:\ProgramData\Kaspersky Lab
2015-07-19 00:12 - 2009-07-13 20:45 - 00028848 ___HC C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-19 00:12 - 2009-07-13 20:45 - 00028848 ___HC C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-19 00:11 - 2014-12-18 11:33 - 00000000 ___DC C:\Program Files (x86)\SpywareBlaster
2015-07-19 00:10 - 2014-07-17 03:20 - 00113880 ____C (Malwarebytes Corporation) C:\Windows\System32\Drivers\MBAMSwissArmy.sys
2015-07-19 00:07 - 2014-11-21 21:47 - 00001106 ____C C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-19 00:03 - 2014-03-01 01:44 - 00000000 __RDC C:\Users\TV\Dropbox
2015-07-19 00:03 - 2014-03-01 01:42 - 00000000 ___DC C:\Users\TV\AppData\Roaming\Dropbox
2015-07-19 00:02 - 2009-07-13 21:08 - 00000006 ___HC C:\Windows\Tasks\SA.DAT
2015-07-18 23:18 - 2014-12-24 22:59 - 00003886 ____C C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-18 22:28 - 2013-07-24 00:53 - 00000000 ___DC C:\Windows\System32\MRT
2015-07-18 21:41 - 2011-07-18 06:16 - 00000000 ___DC C:\Users\TV\AppData\Local\Adobe
2015-07-18 21:38 - 2013-05-14 10:49 - 00778416 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-18 21:38 - 2013-05-14 10:49 - 00142512 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-18 21:38 - 2013-05-14 10:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-18 21:20 - 2014-11-21 21:50 - 00002211 ____C C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-06 07:57 - 2013-12-08 10:42 - 00000000 ___DC C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-04 22:34 - 2011-10-17 13:01 - 00000822 ____C C:\Users\Public\Desktop\CCleaner.lnk
2015-07-04 22:34 - 2011-10-17 13:01 - 00000000 ___DC C:\Program Files\CCleaner
2015-07-04 01:56 - 2014-11-07 11:27 - 00046639 ____C C:\Users\TV\Desktop\Addition.txt
2015-07-04 01:56 - 2014-11-07 11:26 - 00058583 ____C C:\Users\TV\Desktop\FRST.txt
2015-07-04 01:49 - 2014-11-21 21:27 - 00000000 ___DC C:\Users\TV\Desktop\FRST-OlderVersion
2015-07-04 01:49 - 2014-11-07 11:24 - 02112512 ____C (Farbar) C:\Users\TV\Desktop\FRST64.exe
2015-07-02 22:43 - 2011-07-25 07:01 - 130333168 ____C (Microsoft Corporation) C:\Windows\System32\MRT.exe
2015-06-27 01:57 - 2014-07-17 03:19 - 00000000 ___DC C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-06-27 01:57 - 2013-05-12 03:14 - 00001066 ____C C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-06-23 03:30 - 2010-11-20 19:27 - 00300704 ____C (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
2015-06-21 11:18 - 2013-03-26 12:03 - 00000000 ___DC C:\Users\TV\AppData\Roaming\vlc
2015-06-20 00:54 - 2011-04-12 13:43 - 00699682 ____C C:\Windows\System32\perfh007.dat
2015-06-20 00:54 - 2011-04-12 13:43 - 00149790 ____C C:\Windows\System32\perfc007.dat
2015-06-20 00:54 - 2009-07-13 21:13 - 01620684 ____C C:\Windows\System32\PerfStringBackup.INI

Some files in TEMP:
====================
C:\Users\TV\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpnhalse.dll
C:\Users\TV\AppData\Local\Temp\procexp64.exe


==================== Known DLLs (Whitelisted) ================

[2015-07-18 22:44] - [2015-07-19 01:10] - 0000000 ____A () C:\Windows\System32\WININET.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================


==================== BCD ================================

Windows Boot Manager
--------------------
identifier              {bootmgr}
device                  partition=Y:
description            Windows Boot Manager
locale                  de-DE
inherit                {globalsettings}
default                {default}
resumeobject            {b9df562b-654c-11e0-9de6-0024543fb9f2}
displayorder            {default}
toolsdisplayorder      {memdiag}
timeout                30

Windows Boot Loader
-------------------
identifier              {default}
device                  partition=C:
path                    \windows\system32\winload.exe
description            Windows 7
locale                  de-DE
inherit                {bootloadersettings}
recoverysequence        {current}
recoveryenabled        Yes
osdevice                partition=C:
systemroot              \windows
resumeobject            {b9df562b-654c-11e0-9de6-0024543fb9f2}
nx                      OptIn

Windows Boot Loader
-------------------
identifier              {current}
device                  ramdisk=[C:]\Recovery\b9df562d-654c-11e0-9de6-0024543fb9f2\Winre.wim,{b9df562e-654c-11e0-9de6-0024543fb9f2}
path                    \windows\system32\winload.exe
description            Windows Recovery Environment
inherit                {bootloadersettings}
osdevice                ramdisk=[C:]\Recovery\b9df562d-654c-11e0-9de6-0024543fb9f2\Winre.wim,{b9df562e-654c-11e0-9de6-0024543fb9f2}
systemroot              \windows
nx                      OptIn
winpe                  Yes

Resume from Hibernate
---------------------
identifier              {b9df562b-654c-11e0-9de6-0024543fb9f2}
device                  partition=C:
path                    \windows\system32\winresume.exe
description            Windows Resume Application
locale                  de-DE
inherit                {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Windows Memory Tester
---------------------
identifier              {memdiag}
device                  partition=Y:
path                    \boot\memtest.exe
description            Windows Memory Diagnostic
locale                  de-DE
inherit                {globalsettings}
badmemoryaccess        Yes

EMS Settings
------------
identifier              {emssettings}
bootems                Yes

Debugger Settings
-----------------
identifier              {dbgsettings}
debugtype              Serial
debugport              1
baudrate                115200

RAM Defects
-----------
identifier              {badmemory}

Global Settings
---------------
identifier              {globalsettings}
inherit                {dbgsettings}
                        {emssettings}
                        {badmemory}

Boot Loader Settings
--------------------
identifier              {bootloadersettings}
inherit                {globalsettings}
                        {hypervisorsettings}

Hypervisor Settings
-------------------
identifier              {hypervisorsettings}
hypervisordebugtype    Serial
hypervisordebugport    1
hypervisorbaudrate      115200

Resume Loader Settings
----------------------
identifier              {resumeloadersettings}
inherit                {globalsettings}

Device options
--------------
identifier              {b9df562e-654c-11e0-9de6-0024543fb9f2}
description            Ramdisk Options
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\b9df562d-654c-11e0-9de6-0024543fb9f2\boot.sdi


==================== Memory info ===========================

Percentage of memory in use: 16%
Total physical RAM: 3892.55 MB
Available physical RAM: 3257.34 MB
Total Virtual: 3890.75 MB
Available Virtual: 3256.7 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:112 GB) (Free:1.11 GB) NTFS
Drive d: () (Fixed) (Total:165.99 GB) (Free:152.75 GB) NTFS
Drive f: (RECOVERY) (Fixed) (Total:20 GB) (Free:1.58 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive h: (USB DISK) (Removable) (Total:3.73 GB) (Free:3.55 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: 7B2A787C)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=112 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=166 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=3.7 GB) - (Type=0B)


LastRegBack: 2015-07-04 23:26

==================== End of log ============================

schrauber 20.07.2015 10:11
Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
LastRegBack: 2015-07-04 23:26
Speichere diese bitte als Fixlist.txt auf deinem USB Stick.
  • Starte deinen Rechner erneut in die Reparaturoptionen
  • Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

Wackelino 20.07.2015 10:39
Code:
Fix result of Farbar Recovery Scan Tool (x64) Version:18-07-2015 01
Ran by SYSTEM at 2015-07-20 11:32:54 Run:1
Running from H:\
Boot Mode: Recovery
==============================================

fixlist content:
*****************
LastRegBack: 2015-07-04 23:26
*****************

DEFAULT hive copied successfully to System32\config\HiveBackup
DEFAULT hive restored successfully from registry back up.
SAM hive copied successfully to System32\config\HiveBackup
SAM hive restored successfully from registry back up.
SECURITY hive copied successfully to System32\config\HiveBackup
SECURITY hive restored successfully from registry back up.
SOFTWARE hive copied successfully to System32\config\HiveBackup
SOFTWARE hive restored successfully from registry back up.
SYSTEM hive copied successfully to System32\config\HiveBackup
SYSTEM hive restored successfully from registry back up.

==== End of Fixlog 11:33:53 ====

schrauber 21.07.2015 06:47
kannste wieder normal starten?

Wackelino 21.07.2015 06:59
nein tut sich immer noch nichts

schrauber 21.07.2015 17:25
Ok. Dann wird es erstmal Zeit die Daten zu sichern falls noch nicht geschehen.

Wackelino 21.07.2015 22:02
Ok was muss ich tun

schrauber 22.07.2015 08:16
Am Besten mit ner Linux CD booten und dann deine Daten extern sichern, alles was wichtig ist.

Wackelino 23.07.2015 13:17
Wie erstelle ich die CD ?

schrauber 24.07.2015 06:43
Ein ISO laden und brennen :).

Am Besten dazu in unserem Linux Bereich nachfragen, die Jungs dort haben extrem viel Ahnung und können auch helfen wenn es Probleme beim Booten von Linux geben sollte :)

Wackelino 01.08.2015 10:02
Daten sind gesichert :)

was muss ich jetzt machen?

schrauber 01.08.2015 15:09
Systemwiederherstellung schon versucht?

Wackelino 07.08.2015 12:10
mache ich dies aus Linux heraus, auch wenn ich Windows 7 habe?


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:43 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131