| |
| |||||||
Log-Analyse und Auswertung: Firefox startet nicht mehr, Avira meldet tr/boigy.jWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
10.07.2013, 13:33
| #1 | ||
 |  Firefox startet nicht mehr, Avira meldet tr/boigy.j Hallo liebe Forumleser seit einigen Monaten ist mein Firefox immer wieder recht langsam und moniert nicht antwortende Skripte. Seit einigen Tagen stürzt er beim Start ab. Ich habe Firefox mehrfach neuinstaliert und dabei auch alle Nutzerdaten gelöscht aber es hat nichts geholfen. Momentan nutze ich Chrome. Dort kommt bei jedem Start allerdings von Avira die Meldung das ein tr/boigy.j gefunden wurde. Ich drücke dann immer auf "entfernen", aber die Meldung kommt immer wieder. Die OTL.Exe hat folgendes ausgespuckt: Zitat:
Zitat:
Vielen Dank! |
|
10.07.2013, 13:57
| #2 |
| /// the machine /// TB-Ausbilder    | Firefox startet nicht mehr, Avira meldet tr/boigy.j hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
10.07.2013, 14:55
| #3 |
| | Firefox startet nicht mehr, Avira meldet tr/boigy.j Ok
__________________das hier ist Frst.txt FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01
Ran by snoerer (administrator) on 10-07-2013 15:49:41
Running from C:\Users\snoerer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [167704 2011-08-05] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [392472 2011-08-05] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [416024 2011-08-05] (Intel Corporation)
HKLM\...\Run: [FreeFallProtection] - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] ()
HKLM\...\Run: [IntelPAN] - "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2011-07-28] (Intel(R) Corporation)
HKLM\...\Run: [QuickSet] - c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" [4526 2010-11-29] ()
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe -Quiet [2022976 2011-06-28] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [7509096 2011-10-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3 [2278504 2011-10-14] (Realtek Semiconductor)
HKLM\...\Run: [DellStage] - "C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj" --startup [483424 2012-02-01] ()
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,
HKCU\...\Run: [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18642024 2013-02-28] (Skype Technologies S.A.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [37960 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dell Webcam Central] - "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [RoxWatchTray] - "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [514544 2010-11-17] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup [968048 2012-02-01] ()
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\UpdatusUser\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [246592 2012-05-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202048 2012-05-15] (NVIDIA Corporation)
Startup: C:\Users\snoerer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameStop Now.lnk
ShortcutTarget: GameStop Now.lnk -> C:\Program Files (x86)\GameStop App\Now\GameStopNow.exe (No File)
Startup: C:\Users\snoerer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USCON/8
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
HKCU SearchScopes: DefaultScope {A834A5B1-5A5B-4CC1-A6FF-C024295AFCD6} URL =
SearchScopes: HKCU - {6F789A83-F06F-4114-9EC0-651C4F36EFB3} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=539F5209-556C-4920-8413-57CECEDF25BE&apn_sauid=2E5892FE-6A5C-4164-BC49-9CAC18EAD8B7
SearchScopes: HKCU - {A834A5B1-5A5B-4CC1-A6FF-C024295AFCD6} URL =
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Bitdefender QuickScan) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0
CHR Extension: (Gmail) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2011-12-08] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-05-15] (NVIDIA Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
S3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] (AVM Berlin)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2011-12-10] (Duplex Secure Ltd.)
S3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
U3 uwdirfow; \??\C:\Users\snoerer\AppData\Local\Temp\uwdirfow.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-10 15:49 - 2013-07-10 15:49 - 00000000 ____D C:\FRST
2013-07-10 15:48 - 2013-07-10 15:48 - 01776221 ____A (Farbar) C:\Users\snoerer\Downloads\FRST64.exe
2013-07-10 14:06 - 2013-07-10 14:06 - 00069666 ____A C:\Users\snoerer\Desktop\Gmer.log
2013-07-10 13:33 - 2013-07-10 14:17 - 00084562 ____A C:\Users\snoerer\Desktop\OTL.Txt
2013-07-10 13:06 - 2013-07-10 13:06 - 00000188 ____A C:\Users\snoerer\defogger_reenable
2013-07-10 12:45 - 2013-07-10 13:06 - 00000656 ____A C:\Users\snoerer\Downloads\defogger_disable.log
2013-07-10 12:44 - 2013-07-10 12:44 - 00050477 ____A C:\Users\snoerer\Downloads\Defogger.exe
2013-07-10 12:43 - 2013-07-10 13:34 - 00033258 ____A C:\Users\snoerer\Desktop\Pferde.odt
2013-07-10 12:42 - 2013-07-10 12:42 - 00377856 ____A C:\Users\snoerer\Downloads\gmer_2.1.19163.exe
2013-07-10 12:07 - 2013-07-10 12:07 - 00262144 ____A C:\Windows\Minidump\071013-30607-01.dmp
2013-07-10 11:59 - 2013-07-10 11:59 - 00064202 ____A C:\Users\snoerer\Downloads\Extras.Txt
2013-07-10 11:58 - 2013-07-10 11:58 - 00135478 ____A C:\Users\snoerer\Downloads\OTL.Txt
2013-07-10 11:50 - 2013-07-10 11:50 - 00602112 ____A (OldTimer Tools) C:\Users\snoerer\Desktop\OTL.exe
2013-07-10 11:46 - 2013-07-10 11:46 - 00000370 ____A C:\Users\snoerer\Desktop\tr.txt
2013-07-10 10:37 - 2013-07-10 10:37 - 02347384 ____A (ESET) C:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
2013-07-04 22:16 - 2013-07-04 22:16 - 00025615 ____A C:\Users\snoerer\Downloads\O und D.odt
2013-07-04 12:25 - 2013-07-04 12:25 - 00050176 ____A C:\Users\snoerer\Downloads\B_Reli_2013_10_Teams.xls
2013-07-03 13:14 - 2013-07-08 09:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-01 09:11 - 2013-07-01 09:11 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 09:11 - 2013-07-01 09:11 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 14:23 - 2013-06-18 14:23 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:21 - 2013-06-18 14:26 - 00010795 ____A C:\Windows\IE10_main.log
2013-06-12 18:22 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 18:22 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 18:22 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 18:22 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 18:22 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 18:22 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 18:22 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 18:22 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 18:22 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 18:22 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
==================== One Month Modified Files and Folders =======
2013-07-10 15:49 - 2013-07-10 15:49 - 00000000 ____D C:\FRST
2013-07-10 15:48 - 2013-07-10 15:48 - 01776221 ____A (Farbar) C:\Users\snoerer\Downloads\FRST64.exe
2013-07-10 15:45 - 2013-03-07 21:46 - 00001112 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-10 15:45 - 2013-03-07 21:46 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-10 15:45 - 2013-01-16 17:29 - 00001917 __ASH C:\ProgramData\174115fb-d56d-4c18-9136-c3f467168f02
2013-07-10 15:45 - 2012-04-01 14:39 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-10 14:17 - 2013-07-10 13:33 - 00084562 ____A C:\Users\snoerer\Desktop\OTL.Txt
2013-07-10 14:06 - 2013-07-10 14:06 - 00069666 ____A C:\Users\snoerer\Desktop\Gmer.log
2013-07-10 13:34 - 2013-07-10 12:43 - 00033258 ____A C:\Users\snoerer\Desktop\Pferde.odt
2013-07-10 13:23 - 2011-11-05 18:12 - 00000000 ____D C:\Users\snoerer\AppData\Roaming\Skype
2013-07-10 13:15 - 2009-07-14 06:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-10 13:15 - 2009-07-14 06:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-10 13:11 - 2011-10-22 14:59 - 01178742 ____A C:\Windows\WindowsUpdate.log
2013-07-10 13:07 - 2011-10-28 12:43 - 00000000 ____D C:\Users\snoerer\AppData\Local\SoftThinks
2013-07-10 13:07 - 2011-10-22 22:30 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-07-10 13:07 - 2011-10-22 15:00 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-10 13:07 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-10 13:07 - 2009-07-14 06:51 - 00062217 ____A C:\Windows\setupact.log
2013-07-10 13:06 - 2013-07-10 13:06 - 00000188 ____A C:\Users\snoerer\defogger_reenable
2013-07-10 13:06 - 2013-07-10 12:45 - 00000656 ____A C:\Users\snoerer\Downloads\defogger_disable.log
2013-07-10 13:06 - 2011-10-28 12:43 - 00000000 ____D C:\users\snoerer
2013-07-10 12:59 - 2010-11-21 05:47 - 00124834 ____A C:\Windows\PFRO.log
2013-07-10 12:44 - 2013-07-10 12:44 - 00050477 ____A C:\Users\snoerer\Downloads\Defogger.exe
2013-07-10 12:42 - 2013-07-10 12:42 - 00377856 ____A C:\Users\snoerer\Downloads\gmer_2.1.19163.exe
2013-07-10 12:07 - 2013-07-10 12:07 - 00262144 ____A C:\Windows\Minidump\071013-30607-01.dmp
2013-07-10 12:07 - 2011-11-04 09:37 - 00000000 ____D C:\Windows\Minidump
2013-07-10 12:07 - 2011-11-04 09:36 - 1056483334 ____A C:\Windows\MEMORY.DMP
2013-07-10 11:59 - 2013-07-10 11:59 - 00064202 ____A C:\Users\snoerer\Downloads\Extras.Txt
2013-07-10 11:58 - 2013-07-10 11:58 - 00135478 ____A C:\Users\snoerer\Downloads\OTL.Txt
2013-07-10 11:50 - 2013-07-10 11:50 - 00602112 ____A (OldTimer Tools) C:\Users\snoerer\Desktop\OTL.exe
2013-07-10 11:46 - 2013-07-10 11:46 - 00000370 ____A C:\Users\snoerer\Desktop\tr.txt
2013-07-10 10:37 - 2013-07-10 10:37 - 02347384 ____A (ESET) C:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
2013-07-10 09:47 - 2012-12-29 12:24 - 00000000 ____D C:\Users\snoerer\AppData\Roaming\QuickScan
2013-07-08 09:38 - 2013-07-03 13:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-04 22:16 - 2013-07-04 22:16 - 00025615 ____A C:\Users\snoerer\Downloads\O und D.odt
2013-07-04 12:36 - 2012-01-05 21:14 - 00000000 ____D C:\Users\snoerer\Downloads\Bewerbungen Schule
2013-07-04 12:25 - 2013-07-04 12:25 - 00050176 ____A C:\Users\snoerer\Downloads\B_Reli_2013_10_Teams.xls
2013-07-02 09:01 - 2013-01-16 17:10 - 00000000 ____D C:\ProgramData\4c11f8ff-06f4-407c-81a2-be1d813bf34f
2013-07-01 09:11 - 2013-07-01 09:11 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 09:11 - 2013-07-01 09:11 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 09:11 - 2013-02-11 17:40 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 09:11 - 2013-02-11 17:40 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 09:11 - 2012-06-21 16:37 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-07-01 09:11 - 2011-10-22 22:18 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-07-01 09:11 - 2011-10-22 22:18 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-27 13:30 - 2013-05-07 17:11 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-26 13:00 - 2012-01-05 21:14 - 00000000 ____D C:\Users\snoerer\Downloads\Ars magica
2013-06-20 21:37 - 2013-03-07 21:46 - 00002185 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-19 10:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-18 16:42 - 2009-07-14 06:45 - 00349376 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-18 16:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-18 14:26 - 2013-06-18 14:21 - 00010795 ____A C:\Windows\IE10_main.log
2013-06-18 14:24 - 2013-06-18 14:24 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 14:23 - 2013-06-18 14:23 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-17 17:43 - 2013-05-23 10:38 - 00000000 ____D C:\Program Files\My Dell
2013-06-13 20:43 - 2011-10-29 20:43 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 22:09 - 2012-04-01 14:39 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 22:09 - 2011-10-22 22:08 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-03 17:54
==================== End Of Log ============================
--- --- --- Das hier ist der Adition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-07-2013 01
Ran by snoerer at 2013-07-10 15:50:10
Running from C:\Users\snoerer\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
AccelerometerP11 (x32 Version: 2.00.11.22)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Advanced Audio FX Engine (x32 Version: 1.12.05)
Avira Free Antivirus (x32 Version: 13.0.0.3737)
Battlefield 3™ (x32 Version: 1.0.0.0)
Battlelog Web Plugins (x32 Version: 1.102.0)
Dell DataSafe Local Backup - Support Software (x32 Version: 9.4.57)
Dell DataSafe Local Backup (x32 Version: 9.4.57)
Dell Edoc Viewer (Version: 1.0.0)
Dell Stage (x32 Version: 1.7.209.0)
Dell Stage Remote (x32 Version: 2.0.0.43)
Dell Webcam Central (x32 Version: 2.00.44)
DirectX 9 Runtime (x32 Version: 1.00.0000)
ESN Sonar (x32 Version: 0.70.4)
Google Chrome (x32 Version: 27.0.1453.116)
Google Update Helper (x32 Version: 1.3.21.149)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2455)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.2.0000)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 22 (x32 Version: 6.0.220)
Java(TM) 6 Update 27 (64-bit) (Version: 6.0.270)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 (Version: 9.0.21022.218)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
My Dell (Version: 3.3.6261.27)
Nero ControlCenter (x32 Version: 11.0.15500)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000)
Nero Core Components (x32 Version: 11.0.18900)
Nero Update (x32 Version: 11.0.11800.31.0)
Nero WaveEditor (x32 Version: 12.0.01100)
Nero WaveEditor (x32 Version: 12.0.7000)
Nero WaveEditor Help (CHM) (x32 Version: 12.0.7000)
NVIDIA 3D Vision Treiber 301.42 (Version: 301.42)
NVIDIA Grafiktreiber 301.42 (Version: 301.42)
NVIDIA HD-Audiotreiber 1.3.16.0 (Version: 1.3.16.0)
NVIDIA Install Application (Version: 2.1002.75.420)
NVIDIA Optimus 1.8.15 (Version: 1.8.15)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.0142)
NVIDIA Systemsteuerung 301.42 (Version: 301.42)
NVIDIA Update 1.8.15 (Version: 1.8.15)
NVIDIA Update Components (Version: 1.8.15)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Origin (x32 Version: 8.3.7.3619)
PhotoShowExpress (x32 Version: 2.0.063)
Prerequisite installer (x32 Version: 12.0.0003)
PunkBuster Services (x32 Version: 0.991)
Quickset64 (Version: 11.0.10)
RBVirtualFolder64Inst (Version: 1.00.0000)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482)
rosoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Roxio Activation Module (x32 Version: 1.0)
Roxio BackOnTrack (x32 Version: 1.3.3)
Roxio Burn (x32 Version: 1.8)
Roxio Creator Starter (x32 Version: 1.0.439)
Roxio Creator Starter (x32 Version: 12.1.77.0)
Roxio Creator Starter (x32 Version: 5.0.0)
Roxio Express Labeler 3 (x32 Version: 3.2.2)
Roxio File Backup (Version: 1.3.2)
Shared C Run-time for x64 (Version: 10.0.0)
Sid Meier's Civilization V (x32)
Skype™ 6.3 (x32 Version: 6.3.105)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0)
StarCraft II (x32 Version: 1.5.3.23260)
Synaptics Pointing Device Driver (Version: 15.2.6.0)
TeamSpeak 3 Client (Version: 3.0.6)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.1.23.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
==================== Restore Points =========================
07-06-2013 19:36:18 Geplanter Prüfpunkt
13-06-2013 18:42:11 Windows Update
18-06-2013 12:21:20 Windows Update
25-06-2013 19:58:48 Geplanter Prüfpunkt
30-06-2013 19:23:10 Windows-Sicherung
01-07-2013 07:10:38 Installed Java 7 Update 25
08-07-2013 12:54:10 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {161A0366-B0B0-48F1-B163-7960A1B714C0} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1746198383-1202492751-3021964975-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe No File
Task: {3959F39C-B750-40D6-BFAC-2F9D83F8C838} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-05-07] (PC-Doctor, Inc.)
Task: {579F4FDD-F57F-458B-9898-64B88307BA9A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-07] (Google Inc.)
Task: {62225432-0DD6-46D0-A59A-DD17A9836074} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-05-07] (PC-Doctor, Inc.)
Task: {748A3BF5-4C99-4E66-B731-5DA20C215DF8} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {8A19C32A-B7C9-4DB4-9812-707E24F19B71} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1746198383-1202492751-3021964975-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe No File
Task: {A184F0AB-27A0-4EFE-897F-688FCFDA3AE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-07] (Google Inc.)
Task: {C56CEC06-D42E-494B-A8D6-C85A6E7528CC} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1746198383-1202492751-3021964975-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe No File
Task: {CECA342D-8004-499D-B15C-9884FFA7CC3A} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1746198383-1202492751-3021964975-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe No File
Task: {D5062F97-A802-459D-8A77-41C7F1F9CE4A} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {E3F9E1B6-72E7-421C-9634-9D6BD49D4055} - System32\Tasks\SystemToolsDailyTest => C:\Windows\System32\uaclauncher.exe No File
Task: {E9971691-34F3-41F8-AC81-5E649DEF67F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-11] (Adobe Systems Incorporated)
Task: {F0C28219-CC27-4D35-9FF0-DE0C296BDA7B} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1746198383-1202492751-3021964975-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe No File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Faulty Device Manager Devices =============
Name: WeOnlyDo Network Adapter 2.5
Description: WeOnlyDo Network Adapter 2.5
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: WeOnlyDo Network Provider
Service: wod0205
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/10/2013 01:07:33 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 00:59:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 00:56:19 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (07/10/2013 00:46:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 00:39:43 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (07/10/2013 00:07:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 10:37:54 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (07/10/2013 10:37:50 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (07/08/2013 09:41:52 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16618, Zeitstempel: 0x51b2fcb1
Name des fehlerhaften Moduls: SSPICLI.DLL, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aab0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0xd68
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3
Error: (07/08/2013 09:37:58 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 22.0.0.4917, Zeitstempel: 0x51c06b1b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x03832b16
ID des fehlerhaften Prozesses: 0x1334
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
System errors:
=============
Error: (07/10/2013 01:10:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (07/10/2013 01:10:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (07/10/2013 01:02:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (07/10/2013 01:02:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (07/10/2013 00:59:03 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (07/10/2013 00:48:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (07/10/2013 00:48:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (07/10/2013 00:10:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (07/10/2013 00:10:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (07/10/2013 00:07:37 PM) (Source: BugCheck) (User: )
Description: 0x000000f4 (0x0000000000000006, 0xfffffa800c436b50, 0xfffffa800c437340, 0xfffff80003597320)C:\Windows\MEMORY.DMP071013-30607-01
Microsoft Office Sessions:
=========================
Error: (07/10/2013 01:07:33 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 00:59:57 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 00:56:19 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
Error: (07/10/2013 00:46:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 00:39:43 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
Error: (07/10/2013 00:07:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/10/2013 10:37:54 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
Error: (07/10/2013 10:37:50 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
Error: (07/08/2013 09:41:52 AM) (Source: Application Error)(User: )
Description: iexplore.exe10.0.9200.1661851b2fcb1SSPICLI.DLL6.1.7601.177254ec4aab0c00000050000000000000000d6801ce7bae972b27f8C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\SSPICLI.DLLda7b04c3-e7a1-11e2-97f5-848f69b0ba43
Error: (07/08/2013 09:37:58 AM) (Source: Application Error)(User: )
Description: firefox.exe22.0.0.491751c06b1bunknown0.0.0.000000000c000000503832b16133401ce7bae109288d1C:\Program Files (x86)\Mozilla Firefox\firefox.exeunknown4ef619f8-e7a1-11e2-97f5-848f69b0ba43
==================== Memory info ===========================
Percentage of memory in use: 33%
Total physical RAM: 8086.17 MB
Available physical RAM: 5376.41 MB
Total Pagefile: 16170.52 MB
Available Pagefile: 13319.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:679 GB) (Free:593.36 GB) NTFS (Disk=0 Partition=3)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 699 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
10.07.2013, 20:19
| #4 | |
| /// the machine /// TB-Ausbilder | Firefox startet nicht mehr, Avira meldet tr/boigy.jCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.07.2013, 21:21
| #5 |
| | Firefox startet nicht mehr, Avira meldet tr/boigy.j Hallo Schrauber, ich konnte leider Avira nicht schließen. Es hat behauptet ich hätte die Zugangsrechte nicht. Combofix hat trotzdem weiter gemacht. Die Log.txt war folgende: Code:
ATTFilter ComboFix 13-07-09.01 - snoerer 10.07.2013 22:10:03.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8086.5727 [GMT 2:00]
ausgeführt von:: c:\users\snoerer\Desktop\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\programdata\PCDr\6261\AddOnDownloaded\10c3e5d4-52a2-480a-8f7a-8e884993029b.dll
c:\programdata\PCDr\6261\AddOnDownloaded\1a3879e8-dfe0-4d00-87f6-f2db19ac1eee.dll
c:\programdata\PCDr\6261\AddOnDownloaded\1f7e3200-2791-441e-8615-1258d84e5f61.dll
c:\programdata\PCDr\6261\AddOnDownloaded\31274d4c-b2a5-4954-874c-18abd8e795fc.dll
c:\programdata\PCDr\6261\AddOnDownloaded\31e827f4-bf26-41e4-9984-6422402c51da.dll
c:\programdata\PCDr\6261\AddOnDownloaded\3648a8b0-3389-4840-be40-db026cb0b248.dll
c:\programdata\PCDr\6261\AddOnDownloaded\3820d79a-0389-4fd9-b10c-00d2774e8996.dll
c:\programdata\PCDr\6261\AddOnDownloaded\5e1499b7-780b-4b0e-8240-0221e699a647.dll
c:\programdata\PCDr\6261\AddOnDownloaded\7a273375-a427-45b1-8925-a4fd3312f55b.dll
c:\programdata\PCDr\6261\AddOnDownloaded\958decf6-f105-42b7-b2b8-ecb97b06448b.dll
c:\programdata\PCDr\6261\AddOnDownloaded\ab0b7706-a6c8-49aa-9f56-0787e2a45b0b.dll
c:\programdata\PCDr\6261\AddOnDownloaded\b9659de3-009a-489a-9910-f3747d7d70c2.dll
c:\programdata\PCDr\6261\AddOnDownloaded\ba005e12-3139-4327-9f7a-9f2ea6a6c841.dll
c:\programdata\PCDr\6261\AddOnDownloaded\c088a81a-a965-4da7-8b79-eda53ddfa390.dll
c:\programdata\PCDr\6261\AddOnDownloaded\dfd672c1-69ab-446f-b44e-a23e9b8c7410.dll
c:\programdata\PCDr\6261\AddOnDownloaded\f6023957-62a3-406c-842a-e25d2b71072a.dll
c:\programdata\PCDr\6261\AddOnDownloaded\f80f957a-a781-4825-977a-a4ab79468916.dll
c:\programdata\Roaming
c:\programdata\windows
c:\programdata\windows\ccdxmmde.dat
c:\programdata\windows\drss.dat
c:\programdata\windows\msseedir.dll
c:\programdata\windows\sysprep.exe
c:\programdata\windows\xessmsxe.dat
c:\users\snoerer\4.0
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-06-10 bis 2013-07-10 ))))))))))))))))))))))))))))))
.
.
2013-07-10 20:14 . 2013-07-10 20:14 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-07-10 20:14 . 2013-07-10 20:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-10 13:49 . 2013-07-10 13:49 -------- d-----w- C:\FRST
2013-07-01 07:11 . 2013-07-01 07:11 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-18 12:23 . 2013-06-18 12:23 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-12 16:22 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-12 16:22 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 16:22 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-06-12 16:22 . 2013-05-13 05:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 16:22 . 2013-05-13 05:51 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-06-12 16:22 . 2013-05-13 05:51 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-12 16:22 . 2013-05-13 05:50 52224 ----a-w- c:\windows\system32\certenc.dll
2013-06-12 16:22 . 2013-05-13 04:45 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-06-12 16:22 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-06-12 16:22 . 2013-05-13 04:45 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-06-12 16:22 . 2013-05-13 03:43 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-06-12 16:22 . 2013-05-13 03:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-06-12 16:22 . 2013-05-13 03:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-01 07:11 . 2012-06-21 14:37 867240 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-07-01 07:11 . 2011-10-22 20:18 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-06-27 11:30 . 2013-05-07 15:11 83672 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-06-13 18:43 . 2011-10-29 18:43 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-11 20:09 . 2012-04-01 12:39 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-11 20:09 . 2011-10-22 20:08 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-04-12 14:45 . 2013-04-24 11:58 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-02-28 18642024]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2013-05-10 37960]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2011-04-13 503942]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2012-02-01 968048]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-06-27 345144]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\users\snoerer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\drivers\nvstusb.sys;c:\windows\SYSNATIVE\drivers\nvstusb.sys [x]
R3 NWIM;AVM VPN Miniport;c:\windows\system32\DRIVERS\avmnwim.sys;c:\windows\SYSNATIVE\DRIVERS\avmnwim.sys [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wod0205;WeOnlyDo Network Adapter 2.5;c:\windows\system32\DRIVERS\wod0205.sys;c:\windows\SYSNATIVE\DRIVERS\wod0205.sys [x]
R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys;c:\windows\SYSNATIVE\DRIVERS\stdcfltn.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys;c:\windows\SYSNATIVE\DRIVERS\Accelern.sys [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys;c:\windows\SYSNATIVE\DRIVERS\qicflt.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - UWDIRFOW
*Deregistered* - uwdirfow
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-20 19:36 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 20:09]
.
2013-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-07 19:46]
.
2013-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-07 19:46]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-05 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-05 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-05 416024]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-28 1935120]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"Stage Remote"="c:\program files (x86)\Dell\Stage Remote\StageRemote.exe" [2011-06-28 2022976]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-10-18 7509096]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-10-14 2278504]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2012-02-01 2195824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
c:\users\snoerer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameStop Now.lnk - c:\program files (x86)\GameStop App\Now\GameStopNow.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-10 22:15:41
ComboFix-quarantined-files.txt 2013-07-10 20:15
.
Vor Suchlauf: 14 Verzeichnis(se), 638.220.034.048 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 640.630.169.600 Bytes frei
.
- - End Of File - - 0A68F936F88B7CDB24F1F33F20702BD7
D41D8CD98F00B204E9800998ECF8427E
|
|
11.07.2013, 07:34
| #6 |
| /// the machine /// TB-Ausbilder | Firefox startet nicht mehr, Avira meldet tr/boigy.j Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST Log bitte.
__________________ --> Firefox startet nicht mehr, Avira meldet tr/boigy.j |
|
11.07.2013, 08:40
| #7 |
| | Firefox startet nicht mehr, Avira meldet tr/boigy.j Ok hier sind die entsprechenden Berichte Adwcleaner Code:
ATTFilter # AdwCleaner v2.304 - Datei am 11/07/2013 um 09:16:19 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : snoerer - SNOERER-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\snoerer\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\Users\snoerer\AppData\Local\PackageAware
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16618
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v27.0.1453.116
Datei : C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [826 octets] - [11/07/2013 09:16:19]
########## EOF - C:\AdwCleaner[S1].txt - [885 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.7 (07.11.2013:1)
OS: Windows 7 Home Premium x64
Ran by snoerer on 11.07.2013 at 9:22:57,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6F789A83-F06F-4114-9EC0-651C4F36EFB3}
~~~ Files
Successfully deleted: [File] C:\eula.1028.txt
Successfully deleted: [File] C:\eula.1031.txt
Successfully deleted: [File] C:\eula.1033.txt
Successfully deleted: [File] C:\eula.1036.txt
Successfully deleted: [File] C:\eula.1040.txt
Successfully deleted: [File] C:\eula.1041.txt
Successfully deleted: [File] C:\eula.1042.txt
Successfully deleted: [File] C:\eula.1049.txt
Successfully deleted: [File] C:\eula.2052.txt
Successfully deleted: [File] C:\install.res.1028.dll
Successfully deleted: [File] C:\install.res.1031.dll
Successfully deleted: [File] C:\install.res.1033.dll
Successfully deleted: [File] C:\install.res.1036.dll
Successfully deleted: [File] C:\install.res.1040.dll
Successfully deleted: [File] C:\install.res.1041.dll
Successfully deleted: [File] C:\install.res.1042.dll
Successfully deleted: [File] C:\install.res.1049.dll
Successfully deleted: [File] C:\install.res.2052.dll
Successfully deleted: [File] C:\install.res.3082.dll
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11.07.2013 at 9:27:55,63
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01
Ran by snoerer (administrator) on 11-07-2013 09:32:42
Running from C:\Users\snoerer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [167704 2011-08-05] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [392472 2011-08-05] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [416024 2011-08-05] (Intel Corporation)
HKLM\...\Run: [FreeFallProtection] - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] ()
HKLM\...\Run: [IntelPAN] - "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2011-07-28] (Intel(R) Corporation)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" [4526 2010-11-29] ()
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe -Quiet [2022976 2011-06-28] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [7509096 2011-10-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3 [2278504 2011-10-14] (Realtek Semiconductor)
HKLM\...\Run: [DellStage] - "C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj" --startup [483424 2012-02-01] ()
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,
HKCU\...\Run: [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18642024 2013-02-28] (Skype Technologies S.A.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe -update activex [814472 2013-06-11] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [37960 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dell Webcam Central] - "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [RoxWatchTray] - "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [514544 2010-11-17] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup [968048 2012-02-01] ()
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\UpdatusUser\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [246592 2012-05-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202048 2012-05-15] (NVIDIA Corporation)
Startup: C:\Users\snoerer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USCON/8
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
HKCU SearchScopes: DefaultScope {A834A5B1-5A5B-4CC1-A6FF-C024295AFCD6} URL =
SearchScopes: HKCU - {A834A5B1-5A5B-4CC1-A6FF-C024295AFCD6} URL =
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Bitdefender QuickScan) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0
CHR Extension: (Gmail) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2011-12-08] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-05-15] (NVIDIA Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
S3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] (AVM Berlin)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2011-12-10] (Duplex Secure Ltd.)
S3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-11 09:27 - 2013-07-11 09:29 - 00002177 ____A C:\Users\snoerer\Desktop\JRT.txt
2013-07-11 09:22 - 2013-07-11 09:22 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:20 - 2013-07-11 09:20 - 00000953 ____A C:\Users\snoerer\Desktop\AdwCleaner[S1].txt
2013-07-11 09:19 - 2013-07-11 09:20 - 00000911 ____A C:\AdwCleaner[S2].txt
2013-07-11 09:16 - 2013-07-11 09:16 - 00000953 ____A C:\AdwCleaner[S1].txt
2013-07-11 09:12 - 2013-07-11 09:12 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\snoerer\Desktop\JRT.exe
2013-07-11 09:08 - 2013-07-11 09:08 - 00650027 ____A C:\Users\snoerer\Desktop\adwcleaner.exe
2013-07-10 22:15 - 2013-07-10 22:15 - 00020012 ____A C:\ComboFix.txt
2013-07-10 22:08 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-07-10 22:08 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-07-10 22:08 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-07-10 21:43 - 2013-07-10 22:15 - 00000000 ____D C:\Qoobox
2013-07-10 21:43 - 2013-07-10 22:14 - 00000000 ____D C:\Windows\erdnt
2013-07-10 21:40 - 2013-07-10 21:40 - 05087643 ____R (Swearware) C:\Users\snoerer\Desktop\ComboFix.exe
2013-07-10 15:50 - 2013-07-10 15:50 - 00057792 ____A C:\Users\snoerer\Downloads\FRST.txt
2013-07-10 15:50 - 2013-07-10 15:50 - 00022223 ____A C:\Users\snoerer\Downloads\Addition.txt
2013-07-10 15:49 - 2013-07-10 15:49 - 00000000 ____D C:\FRST
2013-07-10 15:48 - 2013-07-10 15:48 - 01776221 ____A (Farbar) C:\Users\snoerer\Desktop\FRST64.exe
2013-07-10 14:06 - 2013-07-10 14:06 - 00069666 ____A C:\Users\snoerer\Desktop\Gmer.log
2013-07-10 13:33 - 2013-07-10 14:17 - 00084562 ____A C:\Users\snoerer\Desktop\OTL.Txt
2013-07-10 13:06 - 2013-07-10 13:06 - 00000188 ____A C:\Users\snoerer\defogger_reenable
2013-07-10 12:45 - 2013-07-10 13:06 - 00000656 ____A C:\Users\snoerer\Downloads\defogger_disable.log
2013-07-10 12:44 - 2013-07-10 12:44 - 00050477 ____A C:\Users\snoerer\Desktop\Defogger.exe
2013-07-10 12:43 - 2013-07-10 13:34 - 00033258 ____A C:\Users\snoerer\Desktop\Pferde.odt
2013-07-10 12:42 - 2013-07-10 12:42 - 00377856 ____A C:\Users\snoerer\Desktop\gmer_2.1.19163.exe
2013-07-10 12:07 - 2013-07-10 12:07 - 00262144 ____A C:\Windows\Minidump\071013-30607-01.dmp
2013-07-10 11:59 - 2013-07-10 11:59 - 00064202 ____A C:\Users\snoerer\Downloads\Extras.Txt
2013-07-10 11:58 - 2013-07-10 11:58 - 00135478 ____A C:\Users\snoerer\Downloads\OTL.Txt
2013-07-10 11:50 - 2013-07-10 11:50 - 00602112 ____A (OldTimer Tools) C:\Users\snoerer\Desktop\OTL.exe
2013-07-10 11:46 - 2013-07-10 11:46 - 00000370 ____A C:\Users\snoerer\Desktop\tr.txt
2013-07-10 10:37 - 2013-07-10 10:37 - 02347384 ____A (ESET) C:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
2013-07-04 22:16 - 2013-07-04 22:16 - 00025615 ____A C:\Users\snoerer\Downloads\O und D.odt
2013-07-04 12:25 - 2013-07-04 12:25 - 00050176 ____A C:\Users\snoerer\Downloads\B_Reli_2013_10_Teams.xls
2013-07-03 13:14 - 2013-07-08 09:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-01 09:11 - 2013-07-01 09:11 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 09:11 - 2013-07-01 09:11 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 14:23 - 2013-06-18 14:23 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:21 - 2013-06-18 14:26 - 00010795 ____A C:\Windows\IE10_main.log
2013-06-12 18:22 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 18:22 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 18:22 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 18:22 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 18:22 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 18:22 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 18:22 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 18:22 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 18:22 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 18:22 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
==================== One Month Modified Files and Folders =======
2013-07-11 09:29 - 2013-07-11 09:27 - 00002177 ____A C:\Users\snoerer\Desktop\JRT.txt
2013-07-11 09:29 - 2009-07-14 06:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-11 09:29 - 2009-07-14 06:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-11 09:22 - 2013-07-11 09:22 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:22 - 2011-11-05 18:12 - 00000000 ____D C:\Users\snoerer\AppData\Roaming\Skype
2013-07-11 09:22 - 2011-10-22 22:30 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-07-11 09:21 - 2013-03-07 21:46 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 09:21 - 2011-10-28 12:43 - 00000000 ____D C:\Users\snoerer\AppData\Local\SoftThinks
2013-07-11 09:21 - 2011-10-22 15:00 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-11 09:21 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-11 09:21 - 2009-07-14 06:51 - 00062441 ____A C:\Windows\setupact.log
2013-07-11 09:20 - 2013-07-11 09:20 - 00000953 ____A C:\Users\snoerer\Desktop\AdwCleaner[S1].txt
2013-07-11 09:20 - 2013-07-11 09:19 - 00000911 ____A C:\AdwCleaner[S2].txt
2013-07-11 09:20 - 2011-10-22 14:59 - 01393452 ____A C:\Windows\WindowsUpdate.log
2013-07-11 09:18 - 2011-10-22 22:41 - 00000000 ____D C:\ProgramData\Sonic
2013-07-11 09:16 - 2013-07-11 09:16 - 00000953 ____A C:\AdwCleaner[S1].txt
2013-07-11 09:12 - 2013-07-11 09:12 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\snoerer\Desktop\JRT.exe
2013-07-11 09:09 - 2012-04-01 14:39 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-11 09:08 - 2013-07-11 09:08 - 00650027 ____A C:\Users\snoerer\Desktop\adwcleaner.exe
2013-07-11 08:41 - 2013-03-07 21:46 - 00001112 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-10 22:25 - 2010-11-21 05:47 - 00125386 ____A C:\Windows\PFRO.log
2013-07-10 22:15 - 2013-07-10 22:15 - 00020012 ____A C:\ComboFix.txt
2013-07-10 22:15 - 2013-07-10 21:43 - 00000000 ____D C:\Qoobox
2013-07-10 22:14 - 2013-07-10 21:43 - 00000000 ____D C:\Windows\erdnt
2013-07-10 22:14 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-07-10 22:13 - 2011-10-28 12:43 - 00000000 ____D C:\users\snoerer
2013-07-10 21:40 - 2013-07-10 21:40 - 05087643 ____R (Swearware) C:\Users\snoerer\Desktop\ComboFix.exe
2013-07-10 20:45 - 2013-01-16 17:29 - 00001917 ____A C:\ProgramData\174115fb-d56d-4c18-9136-c3f467168f02
2013-07-10 15:50 - 2013-07-10 15:50 - 00057792 ____A C:\Users\snoerer\Downloads\FRST.txt
2013-07-10 15:50 - 2013-07-10 15:50 - 00022223 ____A C:\Users\snoerer\Downloads\Addition.txt
2013-07-10 15:49 - 2013-07-10 15:49 - 00000000 ____D C:\FRST
2013-07-10 15:48 - 2013-07-10 15:48 - 01776221 ____A (Farbar) C:\Users\snoerer\Desktop\FRST64.exe
2013-07-10 14:17 - 2013-07-10 13:33 - 00084562 ____A C:\Users\snoerer\Desktop\OTL.Txt
2013-07-10 14:06 - 2013-07-10 14:06 - 00069666 ____A C:\Users\snoerer\Desktop\Gmer.log
2013-07-10 13:34 - 2013-07-10 12:43 - 00033258 ____A C:\Users\snoerer\Desktop\Pferde.odt
2013-07-10 13:06 - 2013-07-10 13:06 - 00000188 ____A C:\Users\snoerer\defogger_reenable
2013-07-10 13:06 - 2013-07-10 12:45 - 00000656 ____A C:\Users\snoerer\Downloads\defogger_disable.log
2013-07-10 12:44 - 2013-07-10 12:44 - 00050477 ____A C:\Users\snoerer\Desktop\Defogger.exe
2013-07-10 12:42 - 2013-07-10 12:42 - 00377856 ____A C:\Users\snoerer\Desktop\gmer_2.1.19163.exe
2013-07-10 12:07 - 2013-07-10 12:07 - 00262144 ____A C:\Windows\Minidump\071013-30607-01.dmp
2013-07-10 12:07 - 2011-11-04 09:37 - 00000000 ____D C:\Windows\Minidump
2013-07-10 12:07 - 2011-11-04 09:36 - 1056483334 ____A C:\Windows\MEMORY.DMP
2013-07-10 11:59 - 2013-07-10 11:59 - 00064202 ____A C:\Users\snoerer\Downloads\Extras.Txt
2013-07-10 11:58 - 2013-07-10 11:58 - 00135478 ____A C:\Users\snoerer\Downloads\OTL.Txt
2013-07-10 11:50 - 2013-07-10 11:50 - 00602112 ____A (OldTimer Tools) C:\Users\snoerer\Desktop\OTL.exe
2013-07-10 11:46 - 2013-07-10 11:46 - 00000370 ____A C:\Users\snoerer\Desktop\tr.txt
2013-07-10 10:37 - 2013-07-10 10:37 - 02347384 ____A (ESET) C:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
2013-07-10 09:47 - 2012-12-29 12:24 - 00000000 ____D C:\Users\snoerer\AppData\Roaming\QuickScan
2013-07-08 09:38 - 2013-07-03 13:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-04 22:16 - 2013-07-04 22:16 - 00025615 ____A C:\Users\snoerer\Downloads\O und D.odt
2013-07-04 12:36 - 2012-01-05 21:14 - 00000000 ____D C:\Users\snoerer\Downloads\Bewerbungen Schule
2013-07-04 12:25 - 2013-07-04 12:25 - 00050176 ____A C:\Users\snoerer\Downloads\B_Reli_2013_10_Teams.xls
2013-07-02 09:01 - 2013-01-16 17:10 - 00000000 ____D C:\ProgramData\4c11f8ff-06f4-407c-81a2-be1d813bf34f
2013-07-01 09:11 - 2013-07-01 09:11 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 09:11 - 2013-07-01 09:11 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 09:11 - 2013-02-11 17:40 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 09:11 - 2013-02-11 17:40 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 09:11 - 2012-06-21 16:37 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-07-01 09:11 - 2011-10-22 22:18 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-07-01 09:11 - 2011-10-22 22:18 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-27 13:30 - 2013-05-07 17:11 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-26 13:00 - 2012-01-05 21:14 - 00000000 ____D C:\Users\snoerer\Downloads\Ars magica
2013-06-20 21:37 - 2013-03-07 21:46 - 00002185 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-19 10:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-18 16:42 - 2009-07-14 06:45 - 00349376 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-18 16:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-18 14:26 - 2013-06-18 14:21 - 00010795 ____A C:\Windows\IE10_main.log
2013-06-18 14:24 - 2013-06-18 14:24 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 14:23 - 2013-06-18 14:23 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-17 17:43 - 2013-05-23 10:38 - 00000000 ____D C:\Program Files\My Dell
2013-06-13 20:43 - 2011-10-29 20:43 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 22:09 - 2012-04-01 14:39 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 22:09 - 2011-10-22 22:08 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-03 17:54
==================== End Of Log ============================
--- --- --- |
|
11.07.2013, 09:27
| #8 |
| /// the machine /// TB-Ausbilder | Firefox startet nicht mehr, Avira meldet tr/boigy.j Falls Firefox immer noch zickt komplett deinstallieren, keine Daten behalten, neu installieren. ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST Log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.07.2013, 11:43
| #9 |
| | Firefox startet nicht mehr, Avira meldet tr/boigy.j Esset meldet folgendes: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=50168d9c15509340bac7725458df39e5
# engine=14349
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-07-11 10:27:29
# local_time=2013-07-11 12:27:29 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 16885 238961739 9673 0
# compatibility_mode=5893 16776574 100 94 11416587 125168299 0 0
# scanned=161268
# found=2
# cleaned=0
# scan_time=6223
sh=58FABBB424A5D130F1FF809B3E15FC2821BD3270 ft=1 fh=4d56420a82bf7f87 vn="a variant of Win64/Kryptik.CV trojan" ac=I fn="C:\Qoobox\Quarantine\C\ProgramData\Windows\msseedir.dll.vir"
sh=A812EB894019926C9F92042AB8C681179A6FC83D ft=0 fh=0000000000000000 vn="probably a variant of Java/Exploit.Agent.OBF trojan" ac=I fn="C:\Users\snoerer\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\57288082-530a4fa0"
Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED!
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2013 01
Ran by snoerer (administrator) on 11-07-2013 12:38:35
Running from C:\Users\snoerer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\snoerer\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated)
HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [167704 2011-08-05] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [392472 2011-08-05] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [416024 2011-08-05] (Intel Corporation)
HKLM\...\Run: [FreeFallProtection] - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] ()
HKLM\...\Run: [IntelPAN] - "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2011-07-28] (Intel(R) Corporation)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" [4526 2010-11-29] ()
HKLM\...\Run: [Stage Remote] - C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe -Quiet [2022976 2011-06-28] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [7509096 2011-10-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3 [2278504 2011-10-14] (Realtek Semiconductor)
HKLM\...\Run: [DellStage] - "C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj" --startup [483424 2012-02-01] ()
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,
HKCU\...\Run: [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18642024 2013-02-28] (Skype Technologies S.A.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe -update activex [814472 2013-06-11] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [37960 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dell Webcam Central] - "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [RoxWatchTray] - "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [514544 2010-11-17] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup [968048 2012-02-01] ()
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\UpdatusUser\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [246592 2012-05-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [202048 2012-05-15] (NVIDIA Corporation)
Startup: C:\Users\snoerer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USCON/8
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
HKCU SearchScopes: DefaultScope {A834A5B1-5A5B-4CC1-A6FF-C024295AFCD6} URL =
SearchScopes: HKCU - {A834A5B1-5A5B-4CC1-A6FF-C024295AFCD6} URL =
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Bitdefender QuickScan) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0
CHR Extension: (Gmail) - C:\Users\snoerer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2011-12-08] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-05-15] (NVIDIA Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
S3 NWIM; C:\Windows\System32\DRIVERS\avmnwim.sys [412024 2011-07-05] (AVM Berlin)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2011-12-10] (Duplex Secure Ltd.)
S3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-11 10:42 - 2013-07-11 10:42 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-11 10:41 - 2013-07-11 10:41 - 00890988 ____A C:\Users\snoerer\Desktop\SecurityCheck.exe
2013-07-11 09:27 - 2013-07-11 09:29 - 00002177 ____A C:\Users\snoerer\Desktop\JRT.txt
2013-07-11 09:22 - 2013-07-11 09:22 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:20 - 2013-07-11 09:20 - 00000953 ____A C:\Users\snoerer\Desktop\AdwCleaner[S1].txt
2013-07-11 09:19 - 2013-07-11 09:20 - 00000911 ____A C:\AdwCleaner[S2].txt
2013-07-11 09:16 - 2013-07-11 09:16 - 00000953 ____A C:\AdwCleaner[S1].txt
2013-07-11 09:12 - 2013-07-11 09:12 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\snoerer\Desktop\JRT.exe
2013-07-11 09:08 - 2013-07-11 09:08 - 00650027 ____A C:\Users\snoerer\Desktop\adwcleaner.exe
2013-07-10 22:15 - 2013-07-10 22:15 - 00020012 ____A C:\ComboFix.txt
2013-07-10 22:08 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-07-10 22:08 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-07-10 22:08 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-07-10 22:08 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-07-10 21:43 - 2013-07-10 22:15 - 00000000 ____D C:\Qoobox
2013-07-10 21:43 - 2013-07-10 22:14 - 00000000 ____D C:\Windows\erdnt
2013-07-10 21:40 - 2013-07-10 21:40 - 05087643 ____R (Swearware) C:\Users\snoerer\Desktop\ComboFix.exe
2013-07-10 15:50 - 2013-07-10 15:50 - 00057792 ____A C:\Users\snoerer\Downloads\FRST.txt
2013-07-10 15:50 - 2013-07-10 15:50 - 00022223 ____A C:\Users\snoerer\Downloads\Addition.txt
2013-07-10 15:49 - 2013-07-10 15:49 - 00000000 ____D C:\FRST
2013-07-10 15:48 - 2013-07-10 15:48 - 01776221 ____A (Farbar) C:\Users\snoerer\Desktop\FRST64.exe
2013-07-10 14:06 - 2013-07-10 14:06 - 00069666 ____A C:\Users\snoerer\Desktop\Gmer.log
2013-07-10 13:33 - 2013-07-10 14:17 - 00084562 ____A C:\Users\snoerer\Desktop\OTL.Txt
2013-07-10 13:06 - 2013-07-10 13:06 - 00000188 ____A C:\Users\snoerer\defogger_reenable
2013-07-10 12:45 - 2013-07-10 13:06 - 00000656 ____A C:\Users\snoerer\Downloads\defogger_disable.log
2013-07-10 12:44 - 2013-07-10 12:44 - 00050477 ____A C:\Users\snoerer\Desktop\Defogger.exe
2013-07-10 12:43 - 2013-07-10 13:34 - 00033258 ____A C:\Users\snoerer\Desktop\Pferde.odt
2013-07-10 12:42 - 2013-07-10 12:42 - 00377856 ____A C:\Users\snoerer\Desktop\gmer_2.1.19163.exe
2013-07-10 12:07 - 2013-07-10 12:07 - 00262144 ____A C:\Windows\Minidump\071013-30607-01.dmp
2013-07-10 11:59 - 2013-07-10 11:59 - 00064202 ____A C:\Users\snoerer\Downloads\Extras.Txt
2013-07-10 11:58 - 2013-07-10 11:58 - 00135478 ____A C:\Users\snoerer\Downloads\OTL.Txt
2013-07-10 11:50 - 2013-07-10 11:50 - 00602112 ____A (OldTimer Tools) C:\Users\snoerer\Desktop\OTL.exe
2013-07-10 11:46 - 2013-07-10 11:46 - 00000370 ____A C:\Users\snoerer\Desktop\tr.txt
2013-07-10 10:37 - 2013-07-10 10:37 - 02347384 ____A (ESET) C:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
2013-07-04 22:16 - 2013-07-04 22:16 - 00025615 ____A C:\Users\snoerer\Downloads\O und D.odt
2013-07-04 12:25 - 2013-07-04 12:25 - 00050176 ____A C:\Users\snoerer\Downloads\B_Reli_2013_10_Teams.xls
2013-07-03 13:14 - 2013-07-08 09:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-01 09:11 - 2013-07-01 09:11 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 09:11 - 2013-07-01 09:11 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 14:23 - 2013-06-18 14:23 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:21 - 2013-06-18 14:26 - 00010795 ____A C:\Windows\IE10_main.log
2013-06-12 18:22 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 18:22 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 18:22 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 18:22 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 18:22 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 18:22 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 18:22 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 18:22 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 18:22 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 18:22 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 18:22 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
==================== One Month Modified Files and Folders =======
2013-07-11 12:09 - 2012-04-01 14:39 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-11 11:41 - 2013-03-07 21:46 - 00001112 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-11 11:17 - 2011-10-22 14:59 - 01411486 ____A C:\Windows\WindowsUpdate.log
2013-07-11 10:42 - 2013-07-11 10:42 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-11 10:41 - 2013-07-11 10:41 - 00890988 ____A C:\Users\snoerer\Desktop\SecurityCheck.exe
2013-07-11 09:29 - 2013-07-11 09:27 - 00002177 ____A C:\Users\snoerer\Desktop\JRT.txt
2013-07-11 09:29 - 2009-07-14 06:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-11 09:29 - 2009-07-14 06:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-11 09:22 - 2013-07-11 09:22 - 00000000 ____D C:\Windows\ERUNT
2013-07-11 09:22 - 2011-11-05 18:12 - 00000000 ____D C:\Users\snoerer\AppData\Roaming\Skype
2013-07-11 09:22 - 2011-10-22 22:30 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2013-07-11 09:21 - 2013-03-07 21:46 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 09:21 - 2011-10-28 12:43 - 00000000 ____D C:\Users\snoerer\AppData\Local\SoftThinks
2013-07-11 09:21 - 2011-10-22 15:00 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-11 09:21 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-07-11 09:21 - 2009-07-14 06:51 - 00062441 ____A C:\Windows\setupact.log
2013-07-11 09:20 - 2013-07-11 09:20 - 00000953 ____A C:\Users\snoerer\Desktop\AdwCleaner[S1].txt
2013-07-11 09:20 - 2013-07-11 09:19 - 00000911 ____A C:\AdwCleaner[S2].txt
2013-07-11 09:18 - 2011-10-22 22:41 - 00000000 ____D C:\ProgramData\Sonic
2013-07-11 09:16 - 2013-07-11 09:16 - 00000953 ____A C:\AdwCleaner[S1].txt
2013-07-11 09:12 - 2013-07-11 09:12 - 00559306 ____A (Oleg N. Scherbakov) C:\Users\snoerer\Desktop\JRT.exe
2013-07-11 09:08 - 2013-07-11 09:08 - 00650027 ____A C:\Users\snoerer\Desktop\adwcleaner.exe
2013-07-10 22:25 - 2010-11-21 05:47 - 00125386 ____A C:\Windows\PFRO.log
2013-07-10 22:15 - 2013-07-10 22:15 - 00020012 ____A C:\ComboFix.txt
2013-07-10 22:15 - 2013-07-10 21:43 - 00000000 ____D C:\Qoobox
2013-07-10 22:14 - 2013-07-10 21:43 - 00000000 ____D C:\Windows\erdnt
2013-07-10 22:14 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-07-10 22:13 - 2011-10-28 12:43 - 00000000 ____D C:\users\snoerer
2013-07-10 21:40 - 2013-07-10 21:40 - 05087643 ____R (Swearware) C:\Users\snoerer\Desktop\ComboFix.exe
2013-07-10 20:45 - 2013-01-16 17:29 - 00001917 ____A C:\ProgramData\174115fb-d56d-4c18-9136-c3f467168f02
2013-07-10 15:50 - 2013-07-10 15:50 - 00057792 ____A C:\Users\snoerer\Downloads\FRST.txt
2013-07-10 15:50 - 2013-07-10 15:50 - 00022223 ____A C:\Users\snoerer\Downloads\Addition.txt
2013-07-10 15:49 - 2013-07-10 15:49 - 00000000 ____D C:\FRST
2013-07-10 15:48 - 2013-07-10 15:48 - 01776221 ____A (Farbar) C:\Users\snoerer\Desktop\FRST64.exe
2013-07-10 14:17 - 2013-07-10 13:33 - 00084562 ____A C:\Users\snoerer\Desktop\OTL.Txt
2013-07-10 14:06 - 2013-07-10 14:06 - 00069666 ____A C:\Users\snoerer\Desktop\Gmer.log
2013-07-10 13:34 - 2013-07-10 12:43 - 00033258 ____A C:\Users\snoerer\Desktop\Pferde.odt
2013-07-10 13:06 - 2013-07-10 13:06 - 00000188 ____A C:\Users\snoerer\defogger_reenable
2013-07-10 13:06 - 2013-07-10 12:45 - 00000656 ____A C:\Users\snoerer\Downloads\defogger_disable.log
2013-07-10 12:44 - 2013-07-10 12:44 - 00050477 ____A C:\Users\snoerer\Desktop\Defogger.exe
2013-07-10 12:42 - 2013-07-10 12:42 - 00377856 ____A C:\Users\snoerer\Desktop\gmer_2.1.19163.exe
2013-07-10 12:07 - 2013-07-10 12:07 - 00262144 ____A C:\Windows\Minidump\071013-30607-01.dmp
2013-07-10 12:07 - 2011-11-04 09:37 - 00000000 ____D C:\Windows\Minidump
2013-07-10 12:07 - 2011-11-04 09:36 - 1056483334 ____A C:\Windows\MEMORY.DMP
2013-07-10 11:59 - 2013-07-10 11:59 - 00064202 ____A C:\Users\snoerer\Downloads\Extras.Txt
2013-07-10 11:58 - 2013-07-10 11:58 - 00135478 ____A C:\Users\snoerer\Downloads\OTL.Txt
2013-07-10 11:50 - 2013-07-10 11:50 - 00602112 ____A (OldTimer Tools) C:\Users\snoerer\Desktop\OTL.exe
2013-07-10 11:46 - 2013-07-10 11:46 - 00000370 ____A C:\Users\snoerer\Desktop\tr.txt
2013-07-10 10:37 - 2013-07-10 10:37 - 02347384 ____A (ESET) C:\Users\snoerer\Downloads\esetsmartinstaller_enu.exe
2013-07-10 09:47 - 2012-12-29 12:24 - 00000000 ____D C:\Users\snoerer\AppData\Roaming\QuickScan
2013-07-08 09:38 - 2013-07-03 13:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-04 22:16 - 2013-07-04 22:16 - 00025615 ____A C:\Users\snoerer\Downloads\O und D.odt
2013-07-04 12:36 - 2012-01-05 21:14 - 00000000 ____D C:\Users\snoerer\Downloads\Bewerbungen Schule
2013-07-04 12:25 - 2013-07-04 12:25 - 00050176 ____A C:\Users\snoerer\Downloads\B_Reli_2013_10_Teams.xls
2013-07-02 09:01 - 2013-01-16 17:10 - 00000000 ____D C:\ProgramData\4c11f8ff-06f4-407c-81a2-be1d813bf34f
2013-07-01 09:11 - 2013-07-01 09:11 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 09:11 - 2013-07-01 09:11 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 09:11 - 2013-02-11 17:40 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 09:11 - 2013-02-11 17:40 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 09:11 - 2012-06-21 16:37 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2013-07-01 09:11 - 2011-10-22 22:18 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-07-01 09:11 - 2011-10-22 22:18 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-27 13:30 - 2013-05-07 17:11 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2013-06-26 13:00 - 2012-01-05 21:14 - 00000000 ____D C:\Users\snoerer\Downloads\Ars magica
2013-06-20 21:37 - 2013-03-07 21:46 - 00002185 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-19 10:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-18 16:42 - 2009-07-14 06:45 - 00349376 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-18 16:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-18 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-18 14:26 - 2013-06-18 14:21 - 00010795 ____A C:\Windows\IE10_main.log
2013-06-18 14:24 - 2013-06-18 14:24 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 14:24 - 2013-06-18 14:24 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 14:24 - 2013-06-18 14:24 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 14:24 - 2013-06-18 14:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 14:24 - 2013-06-18 14:24 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 14:24 - 2013-06-18 14:24 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 14:24 - 2013-06-18 14:24 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 14:23 - 2013-06-18 14:23 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 14:23 - 2013-06-18 14:23 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-17 17:43 - 2013-05-23 10:38 - 00000000 ____D C:\Program Files\My Dell
2013-06-13 20:43 - 2011-10-29 20:43 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 22:09 - 2012-04-01 14:39 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 22:09 - 2011-10-22 22:08 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-03 17:54
==================== End Of Log ============================
--- --- --- |
|
11.07.2013, 12:48
| #10 |
| /// the machine /// TB-Ausbilder | Firefox startet nicht mehr, Avira meldet tr/boigy.j Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.07.2013, 13:04
| #11 |
| | Firefox startet nicht mehr, Avira meldet tr/boigy.j Ok das hat geklappt. Ich habe Firefox neuinstaliert. Es funktioniert einwandfrei. Ich danke dir vielmals für deine schnelle und unkomplizierte Hilfe .Ich bin selber insolchen dingen leider nicht so bewandert  .Gruß Snoerer |
|
11.07.2013, 13:22
| #12 |
| /// the machine /// TB-Ausbilder | Firefox startet nicht mehr, Avira meldet tr/boigy.j Fertig und aufräumen Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Firefox startet nicht mehr, Avira meldet tr/boigy.j |
| adobe, antivir, autorun, avg, avira, bho, browser, defender, entfernen, explorer, firefox, flash player, format, helper, home, homepage, hook, langsam, logfile, nvpciflt.sys, plug-in, realtek, registry, scan, software, usb, windows, wscript.exe |
riginalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{go ogle:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
Linear-Darstellung
