| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PC hat nach Bluescreen nicht mehr die ursprüngliche LeistungWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
25.06.2013, 20:33
| #1 |
 |  PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung An die Profis im Trojaner-board.de, Mein 2. Rechner benütze ich praktisch ausschliesslich für die Flugsimulation. Nach einem Bluescreen läuft er zwar wiederum ordentlich, dennoch ist die Leistung nicht mehr, wie vorher. Der PC startet sich wesentlich länger auf und die Bildwiederholungsrate im Flugsim ist reduziert. Ausserdem gibt es oft grafische Fehler und hin und wieder CTDT wenn der Flugsimulator läuft. Ereignisanzeige zeigt Fehler immer mit dem uiautomationcore.dll. (befindet sich im system32) Wäre Euch dankbar für gute Tipps. Vielen Dank und Gruss Anatol |
|
26.06.2013, 06:40
| #2 |
| /// the machine /// TB-Ausbilder    | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Hi,
__________________Systemscan mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)
__________________ |
|
26.06.2013, 11:16
| #3 |
| | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Hallo Schrauber,
__________________Danke Dir sehr für die superprompte Antwort! Hier die logs: Gruss Anatol FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-06-2013 02
Ran by Alfred (administrator) on 26-06-2013 12:08:57
Running from C:\Users\Alfred\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Beepa P/L) C:\Program Files (x86)\fraps.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(KSE - Korndörfer Software Engineering) C:\Program Files\nHancer\nHancerService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Rocket Division Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Beepa P/L) C:\Program Files (x86)\fraps64.dat
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer [x]
MountPoints2: {1064f5e9-6d71-11df-8535-806e6f6e6963} - H:\AfmTool.exe
MountPoints2: {6f6a5dfa-76af-11df-96cd-00241dc7db61} - J:\HPLauncher.exe
MountPoints2: {6f6a5e25-76af-11df-96cd-00241dc7db61} - O:\setup.exe
MountPoints2: {8c175878-5c25-11e0-bf22-00241dc7db73} - J:\start.exe
MountPoints2: {bd6d1c7d-aae8-11e1-9469-806e6f6e6963} - H:\AfmTool.exe
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)
HKLM-x32\...\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot [295512 2013-06-16] (RealNetworks, Inc.)
Startup: C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Analoguhr.lnk
ShortcutTarget: Analoguhr.lnk -> C:\Users\Alfred\Documents\4.AVIATION\Neuer Ordner\n\CLOCK.EXE (No File)
Startup: C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenBitCoin.exe.lnk
ShortcutTarget: OpenBitCoin.exe.lnk -> C:\Program Files (x86)\OpenBitCoin\daemon.exe ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx
URLSearchHook: (No Name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No File
URLSearchHook: (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File
URLSearchHook: (No Name) - {134b012b-132d-4516-a786-2395828640b5} - No File
HKLM-x32 SearchScopes: DefaultScope {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1703539
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1703539
HKCU SearchScopes: DefaultScope {BEC15BFA-01C6-44A5-BD78-38BF5EBE0604} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://startsear.ch/?aff=7&src=sp&cf=53598af6-2b15-11e1-af6d-00241dc7db73&q={searchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=UTR&o=&src=crm&q={searchTerms}&locale=
SearchScopes: HKCU - {48AD4D14-8DFA-415F-B65B-46B0336C004D} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091
SearchScopes: HKCU - {BEC15BFA-01C6-44A5-BD78-38BF5EBE0604} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
BHO-x32: BitAcceleratorBHO Class - {CAC42510-9B41-42c1-9DCD-7282A2D07C61} - C:\Program Files (x86)\BitAccelerator\BitAccelerator.dll (TODO: <Company name>)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - No Name - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)
Toolbar: HKCU - No Name - {BA14329E-9550-4989-B3F2-9732E92D17CC} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No File
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_32 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.633 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Extension: No Name - C:\Users\Alfred\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: SaveByclick - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\50e6b89ea1470@50e6b89ea14a9.com
FF Extension: Conduit Engine - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\engine@conduit.com
FF Extension: 4shared.com Community Toolbar - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}
FF Extension: DownloadHelper - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Vuze Remote Community Toolbar - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
FF Extension: uTorrentBar_DE Community Toolbar - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{c840e246-6b95-475e-9bd7-caa1c7eca9f2}
FF Extension: ST-de3 Community Toolbar - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Yahoo) - hxxp://ch.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=937811&p={searchTerms}
CHR DefaultSuggestURL: (Yahoo) - hxxp://de.ff.search.yahoo.com/gossip?command={searchTerms}&output=fxjson
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\google\chrome\application\22.0.1229.95\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U32) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.320.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Extension: (YouTube) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealDownloader) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (Gmail) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R2 nHancer; C:\Program Files\nHancer\nHancerService.exe [39424 2010-05-02] (KSE - Korndörfer Software Engineering)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
==================== Drivers (Whitelisted) ====================
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2010-06-06] ()
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2010-06-01] (Acronis)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
U3 aj5t1gkw; C:\Windows\System32\Drivers\aj5t1gkw.sys [0 ] (Advanced Micro Devices)
U3 alt8rzei; C:\Windows\System32\Drivers\alt8rzei.sys [0 ] (Advanced Micro Devices)
S3 cpuz132; \??\C:\Users\Alfred\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [x]
S1 MpKslc6ca88d5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A2AFAD69-B5C2-49B6-91B7-2ABC590A3EF2}\MpKslc6ca88d5.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-26 12:08 - 2013-06-26 12:08 - 00000000 ____D C:\FRST
2013-06-26 12:07 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Desktop\FRST64.exe
2013-06-26 12:06 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64.exe
2013-06-24 11:48 - 2013-06-24 11:48 - 00000000 ____D C:\Users\Alfred\Documents\Trojaner.board.de
2013-06-23 17:28 - 2013-06-23 21:28 - 00000000 ____D C:\Users\Alfred\Downloads\downloads bis 22.6.2013
2013-06-23 09:01 - 2013-06-26 12:00 - 00000280 ____A C:\Windows\setupact.log
2013-06-23 09:01 - 2013-06-23 09:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-19 09:15 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-19 09:15 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 09:03 - 2013-06-18 09:03 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 08:40 - 2013-06-17 23:30 - 00053809 ____A C:\Users\Alfred\Desktop\fsx.CFG
2013-06-16 21:19 - 2013-06-25 22:55 - 01110135 ____A C:\Windows\WindowsUpdate.log
2013-06-16 20:46 - 2013-06-16 20:46 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 20:45 - 2013-06-16 20:45 - 00001132 ____A C:\Users\Public\Desktop\RealPlayer.lnk
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 20:38 - 2013-06-18 23:45 - 00002151 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-16 10:59 - 2013-06-16 10:59 - 00001290 ____A C:\Users\Alfred\Desktop\F A V O R I T E N - Verknüpfung.lnk
2013-06-15 14:01 - 2013-06-15 14:01 - 00001113 ____A C:\Users\Alfred\Desktop\Mozilla Firefox.lnk
2013-06-14 14:39 - 2009-07-14 06:54 - 00001298 ____A C:\Users\Alfred\Desktop\Event Viewer.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000980 ____A C:\Users\Public\Desktop\SSD Fresh.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Users\Alfred\AppData\Local\Abelssoft
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Program Files (x86)\SSD Fresh
2013-06-12 20:40 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 20:40 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 20:40 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 20:40 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 20:40 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 20:40 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 20:40 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 20:40 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 20:40 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 20:40 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 20:40 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 20:40 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 20:40 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 20:40 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 15:48 - 2013-06-11 16:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-11 09:33 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-06-11 09:33 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-06-11 09:33 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-06-11 09:33 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-06-11 09:33 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-06-11 09:33 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-06-11 09:33 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-06-11 09:33 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-06-11 09:33 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-06-11 09:33 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-11 09:33 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-06-11 09:33 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-06-11 09:33 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-06-11 09:33 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-11 09:33 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
==================== One Month Modified Files and Folders =======
2013-06-26 12:08 - 2013-06-26 12:08 - 00000000 ____D C:\FRST
2013-06-26 12:08 - 2009-07-14 06:45 - 00013456 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-26 12:08 - 2009-07-14 06:45 - 00013456 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-26 12:07 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Desktop\FRST64.exe
2013-06-26 12:07 - 2013-06-26 12:06 - 01931844 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64.exe
2013-06-26 12:06 - 2010-06-27 22:10 - 00000000 ____D C:\Program Files (x86)\Benchmarks
2013-06-26 12:05 - 2012-05-31 09:11 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-26 12:04 - 2013-06-16 21:19 - 01110135 ____A C:\Windows\WindowsUpdate.log
2013-06-26 12:01 - 2011-04-11 14:25 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-26 12:00 - 2013-06-23 09:01 - 00000280 ____A C:\Windows\setupact.log
2013-06-26 12:00 - 2012-07-22 22:24 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-26 12:00 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-25 22:55 - 2012-06-06 19:59 - 00001843 ____A C:\Users\Alfred\d3d_antilag.log
2013-06-25 22:54 - 2012-10-06 20:36 - 00000000 ____D C:\Users\Alfred\Documents\Flight Simulator X-Dateien
2013-06-25 22:39 - 2011-04-11 14:25 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-25 20:37 - 2012-12-02 23:05 - 00000482 ____A C:\Windows\Tasks\PC Utility Kit Registration3.job
2013-06-24 18:09 - 2012-11-05 15:08 - 00000000 ___RD C:\Users\Alfred\Documents\DESKTOP icons
2013-06-24 17:56 - 2009-07-14 19:58 - 00696848 ____A C:\Windows\System32\perfh007.dat
2013-06-24 17:56 - 2009-07-14 19:58 - 00148144 ____A C:\Windows\System32\perfc007.dat
2013-06-24 17:56 - 2009-07-14 07:13 - 01613412 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-24 11:48 - 2013-06-24 11:48 - 00000000 ____D C:\Users\Alfred\Documents\Trojaner.board.de
2013-06-23 21:28 - 2013-06-23 17:28 - 00000000 ____D C:\Users\Alfred\Downloads\downloads bis 22.6.2013
2013-06-23 09:01 - 2013-06-23 09:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-22 00:29 - 2012-12-02 23:05 - 00000448 ____A C:\Windows\Tasks\PC Utility Kit Update3.job
2013-06-19 00:25 - 2010-06-18 11:33 - 00000000 ____D C:\Windows\Minidump
2013-06-19 00:25 - 2010-06-01 14:29 - 00000000 ____D C:\Windows\Panther
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-18 23:45 - 2013-06-16 20:38 - 00002151 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-18 09:04 - 2013-06-18 09:04 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 09:03 - 2013-06-18 09:03 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-17 23:30 - 2013-06-18 08:40 - 00053809 ____A C:\Users\Alfred\Desktop\fsx.CFG
2013-06-17 10:40 - 2010-08-28 11:40 - 00003584 ____A C:\Users\Alfred\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-16 21:19 - 2010-09-21 16:07 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\Azureus
2013-06-16 20:46 - 2013-06-16 20:46 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 20:45 - 2013-06-16 20:45 - 00001132 ____A C:\Users\Public\Desktop\RealPlayer.lnk
2013-06-16 20:45 - 2010-12-23 13:32 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\Real
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 20:44 - 2010-12-23 13:32 - 00000000 ____D C:\ProgramData\Real
2013-06-16 20:43 - 2011-03-22 21:40 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00201872 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-06-16 20:42 - 2011-03-22 21:40 - 00499712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-06-16 20:42 - 2011-03-22 21:40 - 00348160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-06-16 20:39 - 2010-12-21 22:06 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-16 10:59 - 2013-06-16 10:59 - 00001290 ____A C:\Users\Alfred\Desktop\F A V O R I T E N - Verknüpfung.lnk
2013-06-15 14:01 - 2013-06-15 14:01 - 00001113 ____A C:\Users\Alfred\Desktop\Mozilla Firefox.lnk
2013-06-14 22:06 - 2012-10-06 20:31 - 00000000 ____D C:\Users\Alfred\Documents\Flight Simulator X files
2013-06-14 22:06 - 2010-06-07 11:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-14 20:58 - 2012-06-01 15:28 - 00000000 ____D C:\Users\Alfred\Documents\4.AVIATION
2013-06-13 22:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-13 21:15 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-13 14:11 - 2013-06-13 14:11 - 00000980 ____A C:\Users\Public\Desktop\SSD Fresh.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Users\Alfred\AppData\Local\Abelssoft
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Program Files (x86)\SSD Fresh
2013-06-12 23:49 - 2010-06-01 14:10 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 08:24 - 2009-07-14 06:45 - 02231720 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-11 16:13 - 2013-06-11 15:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-11 16:13 - 2012-08-13 12:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-11 09:54 - 2012-05-31 09:11 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 09:54 - 2011-05-21 08:12 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-13 22:10
==================== End Of Log ============================
AdditionFRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-06-2013 02
Ran by Alfred at 2013-06-26 12:09:39
Running from C:\Users\Alfred\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
flyBalaton Sármellék LHSM scenery FSX v1.0 (HKCU)
737 Captain (737-100 Exterior Model) 0.2 (x32 Version: 0.2.00)
737 Pilot in Command (HKCU)
777 Captain (777-200 Exterior Model) 0.1 (x32 Version: 0.1.00)
A2A Accu-Sim P-51 (x32)
A2A Wings of POWER 3 P47 Razorback (x32)
A2A Wings of POWER 3 P-51 (x32)
A2A Wings of Silver B377 Stratocruiser (x32)
Accu-Feel (x32)
Acronis Drive Monitor (x32 Version: 1.0.187)
Acronis*True*Image*Home (x32 Version: 13.0.5055)
Adisutjipto scenery (x32)
Adobe Acrobat 4.0 (x32 Version: 4.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.3.300.270)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.202)
Adobe Photoshop 7.0 (x32 Version: 7.0)
aerofly FS (x32 Version: 1.0.9.11)
Aerosoft's - Aerosoft Launcher (x32 Version: 1.1.0.1)
aerosoft's - Approaching Innsbruck X (x32 Version: 1.20)
Aerosoft's - DHC-6 Twin Otter X (x32 Version: 1.10)
Aerosoft's - Dornier Do-27 FSX (x32 Version: 1.00)
Aerosoft's - F-16 Fighting Falcon - Mission Pack (x32 Version: 1.00)
aerosoft's - Faro X (x32 Version: 1.01)
Aerosoft's - FlorenceX (x32 Version: 1.04)
aerosoft's - German Airports 1 - Friedrichshafen (x32 Version: 1.01)
Aerosoft's - German Airports 1 - Friedrichshafen X (x32 Version: 1.01)
aerosoft's - German Airports 2 - Dortmund X (x32 Version: 1.00)
aerosoft's - German Airports 2-Hannover X (x32 Version: 1.00)
aerosoft's - German Airports 2-Leipzig X (x32 Version: 1.00)
aerosoft's - German Airports 3 - Berlin-Tegel X (x32 Version: 1.00)
aerosoft's - German Airports 3 - Bremen X (x32 Version: 1.00)
aerosoft's - German Airports 3 - Hamburg X (x32 Version: 1.00)
Aerosoft's - Hawaii Dillingham X (x32 Version: 1.00)
Aerosoft's - HUGHES H-1B SPECIAL (x32 Version: 1.00)
Aerosoft's - Keflavik X (x32 Version: 1.00)
aerosoft's - London City Airport X (x32 Version: 1.00)
aerosoft's - Lukla X - Mount Everest (x32 Version: 1.00)
aerosoft's - Madeira X (x32 Version: 1.00)
aerosoft's - Mallorca X for FSX (x32 Version: 1.00)
Aerosoft's - Manhattan X (x32 Version: 1.00)
Aerosoft's - Mega Airport Budapest (x32 Version: 1.50)
aerosoft's - Mega Airport Frankfurt X (x32 Version: 1.01)
aerosoft's - Mega Airport Lisbon X (x32 Version: 1.10)
aerosoft's - Mega Airport Madrid Barajas (x32 Version: 1.00)
aerosoft's - Mega Airport Paris CDG X (x32 Version: 1.00)
aerosoft's - Mega Airport Stockholm Arlanda (x32 Version: 1.10)
aerosoft's - Mega Airport Stockholm Arlanda X (x32 Version: 1.00)
aerosoft's - Mega Airport Zurich 2012 - FS2004 (x32 Version: 1.00)
Aerosoft's - Mega Airport Zurich 2012 - FSX (x32 Version: 1.01)
aerosoft's - Menorca X for FSX (x32 Version: 1.00)
aerosoft's - Mission Legacy 1 - FSX (x32)
Aerosoft's - MonacoX (x32 Version: 1.01)
Aerosoft's - MyTraffic 2010 (x32 Version: 6.00)
aerosoft's - Nice Cote dAzur X (x32 Version: 1.00)
Aerosoft's - PBY Catalina X (x32 Version: 1.00)
aerosoft's - Real Germany 1 - FS2004 (x32)
aerosoft's - Real Germany 3 - FS2004 (x32)
aerosoft's - San Francisco (x32 Version: 2.00)
Aerosoft's - San Francisco X (x32 Version: 2.00)
aerosoft's - Santorini X (x32 Version: 1.00)
aerosoft's - USCitiesX - Chicago (x32 Version: 1.00)
aerosoft's - USCitiesX - Indianapolis (x32 Version: 1.00)
aerosoft's - USCitiesX - New Orleans (x32 Version: 1.00)
aerosoft's - USCitiesX - San Francisco (x32 Version: 1.00)
aerosoft's - Venice X (x32 Version: 1.00)
Aerosoft's - VFR Germany 2 (x32 Version: 1.00)
Aerosoft's - VFR Germany 2010 West (x32 Version: 2.00)
Aerosoft's - VFR Germany 3 (x32 Version: 1.00)
Aerosoft's - VFR Germany 4 (x32 Version: 1.00)
aerosoft's - VFR London X (x32 Version: 1.00)
aerosoft's - Wonderful Madeira - FS2004 (x32)
Aeroworx Super King Air B200 (x32)
Afghanistan - Noshaq (Highest Mountains Package 004) for MSFS 2004 (x32)
AH P38 Megapack for FSX (x32)
Airbus Series Vol.2 (FS X) (HKCU)
Aircraft Factory F4u Corsair (x32)
AirSimmer A320 Basic Edition 1.0 (x32 Version: 1.0)
ALABEO Pitts S-2S (x32 Version: 1.00.00.00)
Apple Application Support (x32 Version: 2.3.3)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Atolls of Tuvalu FSX (x32)
Autogen Trees Update (x32)
Axalp FSX (HKCU)
B-25J "Briefing Time" for FSX (x32)
Beech B60 Duke Rip (x32)
Bellanca Viking Collection Build 4.1 (HKCU)
Boeing 727-200 Advanced FSX SP2 (Version: )
Boeing B737-823 Advanced VC FSX & P3D (Version: 1)
Bonjour (Version: 3.0.0.10)
BufferChm (x32 Version: 130.0.331.000)
C90B King Air HD SERIES FSX (x32 Version: 1.00.00.00)
Captain Sim 707 All-in-One (x32 Version: 1.00)
Carenado Baron 58 FSX (x32 Version: 1.00.00.00)
Carenado C340 II FSX (x32 Version: 1.00.00.00)
Carenado F33A Bonanza (x32 Version: 1.00.00.00)
Carenado V35B Bonanza for FSX (HKCU)
CLOUD9 Bergen FSX 1.01 (x32 Version: 1.01)
CLOUD9 Orlando FSX 1.01 (x32 Version: 1.01)
CLOUD9 Pisa 1.00 (x32 Version: 1.00)
CLOUD9 Xcity Rome 1.01 (x32 Version: 1.01)
CLS Piper Arrow (HKCU)
CoffeeCup Free FTP (x32 Version: 4.3.2)
ConvertHelper 2.2 (x32)
D4300 (x32 Version: 130.0.365.000)
Data Lifeguard Diagnostic for Windows 1.24 (x32)
DeviceDiscovery (x32 Version: 130.0.465.000)
DiaporamaWeb (x32)
DJ_SF_03_D4300_Software_Min (x32 Version: 130.0.365.000)
Dortmund City (x32 Version: 3.0)
Eaglesoft Development Group Citation X 2.0 FSX (HKCU)
Embraer EMB120 Brasilia V1.1 FSX & P3D (Version: 1)
F9F Panther (x32)
FeelThere ERJ v.2 SP1 (HKCU)
FeelThere ERJ v.2 SP2 (HKCU)
Flight Méditerranée Autogen Pack v1.0 (HKCU)
Flight Replicas Super Cub - Complete for FSX (HKCU)
Flight Simulator X (x32)
Flight Simulator X Service Pack 1 (x32)
FlightAlpes Nord AutogenPack (HKCU)
FlightParis AutogenPack (x32)
FlyLogic's - Altenrhein X (x32 Version: 1.00)
FlyLogic's - Bern-Belp X (x32 Version: 1.00)
FlyLogic's - Grenchen FSX (x32 Version: 1.00)
FlyLogic's - Kleinflugplätze Schweiz Teil 4 X (x32 Version: 1.00)
FlyLogic's - Lugano X (x32 Version: 1.00)
FlyLogic's - Patrouille Suisse X (x32 Version: 1.00)
FlySeattleFSX 64 bit (HKCU)
FormatFactory 2.60 (x32 Version: 2.60)
Foxit Creator (x32 Version: 3,0,2,0506)
Foxit PDF Creator Toolbar Updater (HKCU Version: 1.2.0.19709)
Foxit Reader (x32 Version: 4.3.0.1110)
FranceVFR FlightAlpes Sud: AutogenPack (x32)
FranceVFR FlightMeditarranee Autogen Pack v0.90 (HKCU)
Fraps (remove only) (x32)
FRP 2004 (x32)
FS Global 2010 (x32)
FS Global Ultimate - Asia/Oceania (x32)
FS2004 Hawker Siddeley HS.748 (x32)
FS2004 Hawker Siddeley HS.748 Texture pack 1 (x32)
FS2004 Hawker Siddeley HS.748 Texture Pack 2 (x32)
FSAddon Piper Super Cub FSX SP2/Acc (HKCU)
FSDreamTeam Geneva FSX/P3D 1.4.2 (x32)
FSDreamTeam Hawaiian Airports Volume 2 FSX/P3D 1.4 (x32)
FSDreamTeam Honolulu International FSX/P3D 1.2 (x32)
FSFlyingSchool 2010 (x32)
fs-freeware.net Installer - Boeing 737NG 700, 800 and 900 UAL Package version 2.5 (x32 Version: 2.5)
FSX Learner Aircraft (HKCU)
GayaN™ Airbus A340-300 (HKCU)
Gibraltar X 1.00 (x32)
Google Chrome (x32 Version: 27.0.1453.116)
Google Earth Plug-in (x32 Version: 7.0.3.8542)
Google Update Helper (x32 Version: 1.3.21.145)
GPBaseService2 (x32 Version: 130.0.371.000)
Grand Canyon - Photorealistic Scenery (x32)
Greatest Airliners: 727 (x32)
Ground Environment X Atlantic and Pacific Tropics (x32 Version: 1.0)
Ground Environment X Europe (x32)
Ground Environment X North America (x32)
Hamburg-City Scenery (x32)
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000)
HP Customer Participation Program 13.0 (Version: 13.0)
HP Deskjet D4300 Printer Driver Software 13.0 Rel. 3 (Version: 13.0)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP Photosmart Essential 3.5 (Version: 3.5)
HP Product Detection (x32 Version: 11.14.0001)
HP Smart Web Printing 4.51 (Version: 4.51)
HP Solution Center 13.0 (Version: 13.0)
HP Update (x32 Version: 5.003.001.001)
HPDiagnosticAlert (x32 Version: 1.00.0000)
HPPhotoGadget (x32 Version: 130.0.282.000)
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000)
HPPhotosmartEssential (x32 Version: 2.04.0000)
HPProductAssistant (x32 Version: 130.0.371.000)
HPSSupply (x32 Version: 130.0.371.000)
Image Resizer Powertoy Clone for Windows (64 bit) (Version: 2.1)
ImagineSim Chep Lap Kok Airport for FSX 1.00 (x32)
Instant Scenery (x32 Version: 2.03)
iTunes (Version: 11.0.2.26)
Java Auto Updater (x32 Version: 2.0.7.1)
Java(TM) 6 Update 32 (x32 Version: 6.0.320)
Just Flight - 146-200 Jetliner for FSX (F:\FSX\) (x32 Version: 1.00.000)
Just Flight - 146-200 Jetliner for FSX (x32 Version: 1.00.000)
Just Flight - 737 Pilot In Command (FSX) (x32 Version: 1.00.000)
Just Flight - 757 Captain FSX (x32 Version: 1.00.000)
Just Flight - 757 Jetliner - Freemium Livery Pack 7 (x32 Version: 1.00.000)
Just Flight - 757 Jetliner Freemium (x32 Version: 1.00.000)
JustFlight Blackbox Simulation Boeing 737 Professional (FSX) (x32 Version: (FSX))
KCLE v1.1.2 for FSX (x32 Version: 1.1.2)
KDAL v1.1.2 for FSX (x32 Version: 1.1.2)
KLAX v1.1.2 for FSX (Version: 1.1.2)
KLGA La Guardia FSX (x32)
KMCO v1.1.2 for FSX (Version: 1.1.2)
KMEM v1.1.1 for FS9 (Version: 1.1.1)
KMEM v1.1.2 for FSX (Version: 1.1.2)
KRDU v2.1.2 for FSX (x32 Version: 2.1.2)
L-1011 Captain (1011-1 Exterior Model) 0.1 (x32 Version: 0.1.00)
La Guadeloupe (x32)
LAGO FS Falcon FS2004 version 2.00 (x32 Version: 2.00.00)
Level-D Simulations 767-300 (x32)
LFLB - Chambéry Aix les Bains FSX (HKCU)
LFLC - Clermont-Ferrand FSX (HKCU)
LLH5X (x32)
Logitech Gaming Software 5.10 (Version: 5.10.127)
Mailsoft's - Kleinflugplätze 6 for FS2004 (x32 Version: 1.00)
Mailsoft's - Kleinflugplätze Schweiz Teil 3 (x32 Version: 1.00)
Mailsoft's - Kleinflugplätze Schweiz Teil 3 X (x32 Version: 1.00)
Mailsoft's - Kleinflugplätze Schweiz Teil 5 X (x32 Version: 1.00)
Mailsoft's - Kleinflugplätze Schweiz Teil 6 X (x32 Version: 1.00)
Mailsoft's - Sion X (x32 Version: 1.00)
Mailsoft's - Switzerland Professional (x32 Version: 1.00)
Mailsoft's - Switzerland Professional X (x32 Version: 1.00)
MarketResearch (x32 Version: 130.0.374.000)
Marshall Islands (x32)
MegaSceneryX Las Vegas (x32 Version: 1)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Flight Simulator X (x32 Version: 1.00.0000)
Microsoft Flight Simulator X (x32 Version: 10.0.60905)
Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0)
Microsoft IntelliPoint 8.0 (Version: 8.0.225.0)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MiG-17 for FSX (HKCU)
MIRAGE F1 for FSX SP2 or Acceleration (HKCU)
Mirage IIIS Interceptor (HKCU)
Motherboard Monitor 5 (x32 Version: 5)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0)
Mudry Cap-10 (HKCU)
Mystere IVA (HKCU)
Nauru International (x32 Version: 1.0.0.0)
Newport - Kalaupapa Hawaii X (HKCU)
nHancer (Version: 2.5.0900)
nHancer (x32 Version: 2.5.0900)
NMG Cape Town International 2012 (FSX) (x32)
NVIDIA 3D Vision Controller-Treiber 301.42 (Version: 301.42)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (x32 Version: 9.12.0213)
NVIDIA PhysX-Systemsoftware 9.12.0213 (Version: 9.12.0213)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenOffice.org 3.2 (x32 Version: 3.2.9502)
oZone3D.Net FurMark v1.8.2 (x32)
PA32R SARATOGA SP FSX (x32 Version: 1.00.00.00)
Paragon Backup & Recovery™ 2012 Free (x32 Version: 90.00.0003)
PC Utility Kit (x32 Version: 3.1.5.0)
PDF Architect (x32 Version: 1.0.41.8362)
PDFCreator (x32 Version: 1.6.1)
Photo Real Chicago X (HKCU)
Phuket International Airport for FSX (x32 Version: 1.0.0.0)
PIC 737 Call 1.0 (x32 Version: 1.0)
PMDG BAe JS4100 (x32 Version: 1.10.1016)
PMDG_MD11_FSX (x32 Version: 1.20.0055)
PMDGMD11X_PW_SR (x32 Version: 1.00.0000)
PMDGMD11X_PW_SR2 (x32 Version: 1.00.0000)
PNG Bush Flying (x32 Version: 1.0.0.0)
POSKY Boeing B737-900 Alaska Airlines FSX (Version: )
POSKY Embraer ERJ 135 FSX FSX (Version: FSX)
POSKY Embraer ERJ 145 FSX (Version: FSX)
Project Tupolev Tu-154m for MS FS2004 (HKCU)
PSS - Boeing 757 Pro. v1.3 (x32)
QualityWings Ultimate 146 Collection FSX (x32)
QuickTime (x32 Version: 7.73.80.64)
Razer Game Booster (x32 Version: 3.5.6.0)
Real Environment Xtreme (x32 Version: 1.0.2008.1128)
Real Environment Xtreme FS2004 (x32 Version: 1.0.8)
RealDownloader (x32 Version: 1.3.2)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.2)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Rennes St-Jacques (x32)
RGFLIGHT-Salzburg-Airport-2008-X-v1.0 (HKCU)
Rio de Janeiro Galeão Intl' FSX v1.0 (x32)
SAAB 35 Draken 3.0 (x32)
SAEZ-SVMI v1.1.2 for FSX (Version: 1.1.2)
Safari (x32 Version: 5.34.57.2)
Samui International Airport for FS2004 (x32)
SBD Dauntless FSX (HKCU)
SceneryTech Asia Landclass v1.0 (x32 Version: 1.0)
SceneryTech Indo-Pacific Landclass v1.0 (x32 Version: 1.0)
SceneryTech North America Landclass v1.4 (x32 Version: 1.4)
SceneryTech South America Landclass v1.0 (x32 Version: 1.0)
Shop for HP Supplies (Version: 13.0)
Skydance Helipad (HKCU)
Smart Data Recovery v4.3 (x32 Version: 4.3)
SmartWebPrinting (x32 Version: 130.0.457.000)
Soekarno-Hatta airport scenery (x32)
Sofia Airport (LBSF) v2.0 (x32)
SolutionCenter (x32 Version: 130.0.373.000)
SSD Fresh (x32 Version: 2013)
Status (x32 Version: 130.0.469.000)
SuperFortress 'Mania' - PRE-RELEASE - B-29B (x32)
Swordfish X (HKCU)
System Requirements Lab (x32)
TeamViewer 5 (x32 Version: 5.1.13999 )
Thai Creation - Nepal, Kathmandu VNKT (FSX Portover) (x32)
The Real VCBI (HKCU)
The Very Singapore (x32)
Toolbox (x32 Version: 130.0.648.000)
TrayApp (x32 Version: 130.0.422.000)
TreeX V2 (x32)
Trieste FSX (x32)
UnloadSupport (x32 Version: 11.0.0)
Unlocker 1.9.1-x64 (Version: 1.9.1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
USNN Scenery (x32)
VFR-Airfields Final Edition (x32)
VFR-Airfields Locarno (x32)
VFR-Airfields Lugano (x32)
VFR-Airfields Traffic (x32)
VirtualCloneDrive (x32)
VIRTUALI Addon ManagerX (x32)
VTBS-FSX 2010 1.00 Ver.FSX (x32)
Vuze (x32 Version: 4.9.0.0)
Vuze Remote Toolbar (x32 Version: 6.9.0.16)
WashDCX 1.0 (HKCU)
WebReg (x32 Version: 130.0.132.017)
Wings of POWER II: P51 Mustang (x32)
WinRAR archiver
X-treme King Air B200 v.2.0.1 (x32)
YouTube Downloader 3.5 (x32)
YS-11 for FSX (x32 Version: 1.00.0000)
==================== Restore Points =========================
23-06-2013 17:00:50 Windows-Sicherung
23-06-2013 19:59:03 Windows Update
==================== Scheduled Tasks (whitelisted) =============
Task: {05EEE46B-9F5E-45C0-9CD1-D2675C064929} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {12F488FC-F24C-4CE1-8179-5DBE5F671A6F} - System32\Tasks\{90B71D0C-A26D-47EA-8562-791141A2D196} => C:\FSX\ORBX\Scripts\FTXCentral\FTXCentral.exe No File
Task: {1E89487B-881D-4DC6-80E3-7EFAA756BCC4} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {2052A713-CA8B-4CCA-ACBB-ABE8B4C88441} - System32\Tasks\PC Utility Kit => C:\Program Files (x86)\PC Utility Kit\PC Utility Kit\pcutilitykit.exe [2012-11-29] (PC Utility Kit)
Task: {25A5A367-0165-4878-B14F-B1D8DBF07E6B} - System32\Tasks\Install_NSS => C:\Program Files (x86)\DivX\Symantec\scstubinstaller.exe [2010-03-08] (Symantec Corporation)
Task: {39B98B94-798C-4A05-93F0-2402516A048A} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {5674B2E5-B1FF-46A0-9D89-CBEA16E9D43D} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {58266234-6549-4EA8-A2CD-FDB39D35478D} - System32\Tasks\{FEAAE5CB-CC56-4C17-9BBD-90FB7BF32AE7} => C:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI INSTALLER\WOAI INSTALLER unzipped\WOAI Installer.exe No File
Task: {5C2278E2-6A74-466E-AC92-6AEF4E3B18EF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe No File
Task: {5EEBCB75-5D07-4331-83F3-65029E5DD7DF} - System32\Tasks\User_Feed_Synchronization-{B9570399-0E5E-4E61-89B3-CA9D442C62AF} => C:\Windows\system32\msfeedssync.exe [2013-06-18] (Microsoft Corporation)
Task: {6217D114-77D5-4C52-BFCF-DF39E8BCCE2F} - System32\Tasks\{044B2827-FF37-4CA9-9BFC-3B0AED03929C} => C:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe No File
Task: {735783D6-1E0E-46F1-B8F1-863B49821CEC} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {773B68EB-B269-4A8C-AF6B-D130EBA316C5} - System32\Tasks\PC Utility Kit Update3 => C:\Program Files (x86)\Common Files\PC Utility Kit\UUS3\Update3.exe [2012-03-27] (PC Utility Kit)
Task: {785BA585-8675-4F55-A592-C0F0ADDB73C2} - System32\Tasks\FRAPS => C:\Program Files (x86)\fraps.exe [2010-03-31] (Beepa P/L)
Task: {82EF7FE5-2D83-415F-9A94-8CD58491B2C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe No File
Task: {86FC6697-C070-4564-9512-E3A611F00E67} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {8F149B57-D2EC-4C5D-AA38-A6ED0CBB580A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-11] (Adobe Systems Incorporated)
Task: {9627C922-1B9B-4EFB-8C7A-919BCA5EDC0B} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {9B60C4AD-9DA0-4907-A8BF-3E8434E0A04E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {A34A30DE-F01B-46C4-9D82-20B95A84EDDB} - System32\Tasks\{E118B320-009D-4A25-BF00-2A474247AA2E} => C:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe No File
Task: {BC15111F-D714-47BD-922D-8A4791757D21} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {BDA32272-1823-4928-9935-14BAC6A1F738} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11] (Google Inc.)
Task: {C0BF91BA-BF91-45A6-93F1-9495935C7634} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {C368B004-6099-4FFC-B091-FA1FA1E913E1} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {C9574E93-7139-4E90-A9C3-91D7BCE4D0F8} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {D098F37F-393C-4DD0-ACA2-00096CF7F8CB} - System32\Tasks\{14E8ACFB-E0CC-411A-A771-F01482F8C473} => C:\FSX\ORBX\Scripts\FTXCentral\FTXCentral.exe No File
Task: {D346836A-A89A-4490-B510-B9CD80208443} - System32\Tasks\PC Utility Kit Registration3 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {D4C49F25-BB96-4783-8ABC-31D510740F97} - System32\Tasks\{3E095D85-DC07-4C02-8946-1CEF64E631C6} => C:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe No File
Task: {DECBC250-577A-461A-9463-A565B05CF49D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {E5223509-5072-4856-8EE2-E3FE311DEB9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11] (Google Inc.)
Task: {F2779192-8E3D-4E42-A930-D60215482C55} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-04-16] (RealNetworks, Inc.)
Task: {FA4CEEE6-F259-419A-86B4-73E36E8FA6DD} - System32\Tasks\{00EFEFE2-1944-4C07-9C49-A9C2C400669B} => C:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI INSTALLER\WOAI INSTALLER unzipped\WOAI Installer.exe No File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Install_NSS.job => C:\Program Files (x86)\DivX\Symantec\scstubinstaller.exe
Task: C:\Windows\Tasks\PC Utility Kit Registration3.job => C:\Windows\system32\rundll32.exe
Task: C:\Windows\Tasks\PC Utility Kit Update3.job => C:\Program Files (x86)\Common Files\PC Utility Kit\UUS3\Update3.exe
Task: C:\Windows\Tasks\PC Utility Kit.job => C:\Program Files (x86)\PC Utility Kit\PC Utility Kit\pcutilitykit.exe
==================== Faulty Device Manager Devices =============
Name: MpKslc6ca88d5
Description: MpKslc6ca88d5
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKslc6ca88d5
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/25/2013 04:36:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9999
Error: (06/25/2013 04:36:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9999
Error: (06/25/2013 04:36:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/25/2013 04:36:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9001
Error: (06/25/2013 04:36:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9001
Error: (06/25/2013 04:36:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/25/2013 04:36:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8003
Error: (06/25/2013 04:36:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8003
Error: (06/25/2013 04:36:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/25/2013 04:36:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7004
System errors:
=============
Error: (06/26/2013 00:03:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (06/26/2013 00:03:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (06/26/2013 00:01:01 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mbmiodrvr
Error: (06/25/2013 08:37:07 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.
Error: (06/25/2013 02:30:24 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.
Error: (06/25/2013 09:48:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (06/25/2013 09:48:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (06/25/2013 09:46:54 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mbmiodrvr
Error: (06/24/2013 11:35:47 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.
Error: (06/24/2013 11:35:45 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk3\DR3 gefunden.
Microsoft Office Sessions:
=========================
Error: (06/25/2013 04:36:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9999
Error: (06/25/2013 04:36:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9999
Error: (06/25/2013 04:36:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/25/2013 04:36:52 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9001
Error: (06/25/2013 04:36:52 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9001
Error: (06/25/2013 04:36:52 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/25/2013 04:36:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8003
Error: (06/25/2013 04:36:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8003
Error: (06/25/2013 04:36:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/25/2013 04:36:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7004
CodeIntegrity Errors:
===================================
Date: 2013-06-26 11:59:39.298
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-26 11:59:39.189
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-25 09:45:29.674
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-25 09:45:29.565
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-24 10:50:50.459
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-24 10:50:50.350
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-23 21:47:00.474
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-23 21:47:00.365
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-23 09:00:49.457
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-23 09:00:49.348
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 26%
Total physical RAM: 6141.49 MB
Available physical RAM: 4491.43 MB
Total Pagefile: 12281.17 MB
Available Pagefile: 10299.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Volume) (Fixed) (Total:97.66 GB) (Free:9.38 GB) NTFS (Disk=0 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:488.28 GB) (Free:133.03 GB) NTFS (Disk=0 Partition=2)
Drive e: (Volume) (Fixed) (Total:811.32 GB) (Free:6.18 GB) NTFS (Disk=0 Partition=3)
Drive f: (Volume) (Fixed) (Total:119.24 GB) (Free:4.23 GB) NTFS (Disk=1 Partition=1)
Drive h: (AFM_DISK1) (CDROM) (Total:5.27 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 4BD0ABA5)
Partition 1: (Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=488 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=811 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 119 GB) (Disk ID: 7007A0F9)
Partition 1: (Active) - (Size=119 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
26.06.2013, 12:24
| #4 |
| /// the machine /// TB-Ausbilder | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Hi, Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.06.2013, 14:03
| #5 |
| | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Hallo Schrauber, als erstes: habe es unterlassen, die mbar.exe zu entpacken, habe direkt vom win.rar.file die exe und den cleanup ausgeführt. Es gab 11 viren, der 2. scan ergab 0 viren. das erste log ist also nicht mehr vorhanden... Gruss und Dank Anatol 2.scan Malwarebytes Anti-Rootkit BETA 1.06.0.1004 Malwarebytes : Free Anti-Malware download Database version: v2013.06.26.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16618 Alfred :: ALFRED-PC [administrator] 26.06.2013 14:33:04 mbar-log-2013-06-26 (14-33-04).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUM | P2P Scan options disabled: PUP Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged. Objects scanned: 277243 Time elapsed: 14 minute(s), 30 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) |
|
26.06.2013, 14:30
| #6 | |
| /// the machine /// TB-Ausbilder | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Schau mal ob es auf dem Desktop oder sonstwo gespeichert werden. Extrem uncoole Aktion, so nebenbei bemerkt, ich muss schon wissen was entfernt wurde..... Die Anleitungen sind nit aus Spass so geschrieben  Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ --> PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung |
|
26.06.2013, 15:40
| #7 |
| | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Hallo Schrauber. oh. sorry, das war absolut dumm von mir... das erste mbar.log ist leider unauffindbar!! Gruss Anatol hier das combofix log: Combofix Logfile: Code:
ATTFilter ComboFix 13-06-25.01 - Alfred 26.06.2013 16:26:13.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.41.1031.18.6141.4046 [GMT 2:00]
ausgeführt von:: c:\users\Alfred\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\fraps.exe
c:\program files (x86)\fraps32.dll
c:\program files (x86)\fraps64.dat
c:\program files (x86)\fraps64.dll
c:\program files (x86)\frapslcd.dll
c:\program files (x86)\Uninstall.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\SaveByclick
c:\programdata\Microsoft\Windows\Start Menu\Programs\SaveByclick\SaveByclick.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SaveByclick\Uninstall.lnk
c:\users\Alfred\AppData\Roaming\Local
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\.ddr
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\1.ddi
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\Post_Install_RB_HiQ_de.divx.ddr
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\.ddp
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Post_Install_RB_HiQ_de.divx
c:\users\Alfred\AppData\Roaming\Microsoft\Windows\Recent\World of AI Packages.URL
c:\users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenBitCoin.exe.lnk
c:\windows\IsUn0407.exe
c:\windows\iun6002.exe
c:\windows\SysWow64\frapsvid.dll
c:\windows\UNWISE.EXE
E:\install.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-05-26 bis 2013-06-26 ))))))))))))))))))))))))))))))
.
.
2013-06-26 14:33 . 2013-06-26 14:33 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-26 14:33 . 2013-06-26 14:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-26 12:08 . 2013-06-26 12:52 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2013-06-26 11:52 . 2013-06-26 11:52 -------- d-----w- c:\programdata\Malwarebytes
2013-06-26 10:12 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D9A87D16-1F79-4A2B-9EE9-699BAA228F09}\mpengine.dll
2013-06-26 10:08 . 2013-06-26 10:08 -------- d-----w- C:\FRST
2013-06-25 07:57 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-21 12:02 . 2013-06-21 12:00 964552 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6D463024-1BF2-4E11-9EE1-71BC5BF6A7C1}\gapaengine.dll
2013-06-19 07:15 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-19 07:15 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-18 07:03 . 2013-06-18 07:03 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-16 18:46 . 2013-06-16 18:46 -------- d-----w- c:\users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 18:44 . 2013-06-16 18:44 -------- d-----w- c:\program files (x86)\RealNetworks
2013-06-16 18:44 . 2013-06-16 18:44 -------- d-----w- c:\programdata\RealNetworks
2013-06-13 12:11 . 2013-06-13 12:11 -------- d-----w- c:\users\Alfred\AppData\Local\Abelssoft
2013-06-13 12:11 . 2013-06-13 12:11 -------- d-----w- c:\program files (x86)\SSD Fresh
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-16 18:42 . 2011-03-22 19:40 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll
2013-06-16 18:42 . 2011-03-22 19:40 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2013-06-12 21:49 . 2010-06-01 12:10 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-11 07:54 . 2012-05-31 07:11 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-11 07:54 . 2011-05-21 06:12 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-11 07:29 . 2011-03-25 07:25 964552 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-02 15:29 . 2010-06-01 11:57 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-06-11 07:33 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-06-11 07:33 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-06-11 07:33 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-06-11 07:33 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-06-11 07:33 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-06-11 07:33 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\prxtbVuze.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\Vuze_Remote\prxtbVuze.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\prxtbVuze.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-01-28 59720]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-02-20 152392]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2013-06-16 295512]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 MpKslc6ca88d5;MpKslc6ca88d5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A2AFAD69-B5C2-49B6-91B7-2ABC590A3EF2}\MpKslc6ca88d5.sys;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A2AFAD69-B5C2-49B6-91B7-2ABC590A3EF2}\MpKslc6ca88d5.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251);c:\windows\system32\DRIVERS\tdrpm251.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm251.sys [x]
S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys;c:\windows\SYSNATIVE\Drivers\uim_vimx64.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files (x86)\PDF Architect\HelperService.exe;c:\program files (x86)\PDF Architect\HelperService.exe [x]
S2 PDF Architect Service;PDF Architect Service;c:\program files (x86)\PDF Architect\ConversionService.exe;c:\program files (x86)\PDF Architect\ConversionService.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-18 21:44 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-31 07:54]
.
2013-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11 12:25]
.
2013-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11 12:25]
.
2010-06-06 c:\windows\Tasks\Install_NSS.job
- c:\program files (x86)\DivX\Symantec\scstubinstaller.exe [2010-03-08 18:00]
.
2013-06-25 c:\windows\Tasks\PC Utility Kit Registration3.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
2013-06-21 c:\windows\Tasks\PC Utility Kit Update3.job
- c:\program files (x86)\Common Files\PC Utility Kit\UUS3\Update3.exe [2012-03-27 19:30]
.
2012-12-28 c:\windows\Tasks\PC Utility Kit.job
- c:\program files (x86)\PC Utility Kit\PC Utility Kit\pcutilitykit.exe [2012-11-29 21:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.ch/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\
FF - ExtSQL: 2013-06-16 20:45; {FCE04E1F-9378-4f39-96F6-5689A9159E45}; c:\programdata\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF - ExtSQL: !HIDDEN! 2012-10-18 21:43; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{c840e246-6b95-475e-9bd7-caa1c7eca9f2} - (no file)
URLSearchHooks-{134b012b-132d-4516-a786-2395828640b5} - (no file)
c:\users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Analoguhr.lnk - c:\users\Alfred\Documents\4.AVIATION\Neuer Ordner\n\CLOCK.EXE
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file)
WebBrowser-{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - (no file)
AddRemove-A2A Wings of POWER 3 P47 Razorback - c:\windows\UNWISE.EXE
AddRemove-A2A Wings of Silver B377 Stratocruiser - c:\windows\UNWISE.EXE
AddRemove-Adobe Acrobat 4.0 - c:\windows\ISUN0407.EXE
AddRemove-Fraps - c:\program files (x86)\uninstall.exe
AddRemove-KLGA La Guardia FSX - f:\fsx\Uninstall KLGA.exe
AddRemove-tsimlipqxx - c:\windows\iun6002.exe
AddRemove-tsimsbglxx - c:\windows\iun6002.exe
AddRemove-X-treme King Air B200v.2.0.1 - c:\windows\iun6002.exe
AddRemove- flyBalaton Sármellék LHSM scenery FSX v1.0 - e:\f gamerpc\FSX\Uninstal.exe
AddRemove-Airbus Series Vol.2 (FS X) - f:\fsx\Uninstal_Airbus2X_wilco.exe
AddRemove-Axalp FSX - f:\fsx\Uninstall Axalp FSX
AddRemove-Bellanca Viking Collection Build 4.1 - f:\fsx\Bellanca Viking Collection Uninstall
AddRemove-CLS Piper Arrow - f:\fsx\CLS_Arrow_FSX_remove
AddRemove-FeelThere ERJ v.2 SP1 - e:\f gamerpc\FSX\Uninstal-fterj2.exe
AddRemove-FeelThere ERJ v.2 SP2 - e:\f gamerpc\FSX\Uninstal-fterj2.exe
AddRemove-Flight Replicas Super Cub - Complete for FSX - e:\f gamerpc\FSX\Uninstal FR Super Cub Complete for FSX.exe
AddRemove-FlySeattleFSX 64 bit - e:\f gamerpc\FSX\Addon Scenery\FlyTampa-Seattle\Uninstal.exe
AddRemove-Acc - f:\fsx\UninstalTCSP2.exe
AddRemove-FSX Learner Aircraft - f:\fsx\Uninstall FSX Learner
AddRemove-LFLC - Clermont-Ferrand FSX - e:\f gamerpc\FSX\France VFR\LFLC - Clermont-Ferrand\uninstall_LFLC_fsx.exe
AddRemove-MiG-17 for FSX - e:\f gamerpc\FSX\UnMiG17FSX.exe
AddRemove-Mirage IIIS Interceptor - f:\fsx\Mirage IIIS uninstall.exe
AddRemove-Mystere IVA - f:\fsx\Uninstal_MystereIVA_FSX.exe
AddRemove-Newport - Kalaupapa Hawaii X - e:\f gamerpc\FSX\Uninstal.exe
AddRemove-Photo Real Chicago X - c:\users\Alfred\Desktop\Neuer Ordner\Uninstal.exe
AddRemove-RGFLIGHT-Salzburg-Airport-2008-X-v1.0 - e:\f gamerpc\FSX\RGFLIGHT-Salzburg-Airport-2008-X-Uninstaller
AddRemove-Skydance Helipad - e:\f gamerpc\FSX\Uninstal.exe
AddRemove-WashDCX 1.0 - e:\f gamerpc\FSX\Uninstal.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.download\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="SafariDownload"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.safariextz\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="SafariExtension"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="IE.AssocFile.SVG"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webarchive\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
"Progid"="SafariHTML"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-26 16:36:43
ComboFix-quarantined-files.txt 2013-06-26 14:36
.
Vor Suchlauf: 8'601'550'848 Bytes frei
Nach Suchlauf: 7'873'175'552 Bytes frei
.
- - End Of File - - 4CC6798675F55DEF0B05F6B4B636BEC2
5C616939100B85E558DA92B899A0FC36 Geändert von suvannapum56 (26.06.2013 um 15:52 Uhr) |
|
26.06.2013, 17:13
| #8 |
| /// the machine /// TB-Ausbilder | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST Log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.06.2013, 17:50
| #9 |
| | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung hallo Schrauber, hier die gewünschten 3 logs: adwcleaner/JRT/FRST vielen Dank und schönen Abend Gruss Anatol Combofix Logfile: Code:
ATTFilter ComboFix 13-06-25.01 - Alfred 26.06.2013 16:26:13.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.41.1031.18.6141.4046 [GMT 2:00]
ausgeführt von:: c:\users\Alfred\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\fraps.exe
c:\program files (x86)\fraps32.dll
c:\program files (x86)\fraps64.dat
c:\program files (x86)\fraps64.dll
c:\program files (x86)\frapslcd.dll
c:\program files (x86)\Uninstall.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\SaveByclick
c:\programdata\Microsoft\Windows\Start Menu\Programs\SaveByclick\SaveByclick.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SaveByclick\Uninstall.lnk
c:\users\Alfred\AppData\Roaming\Local
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\.ddr
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\1.ddi
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\Post_Install_RB_HiQ_de.divx.ddr
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\.ddp
c:\users\Alfred\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Post_Install_RB_HiQ_de.divx
c:\users\Alfred\AppData\Roaming\Microsoft\Windows\Recent\World of AI Packages.URL
c:\users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenBitCoin.exe.lnk
c:\windows\IsUn0407.exe
c:\windows\iun6002.exe
c:\windows\SysWow64\frapsvid.dll
c:\windows\UNWISE.EXE
E:\install.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-05-26 bis 2013-06-26 ))))))))))))))))))))))))))))))
.
.
2013-06-26 14:33 . 2013-06-26 14:33 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-26 14:33 . 2013-06-26 14:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-26 12:08 . 2013-06-26 12:52 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2013-06-26 11:52 . 2013-06-26 11:52 -------- d-----w- c:\programdata\Malwarebytes
2013-06-26 10:12 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D9A87D16-1F79-4A2B-9EE9-699BAA228F09}\mpengine.dll
2013-06-26 10:08 . 2013-06-26 10:08 -------- d-----w- C:\FRST
2013-06-25 07:57 . 2013-06-12 03:08 9552976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-21 12:02 . 2013-06-21 12:00 964552 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6D463024-1BF2-4E11-9EE1-71BC5BF6A7C1}\gapaengine.dll
2013-06-19 07:15 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-19 07:15 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-18 07:03 . 2013-06-18 07:03 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-16 18:46 . 2013-06-16 18:46 -------- d-----w- c:\users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 18:44 . 2013-06-16 18:44 -------- d-----w- c:\program files (x86)\RealNetworks
2013-06-16 18:44 . 2013-06-16 18:44 -------- d-----w- c:\programdata\RealNetworks
2013-06-13 12:11 . 2013-06-13 12:11 -------- d-----w- c:\users\Alfred\AppData\Local\Abelssoft
2013-06-13 12:11 . 2013-06-13 12:11 -------- d-----w- c:\program files (x86)\SSD Fresh
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-16 18:42 . 2011-03-22 19:40 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll
2013-06-16 18:42 . 2011-03-22 19:40 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2013-06-12 21:49 . 2010-06-01 12:10 75825640 ----a-w- c:\windows\system32\MRT.exe
2013-06-11 07:54 . 2012-05-31 07:11 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-11 07:54 . 2011-05-21 06:12 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-11 07:29 . 2011-03-25 07:25 964552 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-02 15:29 . 2010-06-01 11:57 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-06-11 07:33 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-06-11 07:33 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-06-11 07:33 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-06-11 07:33 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-06-11 07:33 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-06-11 07:33 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\prxtbVuze.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
2011-05-09 09:49 176936 ----a-w- c:\program files (x86)\Vuze_Remote\prxtbVuze.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files (x86)\Vuze_Remote\prxtbVuze.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-01-28 59720]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-02-20 152392]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2013-06-16 295512]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 MpKslc6ca88d5;MpKslc6ca88d5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A2AFAD69-B5C2-49B6-91B7-2ABC590A3EF2}\MpKslc6ca88d5.sys;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A2AFAD69-B5C2-49B6-91B7-2ABC590A3EF2}\MpKslc6ca88d5.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251);c:\windows\system32\DRIVERS\tdrpm251.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm251.sys [x]
S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys;c:\windows\SYSNATIVE\Drivers\uim_vimx64.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files (x86)\PDF Architect\HelperService.exe;c:\program files (x86)\PDF Architect\HelperService.exe [x]
S2 PDF Architect Service;PDF Architect Service;c:\program files (x86)\PDF Architect\ConversionService.exe;c:\program files (x86)\PDF Architect\ConversionService.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-18 21:44 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-31 07:54]
.
2013-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11 12:25]
.
2013-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11 12:25]
.
2010-06-06 c:\windows\Tasks\Install_NSS.job
- c:\program files (x86)\DivX\Symantec\scstubinstaller.exe [2010-03-08 18:00]
.
2013-06-25 c:\windows\Tasks\PC Utility Kit Registration3.job
- c:\windows\system32\rundll32.exe [2009-07-13 01:14]
.
2013-06-21 c:\windows\Tasks\PC Utility Kit Update3.job
- c:\program files (x86)\Common Files\PC Utility Kit\UUS3\Update3.exe [2012-03-27 19:30]
.
2012-12-28 c:\windows\Tasks\PC Utility Kit.job
- c:\program files (x86)\PC Utility Kit\PC Utility Kit\pcutilitykit.exe [2012-11-29 21:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.ch/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\
FF - ExtSQL: 2013-06-16 20:45; {FCE04E1F-9378-4f39-96F6-5689A9159E45}; c:\programdata\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF - ExtSQL: !HIDDEN! 2012-10-18 21:43; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{c840e246-6b95-475e-9bd7-caa1c7eca9f2} - (no file)
URLSearchHooks-{134b012b-132d-4516-a786-2395828640b5} - (no file)
c:\users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Analoguhr.lnk - c:\users\Alfred\Documents\4.AVIATION\Neuer Ordner\n\CLOCK.EXE
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file)
WebBrowser-{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - (no file)
AddRemove-A2A Wings of POWER 3 P47 Razorback - c:\windows\UNWISE.EXE
AddRemove-A2A Wings of Silver B377 Stratocruiser - c:\windows\UNWISE.EXE
AddRemove-Adobe Acrobat 4.0 - c:\windows\ISUN0407.EXE
AddRemove-Fraps - c:\program files (x86)\uninstall.exe
AddRemove-KLGA La Guardia FSX - f:\fsx\Uninstall KLGA.exe
AddRemove-tsimlipqxx - c:\windows\iun6002.exe
AddRemove-tsimsbglxx - c:\windows\iun6002.exe
AddRemove-X-treme King Air B200v.2.0.1 - c:\windows\iun6002.exe
AddRemove- flyBalaton Sármellék LHSM scenery FSX v1.0 - e:\f gamerpc\FSX\Uninstal.exe
AddRemove-Airbus Series Vol.2 (FS X) - f:\fsx\Uninstal_Airbus2X_wilco.exe
AddRemove-Axalp FSX - f:\fsx\Uninstall Axalp FSX
AddRemove-Bellanca Viking Collection Build 4.1 - f:\fsx\Bellanca Viking Collection Uninstall
AddRemove-CLS Piper Arrow - f:\fsx\CLS_Arrow_FSX_remove
AddRemove-FeelThere ERJ v.2 SP1 - e:\f gamerpc\FSX\Uninstal-fterj2.exe
AddRemove-FeelThere ERJ v.2 SP2 - e:\f gamerpc\FSX\Uninstal-fterj2.exe
AddRemove-Flight Replicas Super Cub - Complete for FSX - e:\f gamerpc\FSX\Uninstal FR Super Cub Complete for FSX.exe
AddRemove-FlySeattleFSX 64 bit - e:\f gamerpc\FSX\Addon Scenery\FlyTampa-Seattle\Uninstal.exe
AddRemove-Acc - f:\fsx\UninstalTCSP2.exe
AddRemove-FSX Learner Aircraft - f:\fsx\Uninstall FSX Learner
AddRemove-LFLC - Clermont-Ferrand FSX - e:\f gamerpc\FSX\France VFR\LFLC - Clermont-Ferrand\uninstall_LFLC_fsx.exe
AddRemove-MiG-17 for FSX - e:\f gamerpc\FSX\UnMiG17FSX.exe
AddRemove-Mirage IIIS Interceptor - f:\fsx\Mirage IIIS uninstall.exe
AddRemove-Mystere IVA - f:\fsx\Uninstal_MystereIVA_FSX.exe
AddRemove-Newport - Kalaupapa Hawaii X - e:\f gamerpc\FSX\Uninstal.exe
AddRemove-Photo Real Chicago X - c:\users\Alfred\Desktop\Neuer Ordner\Uninstal.exe
AddRemove-RGFLIGHT-Salzburg-Airport-2008-X-v1.0 - e:\f gamerpc\FSX\RGFLIGHT-Salzburg-Airport-2008-X-Uninstaller
AddRemove-Skydance Helipad - e:\f gamerpc\FSX\Uninstal.exe
AddRemove-WashDCX 1.0 - e:\f gamerpc\FSX\Uninstal.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.download\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="SafariDownload"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.safariextz\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="SafariExtension"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="IE.AssocFile.SVG"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webarchive\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-3691312484-3524702341-236613940-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3691312484-3524702341-236613940-1000)
"Progid"="SafariHTML"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-26 16:36:43
ComboFix-quarantined-files.txt 2013-06-26 14:36
.
Vor Suchlauf: 8'601'550'848 Bytes frei
Nach Suchlauf: 7'873'175'552 Bytes frei
.
- - End Of File - - 4CC6798675F55DEF0B05F6B4B636BEC2
5C616939100B85E558DA92B899A0FC36JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by Alfred on 26.06.2013 at 18:36:00.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{48AD4D14-8DFA-415F-B65B-46B0336C004D}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Users\Alfred\appdata\local\directdownloader"
~~~ FireFox
Successfully deleted: [File] C:\Users\Alfred\AppData\Roaming\mozilla\firefox\profiles\xuu6a9cg.default\invalidprefs.js
Successfully deleted: [Folder] C:\Users\Alfred\AppData\Roaming\mozilla\firefox\profiles\xuu6a9cg.default\extensions\50e6b89ea1470@50e6b89ea14a9.com
Emptied folder: C:\Users\Alfred\AppData\Roaming\mozilla\firefox\profiles\xuu6a9cg.default\minidumps [125 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.06.2013 at 18:39:02.41
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-06-2013 02
Ran by Alfred (administrator) on 26-06-2013 18:41:23
Running from C:\Users\Alfred\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(KSE - Korndörfer Software Engineering) C:\Program Files\nHancer\nHancerService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Rocket Division Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer [x]
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)
HKLM-x32\...\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot [295512 2013-06-16] (RealNetworks, Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {BEC15BFA-01C6-44A5-BD78-38BF5EBE0604} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_32 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.633 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Extension: No Name - C:\Users\Alfred\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: DownloadHelper - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Yahoo) - hxxp://ch.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=937811&p={searchTerms}
CHR DefaultSuggestURL: (Yahoo) - hxxp://de.ff.search.yahoo.com/gossip?command={searchTerms}&output=fxjson
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\google\chrome\application\22.0.1229.95\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U32) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.320.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Extension: (YouTube) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealDownloader) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (Gmail) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R2 nHancer; C:\Program Files\nHancer\nHancerService.exe [39424 2010-05-02] (KSE - Korndörfer Software Engineering)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
==================== Drivers (Whitelisted) ====================
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2010-06-06] ()
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2010-06-01] (Acronis)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
U3 akoxst9q; C:\Windows\System32\Drivers\akoxst9q.sys [0 ] (Advanced Micro Devices)
U3 aqhvj7jv; C:\Windows\System32\Drivers\aqhvj7jv.sys [0 ] (Advanced Micro Devices)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz132; \??\C:\Users\Alfred\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [x]
S1 MpKslc6ca88d5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A2AFAD69-B5C2-49B6-91B7-2ABC590A3EF2}\MpKslc6ca88d5.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Documents\JRT.txt
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Desktop\JRT.txt
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\Windows\ERUNT
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\JRT
2013-06-26 18:31 - 2013-06-26 18:31 - 00008732 ____A C:\Users\Alfred\Desktop\AdwCleaner[S1].txt
2013-06-26 18:26 - 2013-06-26 18:27 - 00008732 ____A C:\AdwCleaner[S1].txt
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Downloads\JRT.exe
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Desktop\JRT.exe
2013-06-26 18:21 - 2013-06-26 18:20 - 00648201 ____A C:\Users\Alfred\Desktop\adwcleaner.exe
2013-06-26 18:20 - 2013-06-26 18:20 - 00648201 ____A C:\Users\Alfred\Downloads\adwcleaner.exe
2013-06-26 16:52 - 2013-06-26 16:52 - 00021699 ____A C:\Users\Alfred\Desktop\combofix.log
2013-06-26 16:36 - 2013-06-26 16:36 - 00021699 ____A C:\ComboFix.txt
2013-06-26 16:24 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-26 16:24 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-26 16:24 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-26 16:23 - 2013-06-26 16:36 - 00000000 ___AD C:\Qoobox
2013-06-26 16:23 - 2013-06-26 16:36 - 00000000 ____D C:\ComboFix
2013-06-26 16:23 - 2013-06-26 16:35 - 00000000 ____D C:\Windows\erdnt
2013-06-26 16:20 - 2013-06-26 16:20 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix (1).exe
2013-06-26 16:19 - 2013-06-26 16:19 - 05082915 ____R (Swearware) C:\Users\Alfred\Desktop\ComboFix.exe
2013-06-26 16:18 - 2013-06-26 16:19 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix.exe
2013-06-26 14:30 - 2013-06-26 14:31 - 00000000 ____D C:\Users\Alfred\Desktop\mbar
2013-06-26 14:28 - 2013-06-26 18:29 - 00001326 ____A C:\Windows\PFRO.log
2013-06-26 13:52 - 2013-06-26 13:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-26 13:51 - 2013-06-26 13:51 - 13399154 ____A C:\Users\Alfred\Downloads\mbar-1.06.0.1004.zip
2013-06-26 12:09 - 2013-06-26 12:09 - 00036538 ____A C:\Users\Alfred\Desktop\Addition.txt
2013-06-26 12:08 - 2013-06-26 12:08 - 00000000 ____D C:\FRST
2013-06-26 12:07 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Desktop\FRST64.exe
2013-06-26 12:06 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64.exe
2013-06-24 11:48 - 2013-06-24 11:48 - 00000000 ____D C:\Users\Alfred\Documents\Trojaner.board.de
2013-06-23 17:28 - 2013-06-23 21:28 - 00000000 ____D C:\Users\Alfred\Downloads\downloads bis 22.6.2013
2013-06-23 09:01 - 2013-06-26 18:30 - 00000392 ____A C:\Windows\setupact.log
2013-06-23 09:01 - 2013-06-23 09:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-19 09:15 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-19 09:15 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 09:03 - 2013-06-18 09:03 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 08:40 - 2013-06-17 23:30 - 00053809 ____A C:\Users\Alfred\Desktop\fsx.CFG
2013-06-16 21:19 - 2013-06-26 18:34 - 01195360 ____A C:\Windows\WindowsUpdate.log
2013-06-16 20:46 - 2013-06-16 20:46 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 20:45 - 2013-06-16 20:45 - 00001132 ____A C:\Users\Public\Desktop\RealPlayer.lnk
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 20:38 - 2013-06-18 23:45 - 00002151 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-16 10:59 - 2013-06-16 10:59 - 00001290 ____A C:\Users\Alfred\Desktop\F A V O R I T E N - Verknüpfung.lnk
2013-06-15 14:01 - 2013-06-15 14:01 - 00001113 ____A C:\Users\Alfred\Desktop\Mozilla Firefox.lnk
2013-06-14 14:39 - 2009-07-14 06:54 - 00001298 ____A C:\Users\Alfred\Desktop\Event Viewer.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000980 ____A C:\Users\Public\Desktop\SSD Fresh.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Users\Alfred\AppData\Local\Abelssoft
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Program Files (x86)\SSD Fresh
2013-06-12 20:40 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 20:40 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 20:40 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 20:40 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 20:40 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 20:40 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 20:40 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 20:40 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 20:40 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 20:40 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 20:40 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 20:40 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 20:40 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 20:40 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 15:48 - 2013-06-11 16:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-11 09:33 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-06-11 09:33 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-06-11 09:33 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-06-11 09:33 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-06-11 09:33 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-06-11 09:33 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-06-11 09:33 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-06-11 09:33 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-06-11 09:33 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-06-11 09:33 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-11 09:33 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-06-11 09:33 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-06-11 09:33 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-06-11 09:33 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-11 09:33 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
==================== One Month Modified Files and Folders =======
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Documents\JRT.txt
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Desktop\JRT.txt
2013-06-26 18:39 - 2011-04-11 14:25 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-26 18:38 - 2009-07-14 06:45 - 00013456 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-26 18:38 - 2009-07-14 06:45 - 00013456 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\Windows\ERUNT
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\JRT
2013-06-26 18:35 - 2013-06-16 21:19 - 01195360 ____A C:\Windows\WindowsUpdate.log
2013-06-26 18:31 - 2013-06-26 18:31 - 00008732 ____A C:\Users\Alfred\Desktop\AdwCleaner[S1].txt
2013-06-26 18:31 - 2011-04-11 14:25 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-26 18:30 - 2013-06-23 09:01 - 00000392 ____A C:\Windows\setupact.log
2013-06-26 18:30 - 2012-07-22 22:24 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-26 18:30 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-26 18:29 - 2013-06-26 14:28 - 00001326 ____A C:\Windows\PFRO.log
2013-06-26 18:27 - 2013-06-26 18:26 - 00008732 ____A C:\AdwCleaner[S1].txt
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Downloads\JRT.exe
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Desktop\JRT.exe
2013-06-26 18:20 - 2013-06-26 18:21 - 00648201 ____A C:\Users\Alfred\Desktop\adwcleaner.exe
2013-06-26 18:20 - 2013-06-26 18:20 - 00648201 ____A C:\Users\Alfred\Downloads\adwcleaner.exe
2013-06-26 18:18 - 2012-06-06 19:59 - 00003434 ____A C:\Users\Alfred\d3d_antilag.log
2013-06-26 18:17 - 2012-10-06 20:36 - 00000000 ____D C:\Users\Alfred\Documents\Flight Simulator X-Dateien
2013-06-26 18:05 - 2012-05-31 09:11 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-26 18:00 - 2012-12-02 23:05 - 00000482 ____A C:\Windows\Tasks\PC Utility Kit Registration3.job
2013-06-26 16:52 - 2013-06-26 16:52 - 00021699 ____A C:\Users\Alfred\Desktop\combofix.log
2013-06-26 16:36 - 2013-06-26 16:36 - 00021699 ____A C:\ComboFix.txt
2013-06-26 16:36 - 2013-06-26 16:23 - 00000000 ___AD C:\Qoobox
2013-06-26 16:36 - 2013-06-26 16:23 - 00000000 ____D C:\ComboFix
2013-06-26 16:35 - 2013-06-26 16:23 - 00000000 ____D C:\Windows\erdnt
2013-06-26 16:33 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-06-26 16:20 - 2013-06-26 16:20 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix (1).exe
2013-06-26 16:19 - 2013-06-26 16:19 - 05082915 ____R (Swearware) C:\Users\Alfred\Desktop\ComboFix.exe
2013-06-26 16:19 - 2013-06-26 16:18 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix.exe
2013-06-26 15:00 - 2010-06-27 22:10 - 00000000 ____D C:\Program Files (x86)\Benchmarks
2013-06-26 14:31 - 2013-06-26 14:30 - 00000000 ____D C:\Users\Alfred\Desktop\mbar
2013-06-26 13:52 - 2013-06-26 13:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-26 13:51 - 2013-06-26 13:51 - 13399154 ____A C:\Users\Alfred\Downloads\mbar-1.06.0.1004.zip
2013-06-26 12:09 - 2013-06-26 12:09 - 00036538 ____A C:\Users\Alfred\Desktop\Addition.txt
2013-06-26 12:08 - 2013-06-26 12:08 - 00000000 ____D C:\FRST
2013-06-26 12:07 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Desktop\FRST64.exe
2013-06-26 12:07 - 2013-06-26 12:06 - 01931844 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64.exe
2013-06-24 18:09 - 2012-11-05 15:08 - 00000000 ___RD C:\Users\Alfred\Documents\DESKTOP icons
2013-06-24 17:56 - 2009-07-14 19:58 - 00696848 ____A C:\Windows\System32\perfh007.dat
2013-06-24 17:56 - 2009-07-14 19:58 - 00148144 ____A C:\Windows\System32\perfc007.dat
2013-06-24 17:56 - 2009-07-14 07:13 - 01613412 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-24 11:48 - 2013-06-24 11:48 - 00000000 ____D C:\Users\Alfred\Documents\Trojaner.board.de
2013-06-23 21:28 - 2013-06-23 17:28 - 00000000 ____D C:\Users\Alfred\Downloads\downloads bis 22.6.2013
2013-06-23 09:01 - 2013-06-23 09:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-22 00:29 - 2012-12-02 23:05 - 00000448 ____A C:\Windows\Tasks\PC Utility Kit Update3.job
2013-06-19 00:25 - 2010-06-18 11:33 - 00000000 ____D C:\Windows\Minidump
2013-06-19 00:25 - 2010-06-01 14:29 - 00000000 ____D C:\Windows\Panther
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-18 23:45 - 2013-06-16 20:38 - 00002151 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-18 09:04 - 2013-06-18 09:04 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 09:03 - 2013-06-18 09:03 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-17 23:30 - 2013-06-18 08:40 - 00053809 ____A C:\Users\Alfred\Desktop\fsx.CFG
2013-06-17 10:40 - 2010-08-28 11:40 - 00003584 ____A C:\Users\Alfred\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-16 21:19 - 2010-09-21 16:07 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\Azureus
2013-06-16 20:46 - 2013-06-16 20:46 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 20:45 - 2013-06-16 20:45 - 00001132 ____A C:\Users\Public\Desktop\RealPlayer.lnk
2013-06-16 20:45 - 2010-12-23 13:32 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\Real
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 20:44 - 2010-12-23 13:32 - 00000000 ____D C:\ProgramData\Real
2013-06-16 20:43 - 2011-03-22 21:40 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00201872 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-06-16 20:42 - 2011-03-22 21:40 - 00499712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-06-16 20:42 - 2011-03-22 21:40 - 00348160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-06-16 20:39 - 2010-12-21 22:06 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-16 10:59 - 2013-06-16 10:59 - 00001290 ____A C:\Users\Alfred\Desktop\F A V O R I T E N - Verknüpfung.lnk
2013-06-15 14:01 - 2013-06-15 14:01 - 00001113 ____A C:\Users\Alfred\Desktop\Mozilla Firefox.lnk
2013-06-14 22:06 - 2012-10-06 20:31 - 00000000 ____D C:\Users\Alfred\Documents\Flight Simulator X files
2013-06-14 22:06 - 2010-06-07 11:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-14 20:58 - 2012-06-01 15:28 - 00000000 ____D C:\Users\Alfred\Documents\4.AVIATION
2013-06-13 22:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-13 21:15 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-13 14:11 - 2013-06-13 14:11 - 00000980 ____A C:\Users\Public\Desktop\SSD Fresh.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Users\Alfred\AppData\Local\Abelssoft
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Program Files (x86)\SSD Fresh
2013-06-12 23:49 - 2010-06-01 14:10 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 08:24 - 2009-07-14 06:45 - 02231720 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-11 16:13 - 2013-06-11 15:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-11 16:13 - 2012-08-13 12:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-11 09:54 - 2012-05-31 09:11 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 09:54 - 2011-05-21 08:12 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-13 22:10
==================== End Of Log ============================
--- --- --- --- --- --- |
|
26.06.2013, 19:27
| #10 |
| /// the machine /// TB-Ausbilder | PC hat nach Bluescreen nicht mehr die ursprüngliche LeistungESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST Log. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.06.2013, 08:33
| #11 |
| | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Zwischenbericht: der ESETonline scanner scannt seit 12 Stunden und 40Minuten und hat bislang 4 Viren erkannt: 3x Win32SusplibLoad.B trojan und 1x Adware.Multiplug.H.application Gruss Anatol |
|
27.06.2013, 09:37
| #12 |
| /// the machine /// TB-Ausbilder | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Alles klar.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.06.2013, 20:29
| #13 |
| | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Hallo Schrauber, Folgendes ist inzwischen geschehen: 24 Stunden ESET Scan. und nun sehe ich plötzlich. Scan stopped by user. dabei habe ich den PC in dieser Zeit nicht angerührt!. Vielleicht habe ich zuviele HD angehängt. Total 4.7TB!? 12 Viren sind gefunden worden: C:\Windows\System32\flt1chk3.dll Win32/SuspLibLoad.B trojan C:\Windows\SysWOW64\flt1chk3.dll Win32/SuspLibLoad.B trojan E:\fs9 files oliver aug 010\fs9\Level-D Simulations\B767-300\flt1chk4.dll Win32/SuspLibLoad.B trojan K:\ALFRED-PC\Backup Set 2012-12-27 213305\Backup Files 2013-04-21 190001\Backup files 4.zip Win32/Adware.MultiPlug.H application K:\ALFRED-PC\Backup Set 2012-12-27 213305\Backup Files 2013-04-21 190001\Backup files 6.zip Win32/Adware.MultiPlug.H application K:\ALFRED-PC\Backup Set 2012-12-27 213305\Backup Files 2013-05-19 190002\Backup files 3.zip a variant of Win32/Adware.Yontoo.B application K:\ALFRED-PC\Backup Set 2012-12-27 213305\Backup Files 2013-06-23 190001\Backup files 6.zip Win32/Adware.MultiPlug.H application K:\DM12REP\Backup Set 2012-11-02 051445\Backup Files 2012-11-02 051445\Backup files 1.zip multiple threats K:\DM12REP\Backup Set 2012-11-02 051445\Backup Files 2012-11-02 051445\Backup files 4.zip a variant of Win32/Adware.iBryte.D application K:\DM12REP\Backup Set 2012-12-23 190000\Backup Files 2012-12-23 190000\Backup files 20.zip Win32/Adware.Yontoo application K:\DM12REP\Backup Set 2012-12-23 190000\Backup Files 2012-12-23 190000\Backup files 21.zip JS/Adware.Yontoo.A application K:\DM12REP\Backup Set 2012-12-23 190000\Backup Files 2012-12-23 190000\Backup files 26.zip a variant of Win32/Adware.iBryte.D application Hier noch das neuste FRST64 log FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-06-2013 02
Ran by Alfred (administrator) on 27-06-2013 21:28:06
Running from C:\Users\Alfred\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(KSE - Korndörfer Software Engineering) C:\Program Files\nHancer\nHancerService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Rocket Division Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acronis) C:\Program Files (x86)\Acronis\DriveMonitor\adm.exe
(Acronis) C:\Program Files (x86)\Acronis\DriveMonitor\adm.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer [x]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer [x]
HKCU\...\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_270_ActiveX.exe -update activex [686792 2012-08-06] (Adobe Systems Incorporated)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)
HKLM-x32\...\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)
HKLM-x32\...\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot [295512 2013-06-16] (RealNetworks, Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {BEC15BFA-01C6-44A5-BD78-38BF5EBE0604} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_32 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.633 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Extension: No Name - C:\Users\Alfred\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: DownloadHelper - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Yahoo) - hxxp://ch.search.yahoo.com/search?fr=chr-greentree_gc&ei=utf-8&ilc=12&type=937811&p={searchTerms}
CHR DefaultSuggestURL: (Yahoo) - hxxp://de.ff.search.yahoo.com/gossip?command={searchTerms}&output=fxjson
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\google\chrome\application\22.0.1229.95\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll ()
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U32) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.320.5) - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Extension: (YouTube) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (RealDownloader) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0
CHR Extension: (Gmail) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R2 nHancer; C:\Program Files\nHancer\nHancerService.exe [39424 2010-05-02] (KSE - Korndörfer Software Engineering)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
==================== Drivers (Whitelisted) ====================
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2010-06-06] ()
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2010-06-01] (Acronis)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
U3 akoxst9q; C:\Windows\System32\Drivers\akoxst9q.sys [0 ] (Advanced Micro Devices)
U3 aqhvj7jv; C:\Windows\System32\Drivers\aqhvj7jv.sys [0 ] (Advanced Micro Devices)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 cpuz132; \??\C:\Users\Alfred\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [x]
S1 MpKslc6ca88d5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A2AFAD69-B5C2-49B6-91B7-2ABC590A3EF2}\MpKslc6ca88d5.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-27 21:22 - 2013-06-27 21:22 - 00070416 ____A C:\Users\Alfred\Downloads\FRST.txt
2013-06-27 21:21 - 2013-06-27 21:21 - 01931940 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64 (3).exe
2013-06-27 21:20 - 2013-06-27 21:20 - 01931940 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64 (2).exe
2013-06-27 21:19 - 2013-06-27 21:19 - 01370369 ____A (Farbar) C:\Users\Alfred\Downloads\FRST.exe
2013-06-27 21:15 - 2013-06-27 21:15 - 01931940 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64 (1).exe
2013-06-27 21:12 - 2013-06-27 21:12 - 00000000 ____D C:\Users\Alfred\Desktop\FRST64 old
2013-06-26 20:49 - 2013-06-26 20:49 - 00890988 ____A C:\Users\Alfred\Downloads\SecurityCheck.exe
2013-06-26 20:49 - 2013-06-26 20:49 - 00890988 ____A C:\Users\Alfred\Desktop\SecurityCheck.exe
2013-06-26 20:48 - 2013-06-26 20:48 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-26 20:47 - 2013-06-26 20:46 - 02347384 ____A (ESET) C:\Users\Alfred\Desktop\esetsmartinstaller_enu.exe
2013-06-26 20:46 - 2013-06-26 20:46 - 02347384 ____A (ESET) C:\Users\Alfred\Downloads\esetsmartinstaller_enu.exe
2013-06-26 18:42 - 2013-06-26 18:42 - 00067715 ____A C:\Users\Alfred\Documents\FRST.txt
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Documents\JRT.txt
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Desktop\JRT.txt
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\Windows\ERUNT
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\JRT
2013-06-26 18:31 - 2013-06-26 18:31 - 00008732 ____A C:\Users\Alfred\Desktop\AdwCleaner[S1].txt
2013-06-26 18:26 - 2013-06-26 18:27 - 00008732 ____A C:\AdwCleaner[S1].txt
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Downloads\JRT.exe
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Desktop\JRT.exe
2013-06-26 18:21 - 2013-06-26 18:20 - 00648201 ____A C:\Users\Alfred\Desktop\adwcleaner.exe
2013-06-26 18:20 - 2013-06-26 18:20 - 00648201 ____A C:\Users\Alfred\Downloads\adwcleaner.exe
2013-06-26 16:52 - 2013-06-26 16:52 - 00021699 ____A C:\Users\Alfred\Desktop\combofix.log
2013-06-26 16:36 - 2013-06-26 16:36 - 00021699 ____A C:\ComboFix.txt
2013-06-26 16:24 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-26 16:24 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-26 16:24 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-26 16:24 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-26 16:23 - 2013-06-26 16:36 - 00000000 ___AD C:\Qoobox
2013-06-26 16:23 - 2013-06-26 16:36 - 00000000 ____D C:\ComboFix
2013-06-26 16:23 - 2013-06-26 16:35 - 00000000 ____D C:\Windows\erdnt
2013-06-26 16:20 - 2013-06-26 16:20 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix (1).exe
2013-06-26 16:19 - 2013-06-26 16:19 - 05082915 ____R (Swearware) C:\Users\Alfred\Desktop\ComboFix.exe
2013-06-26 16:18 - 2013-06-26 16:19 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix.exe
2013-06-26 14:30 - 2013-06-26 14:31 - 00000000 ____D C:\Users\Alfred\Desktop\mbar
2013-06-26 14:28 - 2013-06-26 18:29 - 00001326 ____A C:\Windows\PFRO.log
2013-06-26 13:52 - 2013-06-26 13:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-26 13:51 - 2013-06-26 13:51 - 13399154 ____A C:\Users\Alfred\Downloads\mbar-1.06.0.1004.zip
2013-06-26 12:08 - 2013-06-26 12:08 - 00000000 ____D C:\FRST
2013-06-26 12:07 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Desktop\FRST64.exe
2013-06-26 12:06 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64.exe
2013-06-24 11:48 - 2013-06-24 11:48 - 00000000 ____D C:\Users\Alfred\Documents\Trojaner.board.de
2013-06-23 17:28 - 2013-06-23 21:28 - 00000000 ____D C:\Users\Alfred\Downloads\downloads bis 22.6.2013
2013-06-23 09:01 - 2013-06-26 18:30 - 00000392 ____A C:\Windows\setupact.log
2013-06-23 09:01 - 2013-06-23 09:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-19 09:15 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-19 09:15 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 09:03 - 2013-06-18 09:03 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 08:40 - 2013-06-17 23:30 - 00053809 ____A C:\Users\Alfred\Desktop\fsx.CFG
2013-06-16 21:19 - 2013-06-27 18:42 - 01240078 ____A C:\Windows\WindowsUpdate.log
2013-06-16 20:46 - 2013-06-16 20:46 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 20:45 - 2013-06-16 20:45 - 00001132 ____A C:\Users\Public\Desktop\RealPlayer.lnk
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 20:38 - 2013-06-18 23:45 - 00002151 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-16 10:59 - 2013-06-16 10:59 - 00001290 ____A C:\Users\Alfred\Desktop\F A V O R I T E N - Verknüpfung.lnk
2013-06-15 14:01 - 2013-06-15 14:01 - 00001113 ____A C:\Users\Alfred\Desktop\Mozilla Firefox.lnk
2013-06-14 14:39 - 2009-07-14 06:54 - 00001298 ____A C:\Users\Alfred\Desktop\Event Viewer.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000980 ____A C:\Users\Public\Desktop\SSD Fresh.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Users\Alfred\AppData\Local\Abelssoft
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Program Files (x86)\SSD Fresh
2013-06-12 20:40 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 20:40 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 20:40 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 20:40 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 20:40 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 20:40 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 20:40 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 20:40 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 20:40 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 20:40 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 20:40 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 20:40 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 20:40 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 20:40 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 20:40 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 15:48 - 2013-06-11 16:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-11 09:33 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-06-11 09:33 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-06-11 09:33 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-06-11 09:33 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-06-11 09:33 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-06-11 09:33 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-06-11 09:33 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-06-11 09:33 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-06-11 09:33 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-06-11 09:33 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-11 09:33 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-06-11 09:33 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-06-11 09:33 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-06-11 09:33 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-11 09:33 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
==================== One Month Modified Files and Folders =======
2013-06-27 21:22 - 2013-06-27 21:22 - 00070416 ____A C:\Users\Alfred\Downloads\FRST.txt
2013-06-27 21:21 - 2013-06-27 21:21 - 01931940 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64 (3).exe
2013-06-27 21:20 - 2013-06-27 21:20 - 01931940 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64 (2).exe
2013-06-27 21:19 - 2013-06-27 21:19 - 01370369 ____A (Farbar) C:\Users\Alfred\Downloads\FRST.exe
2013-06-27 21:15 - 2013-06-27 21:15 - 01931940 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64 (1).exe
2013-06-27 21:12 - 2013-06-27 21:12 - 00000000 ____D C:\Users\Alfred\Desktop\FRST64 old
2013-06-27 21:05 - 2012-05-31 09:11 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-27 20:39 - 2011-04-11 14:25 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-27 18:42 - 2013-06-16 21:19 - 01240078 ____A C:\Windows\WindowsUpdate.log
2013-06-27 18:00 - 2012-12-02 23:05 - 00000482 ____A C:\Windows\Tasks\PC Utility Kit Registration3.job
2013-06-27 09:48 - 2011-04-11 14:25 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-27 09:04 - 2011-01-06 11:21 - 01590370 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-27 09:04 - 2009-07-14 19:58 - 00696848 ____A C:\Windows\System32\perfh007.dat
2013-06-27 09:04 - 2009-07-14 19:58 - 00148144 ____A C:\Windows\System32\perfc007.dat
2013-06-27 09:04 - 2009-07-14 07:13 - 01590370 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-26 20:49 - 2013-06-26 20:49 - 00890988 ____A C:\Users\Alfred\Downloads\SecurityCheck.exe
2013-06-26 20:49 - 2013-06-26 20:49 - 00890988 ____A C:\Users\Alfred\Desktop\SecurityCheck.exe
2013-06-26 20:48 - 2013-06-26 20:48 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-26 20:46 - 2013-06-26 20:47 - 02347384 ____A (ESET) C:\Users\Alfred\Desktop\esetsmartinstaller_enu.exe
2013-06-26 20:46 - 2013-06-26 20:46 - 02347384 ____A (ESET) C:\Users\Alfred\Downloads\esetsmartinstaller_enu.exe
2013-06-26 18:42 - 2013-06-26 18:42 - 00067715 ____A C:\Users\Alfred\Documents\FRST.txt
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Documents\JRT.txt
2013-06-26 18:39 - 2013-06-26 18:39 - 00001575 ____A C:\Users\Alfred\Desktop\JRT.txt
2013-06-26 18:38 - 2009-07-14 06:45 - 00013456 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-26 18:38 - 2009-07-14 06:45 - 00013456 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\Windows\ERUNT
2013-06-26 18:35 - 2013-06-26 18:35 - 00000000 ____D C:\JRT
2013-06-26 18:31 - 2013-06-26 18:31 - 00008732 ____A C:\Users\Alfred\Desktop\AdwCleaner[S1].txt
2013-06-26 18:30 - 2013-06-23 09:01 - 00000392 ____A C:\Windows\setupact.log
2013-06-26 18:30 - 2012-07-22 22:24 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-26 18:30 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-26 18:29 - 2013-06-26 14:28 - 00001326 ____A C:\Windows\PFRO.log
2013-06-26 18:27 - 2013-06-26 18:26 - 00008732 ____A C:\AdwCleaner[S1].txt
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Downloads\JRT.exe
2013-06-26 18:23 - 2013-06-26 18:23 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Alfred\Desktop\JRT.exe
2013-06-26 18:20 - 2013-06-26 18:21 - 00648201 ____A C:\Users\Alfred\Desktop\adwcleaner.exe
2013-06-26 18:20 - 2013-06-26 18:20 - 00648201 ____A C:\Users\Alfred\Downloads\adwcleaner.exe
2013-06-26 18:18 - 2012-06-06 19:59 - 00003434 ____A C:\Users\Alfred\d3d_antilag.log
2013-06-26 18:17 - 2012-10-06 20:36 - 00000000 ____D C:\Users\Alfred\Documents\Flight Simulator X-Dateien
2013-06-26 16:52 - 2013-06-26 16:52 - 00021699 ____A C:\Users\Alfred\Desktop\combofix.log
2013-06-26 16:36 - 2013-06-26 16:36 - 00021699 ____A C:\ComboFix.txt
2013-06-26 16:36 - 2013-06-26 16:23 - 00000000 ___AD C:\Qoobox
2013-06-26 16:36 - 2013-06-26 16:23 - 00000000 ____D C:\ComboFix
2013-06-26 16:35 - 2013-06-26 16:23 - 00000000 ____D C:\Windows\erdnt
2013-06-26 16:33 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini
2013-06-26 16:20 - 2013-06-26 16:20 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix (1).exe
2013-06-26 16:19 - 2013-06-26 16:19 - 05082915 ____R (Swearware) C:\Users\Alfred\Desktop\ComboFix.exe
2013-06-26 16:19 - 2013-06-26 16:18 - 05082915 ____A (Swearware) C:\Users\Alfred\Downloads\ComboFix.exe
2013-06-26 15:00 - 2010-06-27 22:10 - 00000000 ____D C:\Program Files (x86)\Benchmarks
2013-06-26 14:31 - 2013-06-26 14:30 - 00000000 ____D C:\Users\Alfred\Desktop\mbar
2013-06-26 13:52 - 2013-06-26 13:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-26 13:51 - 2013-06-26 13:51 - 13399154 ____A C:\Users\Alfred\Downloads\mbar-1.06.0.1004.zip
2013-06-26 12:08 - 2013-06-26 12:08 - 00000000 ____D C:\FRST
2013-06-26 12:07 - 2013-06-26 12:07 - 01931844 ____A (Farbar) C:\Users\Alfred\Desktop\FRST64.exe
2013-06-26 12:07 - 2013-06-26 12:06 - 01931844 ____A (Farbar) C:\Users\Alfred\Downloads\FRST64.exe
2013-06-24 18:09 - 2012-11-05 15:08 - 00000000 ___RD C:\Users\Alfred\Documents\DESKTOP icons
2013-06-24 11:48 - 2013-06-24 11:48 - 00000000 ____D C:\Users\Alfred\Documents\Trojaner.board.de
2013-06-23 21:28 - 2013-06-23 17:28 - 00000000 ____D C:\Users\Alfred\Downloads\downloads bis 22.6.2013
2013-06-23 09:01 - 2013-06-23 09:01 - 00000000 ____A C:\Windows\setuperr.log
2013-06-22 00:29 - 2012-12-02 23:05 - 00000448 ____A C:\Windows\Tasks\PC Utility Kit Update3.job
2013-06-19 00:25 - 2010-06-18 11:33 - 00000000 ____D C:\Windows\Minidump
2013-06-19 00:25 - 2010-06-01 14:29 - 00000000 ____D C:\Windows\Panther
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-18 23:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-18 23:45 - 2013-06-16 20:38 - 00002151 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-18 09:04 - 2013-06-18 09:04 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-18 09:04 - 2013-06-18 09:04 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-18 09:04 - 2013-06-18 09:04 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-18 09:04 - 2013-06-18 09:04 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-18 09:04 - 2013-06-18 09:04 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00053760 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-18 09:04 - 2013-06-18 09:04 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-18 09:04 - 2013-06-18 09:04 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-18 09:03 - 2013-06-18 09:03 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-18 09:03 - 2013-06-18 09:03 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-17 23:30 - 2013-06-18 08:40 - 00053809 ____A C:\Users\Alfred\Desktop\fsx.CFG
2013-06-17 10:40 - 2010-08-28 11:40 - 00003584 ____A C:\Users\Alfred\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-16 21:19 - 2010-09-21 16:07 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\Azureus
2013-06-16 20:46 - 2013-06-16 20:46 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\RealNetworks
2013-06-16 20:45 - 2013-06-16 20:45 - 00001132 ____A C:\Users\Public\Desktop\RealPlayer.lnk
2013-06-16 20:45 - 2010-12-23 13:32 - 00000000 ____D C:\Users\Alfred\AppData\Roaming\Real
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 20:44 - 2013-06-16 20:44 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 20:44 - 2010-12-23 13:32 - 00000000 ____D C:\ProgramData\Real
2013-06-16 20:43 - 2011-03-22 21:40 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00201872 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-06-16 20:43 - 2011-03-22 21:40 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-06-16 20:42 - 2011-03-22 21:40 - 00499712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-06-16 20:42 - 2011-03-22 21:40 - 00348160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-06-16 20:39 - 2010-12-21 22:06 - 00000000 ____D C:\Program Files (x86)\Google
2013-06-16 10:59 - 2013-06-16 10:59 - 00001290 ____A C:\Users\Alfred\Desktop\F A V O R I T E N - Verknüpfung.lnk
2013-06-15 14:01 - 2013-06-15 14:01 - 00001113 ____A C:\Users\Alfred\Desktop\Mozilla Firefox.lnk
2013-06-14 22:06 - 2012-10-06 20:31 - 00000000 ____D C:\Users\Alfred\Documents\Flight Simulator X files
2013-06-14 22:06 - 2010-06-07 11:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-14 20:58 - 2012-06-01 15:28 - 00000000 ____D C:\Users\Alfred\Documents\4.AVIATION
2013-06-13 22:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-13 21:15 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-13 14:11 - 2013-06-13 14:11 - 00000980 ____A C:\Users\Public\Desktop\SSD Fresh.lnk
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Users\Alfred\AppData\Local\Abelssoft
2013-06-13 14:11 - 2013-06-13 14:11 - 00000000 ____D C:\Program Files (x86)\SSD Fresh
2013-06-12 23:49 - 2010-06-01 14:10 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 08:24 - 2009-07-14 06:45 - 02231720 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-11 16:13 - 2013-06-11 15:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-11 16:13 - 2012-08-13 12:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-11 09:54 - 2012-05-31 09:11 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-11 09:54 - 2011-05-21 08:12 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-13 22:10
==================== End Of Log ============================
|
|
28.06.2013, 06:35
| #14 |
| /// the machine /// TB-Ausbilder | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Also Backups auf K würd ich löschen. Fix mit FRST Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Windows\System32\flt1chk3.dll
C:\Windows\SysWOW64\flt1chk3.dll
Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
28.06.2013, 08:58
| #15 |
| | PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung Hallo Schrauber, danke für den feedback und die weitere Soforthilfe. offenbar ist der backup im K tatsächlich total verseucht. Muss ihn löschen. (Ein solch Superforum mit Profimoderatoren habe ich noch nie angetroffen..und ich bin in vielen Foren..) update von FRST64 gelingt einfach nicht, obschon jedesmal beim Aufstarten von FRS64 die dringende Empfehlung des updates erscheint. Wenn ich dann den update ausführen will, kommen Warnmeldungen und dann lädt sich bloss immer wieder die gleiche alte FRST64 datei herunter! hier also das FRST64.Fixlist.log Gruss und Dank Anatol Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-06-2013 02 Ran by Alfred at 2013-06-28 09:36:57 Run:1 Running from C:\Users\Alfred\Desktop\FRST64new Boot Mode: Normal ============================================== C:\Windows\System32\flt1chk3.dll => Moved successfully. C:\Windows\SysWOW64\flt1chk3.dll => Moved successfully. ==== End of Fixlog ==== |
|
| Themen zu PC hat nach Bluescreen nicht mehr die ursprüngliche Leistung |
| befindet, bluescree, bluescreen, dankbar, ereignisanzeige, fehler, leistung, länger, nicht mehr, ordentlich, praktisch, profis, rechner, starte, startet, system, system32, troja |
