![]() |
|
Plagegeister aller Art und deren Bekämpfung: Im Internet plötzlich überall Werbung !Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #7 |
| ![]() Im Internet plötzlich überall Werbung ! FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by Julian (administrator) on VAIO-JULIAN on 05-11-2013 21:30:51 Running from C:\Users\Julian\Downloads Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Windows\system32\mfevtps.exe (Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1114.318_x64__8wekyb3d8bbwe\LiveComm.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Spotify Ltd) C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Users\Julian\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe (McAfee, Inc.) C:\Program Files\McAfeeEx\MOCP\core\OcpTray.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe (Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe () C:\Program Files\Sony\VAIO Care\listener.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-08-20] (Realtek Semiconductor) HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764032 2012-08-13] (Qualcomm Atheros) HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-08-13] (Atheros Communications) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-21] (Synaptics Incorporated) HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation) HKCU\...\Run: [Facebook Update] - C:\Users\Julian\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-01-26] (Facebook Inc.) HKCU\...\Run: [Spotify] - C:\Users\Julian\AppData\Roaming\Spotify\spotify.exe [4640768 2013-07-10] (Spotify Ltd) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Julian\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-10] (Spotify Ltd) HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Julian\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] () HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation) HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation) HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe [644656 2013-08-17] (McAfee, Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) AppInit_DLLs: C:\PROGRA~2\MOVIES~1\SAFETY~1\x64\SAFETY~2.DLL [958576 2013-04-04] () AppInit_DLLs-x32: c:\progra~2\movies~1\safety~1\safety~2.dll [ ] () IMEO\bitguard.exe: [Debugger] tasklist.exe IMEO\bprotect.exe: [Debugger] tasklist.exe IMEO\browsemngr.exe: [Debugger] tasklist.exe IMEO\browserdefender.exe: [Debugger] tasklist.exe IMEO\browsermngr.exe: [Debugger] tasklist.exe IMEO\browserprotect.exe: [Debugger] tasklist.exe IMEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe IMEO\cltmngsvc.exe: [Debugger] tasklist.exe IMEO\delta babylon.exe: [Debugger] tasklist.exe IMEO\delta tb.exe: [Debugger] tasklist.exe IMEO\delta2.exe: [Debugger] tasklist.exe IMEO\deltainstaller.exe: [Debugger] tasklist.exe IMEO\deltasetup.exe: [Debugger] tasklist.exe IMEO\deltatb.exe: [Debugger] tasklist.exe IMEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe IMEO\iminentsetup.exe: [Debugger] tasklist.exe IMEO\rjatydimofu.exe: [Debugger] tasklist.exe IMEO\sweetimsetup.exe: [Debugger] tasklist.exe IMEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe Startup: C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = Welcome to the Sony VAIO portal HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = Welcome to the Sony VAIO portal SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {190D70AB-3D30-463A-BBC6-0FF6DD853ED4} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms} SearchScopes: HKCU - {56D76E12-75F9-4C43-80A7-EE6CE70B9887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASEJS BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\805w1sew.default FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml FF DefaultSearchEngine: Google FF SelectedSearchEngine: Google FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Julian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Julian\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Julian\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\805w1sew.default\Extensions\battlefieldheroespatcher@ea.com FF Extension: New tab - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\805w1sew.default\Extensions\{987FF466-80DE-000D-C392-986458FA318B} FF Extension: Adblock Plus - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\805w1sew.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} FF Extension: toolbar - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\805w1sew.default\Extensions\toolbar@web.de.xpi FF Extension: Adblock Plus - C:\Users\Julian\AppData\Roaming\Mozilla\Firefox\Profiles\805w1sew.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK Chrome: ======= ==================== Services (Whitelisted) ================= R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-13] (Qualcomm Atheros Commnucations) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) S2 McOobeSv2; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-08] (McAfee, Inc.) R2 mfeicfcoreocp; C:\Program Files\McAfeeEx\MOCP\core\mfeicfcore.exe [2776256 2013-08-08] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-08] (McAfee, Inc.) S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation) R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-08-10] () R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros) ==================== Drivers (Whitelisted) ==================== R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-08-20] (Advanced Micro Devices) R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-13] (Qualcomm Atheros) R3 BTATH_VDP; C:\Windows\system32\drivers\btath_vdp.sys [427416 2012-08-13] (Qualcomm Atheros) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-08] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-08] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-08] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-08] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-08] (McAfee, Inc.) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-21] (Synaptics Incorporated) R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-05 20:51 - 2013-11-05 20:51 - 00002163 _____ C:\Users\Julian\Documents\JRT.txt 2013-11-05 20:35 - 2013-11-05 20:35 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-05 20:35 - 2013-11-05 20:35 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Malwarebytes 2013-11-05 20:35 - 2013-11-05 20:35 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-05 20:35 - 2013-11-05 20:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-05 20:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-11-05 20:33 - 2013-11-05 20:35 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Julian\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-05 20:31 - 2013-11-05 20:31 - 00002163 _____ C:\Users\Julian\Desktop\JRT.txt 2013-11-05 20:25 - 2013-11-05 20:25 - 00000000 ____D C:\Windows\ERUNT 2013-11-05 20:23 - 2013-11-05 20:23 - 01033335 _____ (Thisisu) C:\Users\Julian\Desktop\JRT.exe 2013-11-05 20:14 - 2013-11-05 20:50 - 00000000 ____D C:\AdwCleaner 2013-11-05 20:13 - 2013-11-05 20:13 - 01073258 _____ C:\Users\Julian\Downloads\adwcleaner(1).exe 2013-11-05 20:13 - 2013-11-05 20:13 - 00000000 ____D C:\Users\Julian\Desktop\AdwCleaner 2013-11-05 20:10 - 2013-11-05 20:10 - 01073258 _____ C:\Users\Julian\Desktop\adwcleaner.exe 2013-11-05 19:53 - 2013-11-05 19:53 - 00029948 _____ C:\Users\Julian\Downloads\Addition.txt 2013-11-05 19:51 - 2013-11-05 19:51 - 01957098 _____ (Farbar) C:\Users\Julian\Downloads\FRST64.exe 2013-11-05 19:51 - 2013-11-05 19:51 - 00000000 ____D C:\FRST 2013-11-05 18:13 - 2013-11-05 18:13 - 00060544 _____ C:\Users\Julian\Downloads\Extras.Txt 2013-11-05 18:12 - 2013-11-05 18:12 - 00197330 _____ C:\Users\Julian\Downloads\OTL.Txt 2013-11-05 18:03 - 2013-11-05 18:03 - 00602112 _____ (OldTimer Tools) C:\Users\Julian\Downloads\OTL.exe 2013-11-05 17:58 - 2013-11-05 17:58 - 00003164 _____ C:\Windows\System32\Tasks\{E3B4A8BD-8E60-4BD3-99EA-28C799159AD4} 2013-11-05 16:51 - 2013-11-05 16:51 - 00003626 _____ C:\Windows\System32\Tasks\Escolade 2013-11-05 16:49 - 2013-11-05 17:59 - 00000000 ____D C:\Users\Julian\AppData\Local\Oxy 2013-11-05 16:49 - 2013-11-05 16:49 - 00003498 _____ C:\Windows\System32\Tasks\RunAsStdUser Task 2013-11-05 16:49 - 2013-11-05 16:49 - 00000000 ____D C:\Users\Julian\AppData\Local\Chromium 2013-11-05 16:46 - 2013-11-05 16:46 - 02074056 _____ C:\Users\Julian\Downloads\winrar-x64-500d.exe 2013-11-05 16:46 - 2013-11-05 16:46 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-11-05 16:37 - 2013-11-05 16:37 - 00000000 ____D C:\Users\Julian\Documents\eMu3Ds_Setup 2013-11-05 16:26 - 2013-11-05 17:59 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Oxy 2013-11-05 16:14 - 2013-11-05 16:14 - 01573633 _____ C:\Users\Julian\Downloads\eMu3Ds_BIOS_Installer.zip 2013-11-05 16:01 - 2013-11-05 20:46 - 00000000 ____D C:\ProgramData\Wincert 2013-11-05 16:00 - 2013-11-05 16:52 - 00000000 ____D C:\Program Files (x86)\eMu3Ds 2013-11-05 15:58 - 2013-11-05 15:58 - 12040292 _____ C:\Users\Julian\Downloads\eMu3Ds_Setup.zip 2013-11-05 14:33 - 2013-11-05 14:33 - 02328864 _____ C:\Users\Julian\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe 2013-11-05 14:33 - 2013-11-05 14:33 - 00000000 ____D C:\Users\Julian\Documents\Amazon MP3 2013-11-05 14:33 - 2013-11-05 14:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-11-05 14:33 - 2013-11-05 14:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Amazon 2013-10-30 17:44 - 2013-05-02 16:29 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-10-26 13:57 - 2013-10-26 13:57 - 00001894 _____ C:\Users\Julian\Desktop\IrfanView Thumbnails.lnk 2013-10-26 13:57 - 2013-10-26 13:57 - 00001002 _____ C:\Users\Julian\Desktop\IrfanView.lnk 2013-10-26 13:57 - 2013-10-26 13:57 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView 2013-10-26 13:57 - 2013-10-26 13:57 - 00000000 ____D C:\Users\Julian\AppData\Roaming\IrfanView 2013-10-26 13:57 - 2013-10-26 13:57 - 00000000 ____D C:\Program Files (x86)\IrfanView 2013-10-26 13:56 - 2013-10-26 13:56 - 01855072 _____ (Irfan Skiljan) C:\Users\Julian\Desktop\irfanview-4.36-multi.exe 2013-10-26 13:53 - 2013-10-26 13:53 - 02145888 _____ (Irfan Skiljan) C:\Users\Julian\Downloads\iview436g_setup.exe 2013-10-26 13:53 - 2013-10-26 13:53 - 02145888 _____ (Irfan Skiljan) C:\Users\Julian\Downloads\iview436g_setup(1).exe 2013-10-20 17:18 - 2013-10-20 17:18 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-10-20 17:18 - 2013-10-20 17:18 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-10-13 19:53 - 2013-08-03 07:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2013-10-13 19:53 - 2013-08-03 07:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2013-10-13 19:53 - 2013-08-03 07:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2013-10-13 19:53 - 2013-08-03 06:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx 2013-10-13 19:53 - 2013-08-03 06:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll 2013-10-13 19:53 - 2013-08-03 06:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll 2013-10-13 19:52 - 2013-08-10 06:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2013-10-13 19:52 - 2013-08-10 06:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll 2013-10-13 19:52 - 2013-08-10 04:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2013-10-13 19:52 - 2013-08-02 07:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-10-13 19:52 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2013-10-13 19:52 - 2013-08-02 07:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-10-13 19:52 - 2013-08-02 07:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-10-13 19:52 - 2013-08-02 06:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-10-13 19:52 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2013-10-13 19:52 - 2013-08-02 06:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-10-13 19:52 - 2013-08-02 06:06 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-10-13 19:52 - 2013-08-01 11:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-13 19:52 - 2013-07-31 00:30 - 00386923 _____ C:\Windows\system32\ApnDatabase.xml 2013-10-13 19:52 - 2013-07-25 00:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll 2013-10-13 19:52 - 2013-07-25 00:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll 2013-10-13 19:52 - 2013-04-10 00:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2013-10-13 19:52 - 2013-04-09 23:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2013-10-12 22:46 - 2013-10-12 22:46 - 00309248 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-09 17:01 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-09 17:01 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-09 17:01 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-09 17:01 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-09 17:01 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-09 17:01 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-09 17:01 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-09 17:01 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-09 17:01 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-09 17:01 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-09 17:01 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-09 17:01 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-09 17:01 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-09 17:01 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-09 17:01 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-09 17:01 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-09 17:01 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-09 17:01 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-09 17:01 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-09 17:01 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-09 17:01 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2013-10-09 17:01 - 2013-05-15 23:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2013-10-09 17:01 - 2013-05-15 23:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2013-10-09 17:01 - 2013-05-14 14:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-09 17:01 - 2013-05-14 10:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-09 17:01 - 2013-04-28 23:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2013-10-09 17:01 - 2013-02-21 11:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-09 17:01 - 2013-02-21 11:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-09 17:01 - 2013-02-21 11:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-09 17:01 - 2013-02-21 11:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-09 17:01 - 2013-02-21 11:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-09 17:01 - 2013-02-21 11:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-09 17:01 - 2013-02-19 10:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2013-10-09 17:01 - 2012-11-08 05:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-09 17:01 - 2012-11-08 05:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-09 17:00 - 2013-08-23 06:11 - 04040192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-09 17:00 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 17:00 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 17:00 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-09 17:00 - 2013-07-05 23:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-09 17:00 - 2013-07-02 02:41 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2013-10-09 17:00 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2013-10-09 17:00 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS 2013-10-09 17:00 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys 2013-10-09 17:00 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-09 17:00 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-09 17:00 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-09 17:00 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-09 17:00 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-09 17:00 - 2013-06-29 04:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-09 17:00 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-09 17:00 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-09 17:00 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 17:00 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-09 17:00 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-09 17:00 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll ==================== One Month Modified Files and Folders ======= 2013-11-05 21:29 - 2012-11-30 10:00 - 00000000 ____D C:\ProgramData\MOCP 2013-11-05 21:28 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru 2013-11-05 21:00 - 2013-02-16 15:28 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps 2013-11-05 20:59 - 2012-11-30 09:29 - 01275484 _____ C:\Windows\WindowsUpdate.log 2013-11-05 20:57 - 2013-01-02 00:18 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2960848681-2203139861-4268436981-1001 2013-11-05 20:56 - 2012-11-30 09:05 - 00753134 _____ C:\Windows\system32\perfh007.dat 2013-11-05 20:56 - 2012-11-30 09:05 - 00155826 _____ C:\Windows\system32\perfc007.dat 2013-11-05 20:56 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-05 20:53 - 2013-03-29 21:14 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Spotify 2013-11-05 20:53 - 2013-01-02 17:27 - 00000000 ____D C:\Program Files (x86)\Steam 2013-11-05 20:52 - 2013-01-02 19:36 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-05 20:52 - 2012-08-03 03:22 - 00152300 _____ C:\Windows\PFRO.log 2013-11-05 20:52 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-05 20:51 - 2013-11-05 20:51 - 00002163 _____ C:\Users\Julian\Documents\JRT.txt 2013-11-05 20:51 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI 2013-11-05 20:50 - 2013-11-05 20:14 - 00000000 ____D C:\AdwCleaner 2013-11-05 20:46 - 2013-11-05 16:01 - 00000000 ____D C:\ProgramData\Wincert 2013-11-05 20:35 - 2013-11-05 20:35 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-05 20:35 - 2013-11-05 20:35 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Malwarebytes 2013-11-05 20:35 - 2013-11-05 20:35 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-05 20:35 - 2013-11-05 20:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-05 20:35 - 2013-11-05 20:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Julian\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-05 20:31 - 2013-11-05 20:31 - 00002163 _____ C:\Users\Julian\Desktop\JRT.txt 2013-11-05 20:25 - 2013-11-05 20:25 - 00000000 ____D C:\Windows\ERUNT 2013-11-05 20:23 - 2013-11-05 20:23 - 01033335 _____ (Thisisu) C:\Users\Julian\Desktop\JRT.exe 2013-11-05 20:17 - 2013-01-02 00:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-05 20:13 - 2013-11-05 20:13 - 01073258 _____ C:\Users\Julian\Downloads\adwcleaner(1).exe 2013-11-05 20:13 - 2013-11-05 20:13 - 00000000 ____D C:\Users\Julian\Desktop\AdwCleaner 2013-11-05 20:10 - 2013-11-05 20:10 - 01073258 _____ C:\Users\Julian\Desktop\adwcleaner.exe 2013-11-05 20:06 - 2013-01-02 19:36 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-05 19:53 - 2013-11-05 19:53 - 00029948 _____ C:\Users\Julian\Downloads\Addition.txt 2013-11-05 19:51 - 2013-11-05 19:51 - 01957098 _____ (Farbar) C:\Users\Julian\Downloads\FRST64.exe 2013-11-05 19:51 - 2013-11-05 19:51 - 00000000 ____D C:\FRST 2013-11-05 18:13 - 2013-11-05 18:13 - 00060544 _____ C:\Users\Julian\Downloads\Extras.Txt 2013-11-05 18:12 - 2013-11-05 18:12 - 00197330 _____ C:\Users\Julian\Downloads\OTL.Txt 2013-11-05 18:11 - 2013-01-26 21:06 - 00000956 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2960848681-2203139861-4268436981-1001UA.job 2013-11-05 18:03 - 2013-11-05 18:03 - 00602112 _____ (OldTimer Tools) C:\Users\Julian\Downloads\OTL.exe 2013-11-05 17:59 - 2013-11-05 16:49 - 00000000 ____D C:\Users\Julian\AppData\Local\Oxy 2013-11-05 17:59 - 2013-11-05 16:26 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Oxy 2013-11-05 17:59 - 2013-01-01 23:55 - 00000000 ___RD C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-05 17:58 - 2013-11-05 17:58 - 00003164 _____ C:\Windows\System32\Tasks\{E3B4A8BD-8E60-4BD3-99EA-28C799159AD4} 2013-11-05 16:52 - 2013-11-05 16:00 - 00000000 ____D C:\Program Files (x86)\eMu3Ds 2013-11-05 16:51 - 2013-11-05 16:51 - 00003626 _____ C:\Windows\System32\Tasks\Escolade 2013-11-05 16:49 - 2013-11-05 16:49 - 00003498 _____ C:\Windows\System32\Tasks\RunAsStdUser Task 2013-11-05 16:49 - 2013-11-05 16:49 - 00000000 ____D C:\Users\Julian\AppData\Local\Chromium 2013-11-05 16:49 - 2013-01-01 23:45 - 00000000 ____D C:\Users\Julian 2013-11-05 16:46 - 2013-11-05 16:46 - 02074056 _____ C:\Users\Julian\Downloads\winrar-x64-500d.exe 2013-11-05 16:46 - 2013-11-05 16:46 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-11-05 16:46 - 2013-08-08 15:26 - 00000000 ____D C:\Program Files\WinRAR 2013-11-05 16:37 - 2013-11-05 16:37 - 00000000 ____D C:\Users\Julian\Documents\eMu3Ds_Setup 2013-11-05 16:14 - 2013-11-05 16:14 - 01573633 _____ C:\Users\Julian\Downloads\eMu3Ds_BIOS_Installer.zip 2013-11-05 15:58 - 2013-11-05 15:58 - 12040292 _____ C:\Users\Julian\Downloads\eMu3Ds_Setup.zip 2013-11-05 15:55 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache 2013-11-05 14:33 - 2013-11-05 14:33 - 02328864 _____ C:\Users\Julian\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe 2013-11-05 14:33 - 2013-11-05 14:33 - 00000000 ____D C:\Users\Julian\Documents\Amazon MP3 2013-11-05 14:33 - 2013-11-05 14:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-11-05 14:33 - 2013-11-05 14:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Amazon 2013-11-05 14:24 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent 2013-11-01 20:35 - 2013-03-29 21:14 - 00000000 ____D C:\Users\Julian\AppData\Local\Spotify 2013-11-01 20:27 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF 2013-11-01 20:18 - 2013-04-22 17:09 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2013-11-01 20:18 - 2013-01-02 19:36 - 00000000 ____D C:\Users\Julian\AppData\Roaming\PhotoScape 2013-11-01 20:18 - 2012-08-03 03:24 - 00000000 ____D C:\Users\Administrator 2013-11-01 20:17 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\registration 2013-11-01 20:17 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\Sysprep 2013-10-30 17:29 - 2012-07-26 08:21 - 00030905 _____ C:\Windows\setupact.log 2013-10-30 14:50 - 2013-01-02 17:31 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2013-10-26 13:57 - 2013-10-26 13:57 - 00001894 _____ C:\Users\Julian\Desktop\IrfanView Thumbnails.lnk 2013-10-26 13:57 - 2013-10-26 13:57 - 00001002 _____ C:\Users\Julian\Desktop\IrfanView.lnk 2013-10-26 13:57 - 2013-10-26 13:57 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView 2013-10-26 13:57 - 2013-10-26 13:57 - 00000000 ____D C:\Users\Julian\AppData\Roaming\IrfanView 2013-10-26 13:57 - 2013-10-26 13:57 - 00000000 ____D C:\Program Files (x86)\IrfanView 2013-10-26 13:56 - 2013-10-26 13:56 - 01855072 _____ (Irfan Skiljan) C:\Users\Julian\Desktop\irfanview-4.36-multi.exe 2013-10-26 13:53 - 2013-10-26 13:53 - 02145888 _____ (Irfan Skiljan) C:\Users\Julian\Downloads\iview436g_setup.exe 2013-10-26 13:53 - 2013-10-26 13:53 - 02145888 _____ (Irfan Skiljan) C:\Users\Julian\Downloads\iview436g_setup(1).exe 2013-10-25 20:11 - 2013-01-26 21:06 - 00000934 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2960848681-2203139861-4268436981-1001Core.job 2013-10-20 17:18 - 2013-10-20 17:18 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2013-10-20 17:18 - 2013-10-20 17:18 - 00000000 ____D C:\Program Files\McAfee Security Scan 2013-10-17 17:49 - 2013-03-28 15:57 - 00000000 ____D C:\Users\Julian\Documents\TrackMania 2013-10-17 16:42 - 2013-01-01 23:55 - 00000000 ___RD C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-10-17 16:40 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ToastData 2013-10-15 19:07 - 2013-01-02 19:39 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-12 22:46 - 2013-10-12 22:46 - 00309248 _____ C:\Windows\system32\FNTCACHE.DAT 2013-10-12 10:18 - 2013-09-24 14:44 - 00000000 ____D C:\Program Files (x86)\McAfee 2013-10-12 10:17 - 2013-01-02 00:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-10 20:01 - 2013-01-02 19:36 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-10 20:01 - 2013-01-02 19:36 - 00003870 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-10 19:17 - 2013-01-02 00:20 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-10-09 17:58 - 2013-08-15 18:33 - 00000000 ____D C:\Windows\system32\MRT 2013-10-09 17:57 - 2013-01-02 18:25 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Some content of TEMP: ==================== C:\Users\Julian\AppData\Local\Temp\AskSLib.dll C:\Users\Julian\AppData\Local\Temp\bi_cleaner.exe C:\Users\Julian\AppData\Local\Temp\BundleSweetIMSetup.exe C:\Users\Julian\AppData\Local\Temp\Delta.exe C:\Users\Julian\AppData\Local\Temp\DeltaTB.exe C:\Users\Julian\AppData\Local\Temp\GoogleSetup.exe C:\Users\Julian\AppData\Local\Temp\htmlayout.dll C:\Users\Julian\AppData\Local\Temp\MybabylonTB.exe C:\Users\Julian\AppData\Local\Temp\propsys.dll C:\Users\Julian\AppData\Local\Temp\Quarantine.exe C:\Users\Julian\AppData\Local\Temp\SpotifyUpgrader.exe C:\Users\Julian\AppData\Local\Temp\tmp1E70.exe C:\Users\Julian\AppData\Local\Temp\tmp3643.exe C:\Users\Julian\AppData\Local\Temp\tmp4928.exe C:\Users\Julian\AppData\Local\Temp\tmp49F.exe C:\Users\Julian\AppData\Local\Temp\tmpAD93.exe C:\Users\Julian\AppData\Local\Temp\tmpC438.exe C:\Users\Julian\AppData\Local\Temp\tmpF531.exe C:\Users\Julian\AppData\Local\Temp\uninst1.exe C:\Users\Julian\AppData\Local\Temp\WSSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-30 17:29 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013 Ran by Julian at 2013-11-05 21:32:08 Running from C:\Users\Julian\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98) Aloha TriPeaks (x32 Version: 2.2.0.98) Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18) AMD APP SDK Runtime (Version: 10.0.938.2) AMD Catalyst Install Manager (Version: 8.0.881.0) Battlefield Heroes (HKCU) Bejeweled 3 (x32 Version: 2.2.0.98) Build-a-lot: On Vacation (x32 Version: 2.2.0.110) Call of Duty: Modern Warfare 2 (x32) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center (x32 Version: 2012.0806.1156.19437) Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437) Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437) Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437) CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437) CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437) CCC Help Czech (x32 Version: 2012.0806.1155.19437) CCC Help Danish (x32 Version: 2012.0806.1155.19437) CCC Help Dutch (x32 Version: 2012.0806.1155.19437) CCC Help English (x32 Version: 2012.0806.1155.19437) CCC Help Finnish (x32 Version: 2012.0806.1155.19437) CCC Help French (x32 Version: 2012.0806.1155.19437) CCC Help German (x32 Version: 2012.0806.1155.19437) CCC Help Greek (x32 Version: 2012.0806.1155.19437) CCC Help Hungarian (x32 Version: 2012.0806.1155.19437) CCC Help Italian (x32 Version: 2012.0806.1155.19437) CCC Help Japanese (x32 Version: 2012.0806.1155.19437) CCC Help Korean (x32 Version: 2012.0806.1155.19437) CCC Help Norwegian (x32 Version: 2012.0806.1155.19437) CCC Help Polish (x32 Version: 2012.0806.1155.19437) CCC Help Portuguese (x32 Version: 2012.0806.1155.19437) CCC Help Russian (x32 Version: 2012.0806.1155.19437) CCC Help Spanish (x32 Version: 2012.0806.1155.19437) CCC Help Swedish (x32 Version: 2012.0806.1155.19437) CCC Help Thai (x32 Version: 2012.0806.1155.19437) CCC Help Turkish (x32 Version: 2012.0806.1155.19437) ccc-utility64 (Version: 2012.0806.1156.19437) Chronicles of Albian (x32 Version: 2.2.0.110) Chuzzle Deluxe (x32 Version: 2.2.0.95) Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110) CyberLink Power2Go 8 (x32 Version: 8.0.0.1923) CyberLink PowerDVD (x32 Version: 9.0.5601.52) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287) FATE (x32 Version: 2.2.0.97) FDUx86 (x32 Version: 1.0.0) Free YouTube to MP3 Converter version 3.12.12.827 (x32 Version: 3.12.12.827) Google Chrome (x32 Version: 30.0.1599.101) Google Update Helper (x32 Version: 1.3.21.165) Heroes of Hellas 3: Athens (x32 Version: 2.2.0.110) Intel AppUp(SM) center (x32 Version: 03.05.11) Intel(R) Management Engine Components (x32 Version: 8.1.0.1252) Intel(R) Rapid Storage Technology (x32 Version: 11.5.3.1004) Intel® Trusted Connect Service Client (Version: 1.24.388.1) IrfanView (remove only) (x32 Version: 4.36) Java 7 Update 11 (64-bit) (Version: 7.0.110) Java Auto Updater (x32 Version: 2.1.6.0) Java(TM) 7 Update 5 (x32 Version: 7.0.50) KUx86 (x32 Version: 1.0.0) Luxor HD (x32 Version: 2.2.0.110) Mahjongg Artifacts (x32 Version: 2.2.0.110) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) McAfee Parental Controls (x32 Version: 2.2.122.12) McAfee Security Scan Plus (Version: 3.8.130.8) Microsoft Office (x32 Version: 14.0.6120.5004) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mirror's Edge (x32) Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0) Mozilla Maintenance Service (x32 Version: 24.0) Mystery of Mortlake Mansion (x32 Version: 2.2.0.98) Mystery P.I. - The London Caper (x32 Version: 2.2.0.95) NVIDIA PhysX v8.10.17 (x32 Version: 8.10.17) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) PhotoScape (x32) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98) PlayMemories Home (x32 Version: 6.3.02.07270) Polar Bowler (x32 Version: 2.2.0.97) PunkBuster Services (x32 Version: 0.990) Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.206) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6695) Realtek PCIE Card Reader (x32 Version: 6.1.8400.28121) Restore (x32 Version: 1.0.0) SCS Shortcut (x32 Version: 1.0) Shared C Run-time for x64 (Version: 10.0.0) Spotify (HKCU Version: 0.9.1.57.ge7405149) SSLx64 (Version: 1.0.0) SSLx86 (x32 Version: 1.0.0) Steam (x32 Version: 1.0.0.0) Synaptics Pointing Device Driver (Version: 16.2.10.5) TmNationsForever (x32) Unity Web Player (HKCU Version: ) Update Installer for WildTangent Games App (x32) VAIO - Xperia Link (x32 Version: 1.0.0.08170) VAIO Care (Version: 8.0.0.08150) VAIO Control Center (x32 Version: 6.0.0.08200) VAIO Data Restore Tool (x32 Version: 1.10.0.07270) VAIO Easy Connect (x32 Version: 1.2.0.08150) VAIO Gate (x32 Version: 3.0.0.08140) VAIO Gate Default (x32 Version: 3.0.0.08060) VAIO Gesture Control (x32 Version: 2.0.0.08240) VAIO Image Optimizer (x32 Version: 3.0.00.08170) VAIO Improvement (x32 Version: 2.0.0.08090) VAIO Media Server Settings (Version: 1.0.0.08240) VAIO Movie Creator Template Data (x32 Version: 4.0.00.08170) VAIO Update (x32 Version: 6.3.0.08010) VAIO*CPU-Lüfterdiagnose (x32 Version: 1.1.0.09200) VAIO-Handbuch (x32 Version: 3.0.0.08100) VAIO-Support für Übertragungen (x32 Version: 1.8.0.08212) VCCx64 (Version: 1.0.0) VCCx86 (x32 Version: 1.0.0) VGClientX64 (Version: 1.0.0) VHD (x32 Version: 1.0.0) Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98) VIx64 (Version: 1.0.0) VIx86 (x32 Version: 1.0.0) VMLx86 (x32 Version: 1.0.0) VPMx64 (Version: 1.0.0) VSSTx64 (Version: 1.0.0) VSSTx86 (x32 Version: 1.0.0) VU5x64 (Version: 1.0.0) VU5x86 (x32 Version: 1.0.0) VUx64 (Version: 1.0.0) VUx86 (x32 Version: 1.0.0) VWSTx86 (x32 Version: 1.0.0) WildTangent Games App (x32 Version: 4.0.8.7) WildTangent-Spiele (x32 Version: 1.0.3.0) WinRAR 5.00 (64-Bit) (Version: 5.00.0) XperiaLinkx86 (x32 Version: 1.0.0) ==================== Restore Points ========================= 21-10-2013 08:35:47 Geplanter Prüfpunkt 30-10-2013 17:16:15 Windows Modules Installer 01-11-2013 19:14:42 Wiederherstellungsvorgang 05-11-2013 17:08:25 OTL Restore Point - 05.11.2013 18:08:25 ==================== Hosts content: ========================== 2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0F681C7F-B9A9-41FC-8E20-89673A2ACE46} - \Plus-HD-1.6-chromeinstaller No Task File Task: {16B52313-B8F2-44C2-81BB-1346B616A954} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.) Task: {23B729DC-2DA2-4B44-B834-9DEC24C922C5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated) Task: {30DF0947-F4C3-4044-9802-B4ABBB7C9C78} - \Plus-HD-1.6-enabler No Task File Task: {34022B04-4C87-4693-ADC7-EFFC335B0F78} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2960848681-2203139861-4268436981-1001UA => C:\Users\Julian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-26] (Facebook Inc.) Task: {3B706437-D51D-43DA-82B8-A5BEEBEC60F5} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient Task: {3D374A6B-9B53-434C-B9EF-96525684150D} - System32\Tasks\RunAsStdUser Task => C:\Users\Julian\AppData\Local\Oxy\Application\oxy.exe Task: {519F3F6E-00F6-41DE-B67A-8B168B7CBCBD} - System32\Tasks\Escolade => C:\Users\Julian\AppData\Roaming\Oxy\Updater.exe Task: {559E56D6-A93F-4EAF-A5DB-26D7BA3E761F} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2012-08-09] (Sony Corporation) Task: {6000181C-5BFB-4A32-A5F0-5FCD7D0C6EA8} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation) Task: {65941E73-FBAB-4C79-87AF-81982C6AE294} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-08-14] (Sony Corporation) Task: {65A23392-393A-49F1-B815-C96BB2D668B0} - \Plus-HD-1.6-updater No Task File Task: {707F9DC4-ECAF-4BDD-8628-F70542E08451} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation) Task: {71B7944A-2B86-48B4-81F7-3B6670C1730B} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation) Task: {72069864-E0CC-4F6C-B923-19E37D64D109} - \Plus-HD-1.6-codedownloader No Task File Task: {832E2A54-8190-42B0-8534-FC271E5FA234} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-08-18] (Sony Corporation) Task: {86630F59-2F99-445B-9361-6422E3A61916} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation) Task: {86ED6839-3BD7-4E71-9FA7-E3AA92E6B905} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-02] (Google Inc.) Task: {A8904DF7-90EC-40D7-BF77-07237D9AC9DF} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation) Task: {B51E3C8B-A605-4701-BA98-B18F0DC0553B} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2013-04-03] (Sony Corporation) Task: {B6B4E4D2-1CC5-4AA7-BC31-70FEAC997201} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2960848681-2203139861-4268436981-1001Core => C:\Users\Julian\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-26] (Facebook Inc.) Task: {CA85CE24-4719-4467-87A8-3494D539200D} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-08-18] (Sony Corporation) Task: {D330B777-39C3-4234-A66C-799691926D58} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-08-01] (Sony Corporation) Task: {DB1CE8FE-456C-40A2-9EFC-3B4C78100EBE} - System32\Tasks\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-07-31] (Sony Corporation) Task: {DC666EAF-584A-4462-AEA3-C7E1A9437083} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2013-04-03] (Sony Corporation) Task: {DEEC142D-9BF4-4398-ABD4-01A22FB34541} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation) Task: {E03684EF-5FFA-4ABE-A949-A2912A87E0CC} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation) Task: {E09AEF75-08C4-49DD-8108-BAB28D61DCA6} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2012-08-04] (Sony Corporation) Task: {E15F808E-F926-45D0-8065-9B1E11E3C2C6} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink) Task: {E1C444F6-00B7-4F71-B74F-EF11116B9179} - \AmiUpdXp No Task File Task: {EB198ABD-9B49-439A-8538-EE14CB4DA5CF} - \Plus-HD-1.6-firefoxinstaller No Task File Task: {F2089BBF-F711-468E-A503-1148FD9FBB88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-02] (Google Inc.) Task: {F3AB079A-0EEF-48A6-BCE7-CB9BCDD7EB15} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-08-01] (Sony Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2960848681-2203139861-4268436981-1001Core.job => C:\Users\Julian\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2960848681-2203139861-4268436981-1001UA.job => C:\Users\Julian\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-04-02 21:47 - 2013-04-02 21:49 - 00176024 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1114.318_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll 2012-08-13 17:25 - 2012-08-13 17:25 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll 2012-08-13 17:20 - 2012-08-13 17:20 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll 2012-08-06 11:54 - 2012-08-06 11:54 - 00369664 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2012-11-30 10:00 - 2013-09-10 13:38 - 00277416 _____ () C:\Program Files\McAfeeEx\MOCP\core\OCP_LD.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00015872 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00443904 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll 2012-11-30 09:59 - 2012-06-25 14:47 - 00060928 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll 2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2012-11-30 10:09 - 2012-06-08 04:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll 2012-06-08 11:34 - 2012-06-08 11:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll 2012-11-30 09:25 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2013-08-18 15:20 - 2013-10-02 20:16 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/05/2013 09:00:40 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x70b6467c ID des fehlerhaften Prozesses: 0x46c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 09:00:38 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc00001a5 Fehleroffset: 0x01314fa0 ID des fehlerhaften Prozesses: 0x46c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 09:00:37 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x70b6467c ID des fehlerhaften Prozesses: 0x1a3c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 09:00:36 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc00001a5 Fehleroffset: 0x00f74fa0 ID des fehlerhaften Prozesses: 0x1a3c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 09:00:09 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x70b6467c ID des fehlerhaften Prozesses: 0x181c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 09:00:08 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc00001a5 Fehleroffset: 0x00b24fa0 ID des fehlerhaften Prozesses: 0x181c Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 09:00:06 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x70b6467c ID des fehlerhaften Prozesses: 0x1ba8 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 09:00:05 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc00001a5 Fehleroffset: 0x039b4fa0 ID des fehlerhaften Prozesses: 0x1ba8 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 08:59:55 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x70b6467c ID des fehlerhaften Prozesses: 0x478 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 Error: (11/05/2013 08:59:53 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe, Version: 11.9.900.117, Zeitstempel: 0x5244d3b6 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc00001a5 Fehleroffset: 0x00e24fa0 ID des fehlerhaften Prozesses: 0x478 Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_117.exe0 Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_117.exe1 Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_117.exe2 Berichtskennung: FlashPlayerPlugin_11_9_900_117.exe3 Vollständiger Name des fehlerhaften Pakets: FlashPlayerPlugin_11_9_900_117.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FlashPlayerPlugin_11_9_900_117.exe5 System errors: ============= Error: (11/05/2013 05:49:00 PM) (Source: Virtual Disk Service) (User: ) Description: Unerwarteter Anbieterfehler. Möglicherweise kann das Problem durch erneutes Starten des Dienstes behoben werden. Fehlercode: 8007001F@02000014 Error: (11/05/2013 04:01:20 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "SafetyNut Manager" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (11/01/2013 08:35:14 PM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (11/01/2013 08:35:14 PM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (11/01/2013 08:35:10 PM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (11/01/2013 08:35:10 PM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (11/01/2013 08:08:00 PM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (11/01/2013 08:08:00 PM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (10/31/2013 00:18:43 AM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (10/31/2013 00:18:43 AM) (Source: DCOM) (User: VAIO-JULIAN) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Microsoft Office Sessions: ========================= Error: (11/05/2013 09:00:40 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c000000570b6467c46c01ceda61b2e2e7a5C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknownf145054d-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 09:00:38 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c00001a501314fa046c01ceda61b2e2e7a5C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknownf0a52c68-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 09:00:37 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c000000570b6467c1a3c01ceda61b1320801C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknownef97db0c-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 09:00:36 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c00001a500f74fa01a3c01ceda61b1320801C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknowneef3b623-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 09:00:09 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c000000570b6467c181c01ceda61a09d9512C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknowndf01fc71-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 09:00:08 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c00001a500b24fa0181c01ceda61a09d9512C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknownde5ed2f6-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 09:00:06 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c000000570b6467c1ba801ceda619edcb494C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknowndd53e5c3-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 09:00:05 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c00001a5039b4fa01ba801ceda619edcb494C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknowndca27395-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 08:59:55 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c000000570b6467c47801ceda61980edd6dC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknownd67c5c04-4654-11e3-be93-a41731d04e5c Error: (11/05/2013 08:59:53 PM) (Source: Application Error)(User: ) Description: FlashPlayerPlugin_11_9_900_117.exe11.9.900.1175244d3b6unknown0.0.0.000000000c00001a500e24fa047801ceda61980edd6dC:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exeunknownd5d02433-4654-11e3-be93-a41731d04e5c ==================== Memory info =========================== Percentage of memory in use: 23% Total physical RAM: 8139.27 MB Available physical RAM: 6202.86 MB Total Pagefile: 9355.27 MB Available Pagefile: 7340.1 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:429.66 GB) (Free:342.06 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 5D26A96B) Partition: GPT Partition Type ==================== End Of Log ============================ also ich bekomm das mit der Logdatei von SystemLook nicht hin,weil das zu viele Zeichen besitzt. Aber ich beantworte dann erstmal die Fragen : Es gibt keine Probleme mehr mit der malware und der Rechner läuft auch gut. kleines update, der laptop läuft doch nicht so gut, videos werden im internet kaum geladen und er hakt zwischendurch auch. |