fuerBine | 06.09.2013 14:29 | Windows 7: COM Surrogate funktioniert nicht mehr Guten Tag zusammen,
Wenn ich mit der Windows-Fotoanzeige von einem Bild zum Nächsten klicke, erscheint - mal öfter, mal seltener - die Meldung "COM Surrogate funktioniert nicht mehr" und die Windows-Fotoanzeige schließt sich.
Da ich im Netz nichts exakt passendes gefunden habe, habe ich auch noch nichts unternommen, außer die drei vom Trojaner-Board empfohlenen Dateien runter geladen zu haben. Die entsprechenden Logfiles poste ich gleich mal mit.
Vielen Dank schon mal im voraus.
defogger_disable.log Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:57 on 06/09/2013 (bine)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=- Addition.txt Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-09-2013
Ran by bine at 2013-09-06 14:00:25
Running from C:\Users\bine\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
64 Bit HP CIO Components Installer (Version: 7.2.4)
Adobe AIR (x32 Version: 2.6.0.19120)
Adobe Community Help (x32 Version: 3.2.1)
Adobe Community Help (x32 Version: 3.2.1.650)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Photoshop Elements 9 (x32 Version: 9.0)
Adobe Premiere Elements 9 (x32 Version: 9.0)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98)
ALPS Touch Pad Driver (Version: 7.109.2020.209)
Apple Application Support (x32 Version: 1.2.1)
Apple Software Update (x32 Version: 2.1.1.116)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.0.8.8)
Atheros Driver Installation Program (x32 Version: 9.0)
Bejeweled 3 (x32 Version: 2.2.0.98)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
D3DX10 (x32 Version: 15.4.2368.0902)
Dropbox (HKCU Version: 2.0.22)
eBay Worldwide (x32 Version: 2.2.0409)
Elements 9 Organizer (x32 Version: 9.0)
Elements STI Installer (x32 Version: 1.0)
Evernote v. 4.5.2 (x32 Version: 4.5.2.5866)
FATE (x32 Version: 2.2.0.97)
FileZilla Client 3.2.7.1 (x32 Version: 3.2.7.1)
Final Drive: Nitro (x32 Version: 2.2.0.95)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.153)
HP Photosmart Wireless B110 All-In-One Driver 14.0 Rel. 7 (Version: 14.0)
Identity Card (x32 Version: 1.00.3501)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.0.1351)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2653)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220)
Intel® Trusted Connect Service Client (Version: 1.23.216.0)
Jewel Match 3 (x32 Version: 2.2.0.98)
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kobo (x32 Version: 2.1.5)
Launch Manager (x32 Version: 5.1.15)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
Media Go (x32 Version: 1.4.269)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5139.5005)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero BackItUp 10 (x32 Version: 5.8.11100.9.100)
Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Control Center 10 (x32 Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Core Components 10 (x32 Version: 2.0.19900.9.11)
Nero DiscSpeed 10 (x32 Version: 6.4.10500.1.100)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Express 10 (x32 Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10300)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10400)
Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10700)
Nero StartSmart 10 (x32 Version: 10.6.10600.4.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Update (x32 Version: 1.0.10900.31.0)
Network64 (Version: 140.0.212.000)
Norton Online Backup (x32 Version: 2.1.17869)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Packard Bell Games (x32 Version: 1.0.2.5)
Packard Bell Power Management (x32 Version: 6.00.3010)
Packard Bell Recovery Management (x32 Version: 5.00.3507)
Packard Bell Registration (x32 Version: 1.04.3506)
Packard Bell ScreenSaver (x32 Version: 1.1.0915.2011)
Packard Bell Social Networks (x32 Version: 3.0.3106)
Packard Bell Updater (x32 Version: 1.02.3501)
Penguins! (x32 Version: 2.2.0.98)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
PlayStation(R)Network Downloader (x32 Version: 2.02.00076)
PlayStation(R)Store (x32 Version: 3.1.8.07881)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Polar Bowler (x32 Version: 2.2.0.97)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
PS_AIO_07_B110_SW_Min (x32 Version: 140.0.142.000)
QuickTime (x32 Version: 7.66.71.0)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6564)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.85)
rosoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Scan (x32 Version: 140.0.77.000)
Skype™ 5.10 (x32 Version: 5.10.116)
Slingo Deluxe (x32 Version: 2.2.0.95)
Sony Ericsson PC Companion 1.60.13 (x32 Version: 1.60.13)
Sony Ericsson PC Suite 6.011.00 (x32 Version: 6.011.00)
Toolbox (x32 Version: 140.0.424.000)
Torchlight (x32 Version: 2.2.0.98)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Video Web Camera (x32 Version: 1.5.2108.00)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97)
Wedding Dash (x32 Version: 2.2.0.95)
Welcome Center (x32 Version: 1.02.3507)
WildTangent Games App (Packard Bell Games) (x32 Version: 4.0.5.32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922)
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
XnView 1.99.6 (x32 Version: 1.99.6)
Zuma Deluxe (x32 Version: 2.2.0.95)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
بريد Windows Live (x32 Version: 15.4.3502.0922)
معرض صور Windows Live (x32 Version: 15.4.3502.0922)
==================== Restore Points =========================
13-08-2013 07:56:36 Windows Update
15-08-2013 07:43:20 Windows Update
20-08-2013 16:09:29 Windows Update
27-08-2013 08:33:15 Windows Update
02-09-2013 08:05:45 Windows Update
06-09-2013 07:52:53 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {14B43F86-285A-4408-9026-B294F8039B7A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {1D7C31EF-3DEE-4EA2-B0FB-8FCBD5D5752F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-30] (Google Inc.)
Task: {3550140F-5D3E-4187-A02A-49F55F998DEE} - System32\Tasks\UALU notificatin => C:\Program Files\Packard Bell\Packard Bell Updater\UALU.exe [2012-02-07] (Acer Incorporated)
Task: {69F882C1-5269-4E4C-BEDA-E527F65C48BC} - System32\Tasks\NBAgent => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2012-01-16] (Nero AG)
Task: {7E245981-F5A0-405A-AA55-ABF1C3DEE117} - System32\Tasks\{E607C569-DC3C-4323-B188-B54F7D421A45} => C:\Program Files (x86)\XnView\xnview.exe [2012-12-18] (XnView, hxxp://www.xnview.com)
Task: {85DE68F4-CEA8-4C91-85C9-6954437BD6F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated)
Task: {9405E8FE-126A-4F57-8069-BED848749419} - System32\Tasks\{4B450212-6888-463D-9699-16AF519D123E} => C:\Program Files (x86)\XnView\xnview.exe [2012-12-18] (XnView, hxxp://www.xnview.com)
Task: {B3ED4E4C-8EB9-4CD5-BFFC-9AFD959D32C1} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {D191062F-92A7-414B-8A7E-DECADB6039DE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {EE68E607-4C34-4B3E-8881-4CEA72664A06} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {FE1AA4A2-2EA1-41AA-9ABB-3AF384B19D96} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-30] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-06-06 16:15 - 2012-02-07 17:53 - 00271232 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\SysHook.dll
2013-05-25 02:36 - 2013-05-25 02:36 - 00164016 _____ (Dropbox, Inc.) C:\Users\bine\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
2009-08-23 19:24 - 2009-08-23 19:24 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-04-20 09:29 - 2012-02-14 03:57 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2012-04-20 09:28 - 2012-02-14 03:53 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-04-21 12:06 - 2011-06-21 03:32 - 00417144 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApResGR.dll
2012-04-21 12:06 - 2011-09-21 12:26 - 00112504 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\VXDIF.DLL
2012-04-21 12:06 - 2011-07-23 08:36 - 01075064 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.DLL
2012-04-21 12:06 - 2010-05-31 15:23 - 00039792 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\EzAuto.dll
2012-04-21 12:06 - 2010-10-04 14:12 - 00279408 _____ (Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\EzLaunch.DLL
2012-06-06 16:15 - 2012-02-07 17:53 - 00218000 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\BrightnessControl.dll
2012-06-06 16:15 - 2012-02-07 17:53 - 00216472 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\PowerSettingControl.dll
2012-06-06 16:15 - 2012-02-07 17:53 - 00215944 _____ (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\CommonControl.dll
2012-04-21 12:06 - 2012-03-23 11:33 - 00880208 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDUtl.dll
2012-04-21 12:06 - 2011-03-14 13:44 - 00075856 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\NTKCUtl.dll
2013-03-04 19:30 - 2009-06-24 10:32 - 00262144 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\bvrpctln.dll
2013-03-04 19:30 - 2009-11-24 17:31 - 00549888 ____N (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\NewUI.dll
2013-03-04 19:30 - 2009-02-05 14:25 - 00049152 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\BVRPNAC.dll
2013-03-04 19:30 - 2009-06-17 10:28 - 00317440 _____ (BVRP Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\MExplorer.dll
2013-03-04 19:30 - 2009-12-04 13:52 - 00327680 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\ModemWiz.dll
2013-03-04 19:30 - 2008-12-05 16:05 - 00073728 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\Comm.dll
2013-03-04 19:30 - 2007-02-07 15:31 - 00036864 _____ (Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\ModExch.dll
2013-03-04 19:30 - 2009-06-17 13:09 - 00356352 _____ (Avanquest Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\RasCnxMngr.dll
2013-03-04 19:30 - 2009-04-02 15:57 - 00278528 _____ (BVRP Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\WFP1N.dll
2013-03-04 19:30 - 2009-05-15 17:14 - 00114688 _____ (BVRP Software) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\WUNPACLN.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\bine\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\bine\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\bine\AppData\Roaming\Dropbox\bin\icudt.dll
2012-04-21 12:06 - 2012-03-08 09:01 - 00080976 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\ComFnUtl.dll
2012-04-21 12:06 - 2009-07-14 08:53 - 00128008 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\CDRomUtl.dll
2012-04-21 12:06 - 2009-07-27 06:42 - 00062472 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MixerUtl.dll
2012-04-21 12:06 - 2009-07-27 06:47 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\Wnd2File.dll
2012-04-21 12:06 - 2009-07-27 12:43 - 00068104 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\PowerUtl.dll
2012-04-21 12:06 - 2012-02-22 11:30 - 00327760 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\OSDUtl2.dll
2012-04-21 12:06 - 2009-07-27 06:38 - 00088584 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\SzUPFUtl.dll
2012-04-21 12:06 - 2012-03-22 03:44 - 00432208 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\RadioWndUtl.dll
2012-04-21 12:06 - 2012-03-23 11:33 - 00397904 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\aipflib.dll
2012-04-21 12:06 - 2012-03-06 09:09 - 00104528 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LmSmbKel.dll
2012-04-21 12:06 - 2009-07-03 10:29 - 00147464 _____ (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\VistaVol.DLL
2012-08-10 16:51 - 2012-08-10 16:51 - 01742848 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\sal3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00085504 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\uwinapi.dll
2012-08-13 10:51 - 2012-08-13 10:51 - 00271872 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sofficeapp.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01048064 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\comphelpMSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00439808 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppuhelper3MSC.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00013824 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\salhelper3MSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00152064 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppu3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00597504 _____ (STLport Consulting, Inc.) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stlport_vc7145.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00358400 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucbhelper4MSC.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00094720 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\vos3MSC.dll
2012-08-13 10:51 - 2012-08-13 10:51 - 00139776 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmisc.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00589312 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\tl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00705536 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\basegfx.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00027136 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18nisolang1MSC.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00952320 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\utl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00531968 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\xcr.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02995200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sfx.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00407552 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwe.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00159232 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwi.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00835072 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00257536 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sot.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 03118592 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svt.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00067072 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18nutilMSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00951808 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuuc40.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 13914112 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icudt40.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00093696 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmfwk3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02364416 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\tk.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 03496960 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\vcl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00029696 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18npaper.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00086528 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sax.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01772032 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sb.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00052224 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\msci_uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00499712 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\bootstrap.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00093184 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reg3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00053760 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\store3.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00035328 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\xmlreader.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00375808 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\configmgr.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00024064 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\localebe1.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00092672 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stocservices.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00210944 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucb1.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01777664 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwk.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00258560 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucpfile1.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01317376 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\i18npool.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 01071616 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuin40.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00286720 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\oleautobridge.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00148480 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\emser.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00236032 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\uui.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00183808 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\filterconfig1.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00051712 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\swd.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00115200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\dnd.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 08563200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sw.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00212480 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\avmedia.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00842240 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\drawinglayer.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00382464 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\canvastools.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00293376 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\cppcanvas.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01519104 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\editeng.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 03012096 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\xo.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00987136 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\lng.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02562048 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svx.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 05574656 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\svxcore.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00707584 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_euro.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00104448 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_en.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01172480 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\msword.DLL
2012-08-10 16:51 - 2012-08-10 16:51 - 00723456 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\msfilter.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00325632 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\unoxml.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00177664 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\updchk.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00180224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\libcurl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00373760 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\xstor.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00098304 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reflection.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00324096 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\package2.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00051712 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fileacc.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00155648 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sax.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00107520 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\sysdtrans.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01673728 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\frm.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 02480640 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\dbtools.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00023552 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmaccess3MSC.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00099328 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\introspection.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00046592 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\evtatt.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00091648 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fsstorage.uno.dll
2012-08-13 10:51 - 2012-08-13 10:51 - 00559104 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\deployment.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00154112 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\helplinker.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00024576 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucpexpand1.uno.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00054272 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\updatefeed.uno.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00008704 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\onlinecheck.DLL
2012-08-10 16:51 - 2012-08-10 16:51 - 00048640 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\updchk.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00062464 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\res.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00257024 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ucpchelp1.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00040960 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\dtrans.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 00297984 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\fwl.dll
2012-08-10 16:51 - 2012-08-10 16:51 - 01497600 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\swui.dll
2012-08-10 16:50 - 2012-08-10 16:50 - 00051200 _____ (Apache Software Foundation) C:\Program Files (x86)\OpenOffice.org 3\program\ftransl.dll
==================== Alternate Data Streams (whitelisted) ==========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Faulty Device Manager Devices =============
Name: Photosmart B110 series
Description: Photosmart B110 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Photosmart B110 series
Description: Photosmart B110 series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/06/2013 00:38:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0xcdc
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Error: (09/06/2013 10:32:31 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"2" in Zeile Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0".
Definition: Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (09/06/2013 09:48:40 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/06/2013 09:48:40 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"2" in Zeile Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0".
Definition: Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (09/06/2013 03:56:39 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x168c
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Error: (09/06/2013 03:56:36 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x168c
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Error: (09/06/2013 03:55:57 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0xca8
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Error: (09/06/2013 03:55:54 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0xca8
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Error: (09/06/2013 03:47:37 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x14b0
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Error: (09/06/2013 03:47:34 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bca54
Name des fehlerhaften Moduls: igdumd64.dll, Version: 8.15.10.2653, Zeitstempel: 0x4f3aac44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000030eb06
ID des fehlerhaften Prozesses: 0x14b0
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
System errors:
=============
Error: (09/06/2013 09:49:28 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/05/2013 00:49:19 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/05/2013 10:31:55 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/05/2013 03:04:16 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/04/2013 02:12:22 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/03/2013 11:21:57 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/02/2013 11:12:18 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/02/2013 10:02:15 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/01/2013 00:12:31 AM) (Source: DCOM) (User: )
Description: {005A3A96-BAC4-4B0A-94EA-C0CE100EA736}
Error: (08/31/2013 01:19:52 AM) (Source: DCOM) (User: )
Description: {005A3A96-BAC4-4B0A-94EA-C0CE100EA736}
Microsoft Office Sessions:
=========================
Error: (09/06/2013 00:38:44 PM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06cdc01ceaaed3a68073cC:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll806a6da2-16e0-11e3-bee1-e840f2f9903b
Error: (09/06/2013 10:32:31 AM) (Source: SideBySide)(User: )
Description: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0"C:\Program Files (x86)\Sony\Media Go\MediaGo.exeC:\Program Files (x86)\Sony\Media Go\Sony.Mrs.MANIFEST3
Error: (09/06/2013 09:48:40 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/06/2013 09:48:40 AM) (Source: SideBySide)(User: )
Description: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0"Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0"C:\Program Files (x86)\Sony\Media Go\MediaGo.exeC:\Program Files (x86)\Sony\Media Go\Sony.Mrs.MANIFEST3
Error: (09/06/2013 03:56:39 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c000041d000000000030eb06168c01ceaaa445ce3262C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll9149b37d-1697-11e3-9644-e840f2f9903b
Error: (09/06/2013 03:56:36 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06168c01ceaaa445ce3262C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll8f9f7fb0-1697-11e3-9644-e840f2f9903b
Error: (09/06/2013 03:55:57 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c000041d000000000030eb06ca801ceaaa3c56d9d9bC:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll7860892d-1697-11e3-9644-e840f2f9903b
Error: (09/06/2013 03:55:54 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb06ca801ceaaa3c56d9d9bC:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll76bc21d5-1697-11e3-9644-e840f2f9903b
Error: (09/06/2013 03:47:37 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c000041d000000000030eb0614b001ceaaa30b82e205C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll4e0ef6c2-1696-11e3-9644-e840f2f9903b
Error: (09/06/2013 03:47:34 AM) (Source: Application Error)(User: )
Description: DllHost.exe6.1.7600.163854a5bca54igdumd64.dll8.15.10.26534f3aac44c0000005000000000030eb0614b001ceaaa30b82e205C:\Windows\system32\DllHost.exeC:\Windows\system32\igdumd64.dll4cb07310-1696-11e3-9644-e840f2f9903b
==================== Memory info ===========================
Percentage of memory in use: 36%
Total physical RAM: 3932.36 MB
Available physical RAM: 2477.67 MB
Total Pagefile: 7862.9 MB
Available Pagefile: 6345.19 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Packard Bell) (Fixed) (Total:341.85 GB) (Free:267.92 GB) NTFS
Drive e: (Daten) (Fixed) (Total:339.19 GB) (Free:202.02 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: BBF1E206)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=342 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=339 GB) - (Type=OF Extended)
==================== End Of Log ============================
FRST.txt Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2013
Ran by bine (administrator) on BINE-PC on 06-09-2013 13:59:08
Running from C:\Users\bine\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(Dropbox, Inc.) C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\bine\Desktop\Defogger.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-02-11] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [576376 2012-02-02] (Alps Electric Co., Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [Sony Ericsson PC Companion] - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [774144 2009-12-08] (Sony Ericsson Mobile Communications AB)
MountPoints2: {8f491e12-1289-11e3-b118-e840f2f9903b} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\Harley.exe www.h-d2011my-press.eu
MountPoints2: {d901a9ae-849e-11e2-805f-e840f2f9903b} - H:\Startme.exe
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-26] (Intel Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\bine\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\bine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.tb.ask.com/index.jhtml?n=77DE8857&p2=^UX^xdm244^YYA^de&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&si=MA_MAPS_FIG_GER_13
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKLM-x32 - {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&ind=2013071907&n=77fd0a23&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=DE&userid=231adb63-7983-4d8c-9071-fee617ccf76d&searchtype=ds&q={searchTerms}&installDate=29/04/2013
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=120519&babsrc=SP_ss&mntrId=7C33666D57B5AA63
SearchScopes: HKCU - {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&ind=2013071907&n=77fd0a23&psa=&st=sb&searchfor={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default
FF user.js: detected! => C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\user.js
FF NewTab: about:blank
FF DefaultSearchEngine: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=8AD5A822-1D9D-4BCD-85AB-D333BF96C986&n=77fd0a26&ind=2013071910&p2=^UX^xdm244^YYA^de&si=MA_MAPS_FIG_GER_13&searchfor=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\ask-web-search.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Yahoo! Toolbar - C:\Users\bine\AppData\Roaming\Mozilla\Firefox\Profiles\omutrhle.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
==================== Services (Whitelisted) =================
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [871296 2012-02-07] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [28264 2012-02-29] (Acer Incorporated)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-02-07] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] ()
==================== Drivers (Whitelisted) ====================
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2009-11-19] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2009-11-19] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2009-11-19] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2009-11-19] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2009-11-19] (MCCI Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-06 13:57 - 2013-09-06 13:57 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:45 - 2013-09-06 13:46 - 01948360 _____ (Farbar) C:\Users\bine\Desktop\FRST64.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 13:35 - 2013-09-06 13:35 - 00007894 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 09:50 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 09:50 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 09:50 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 09:50 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 09:50 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 09:50 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 09:50 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 09:50 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 09:50 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 09:50 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 10:31 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 10:31 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 10:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 10:27 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 10:27 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 10:27 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 10:27 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 10:27 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 10:27 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 10:27 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 10:27 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 10:27 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 10:27 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 10:27 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 10:27 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 10:27 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-07 12:25 - 2013-08-08 09:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
==================== One Month Modified Files and Folders =======
2013-09-06 13:58 - 2013-09-06 13:58 - 00000000 ____D C:\FRST
2013-09-06 13:57 - 2013-09-06 13:57 - 00000470 _____ C:\Users\bine\Desktop\defogger_disable.log
2013-09-06 13:57 - 2013-09-06 13:57 - 00000000 _____ C:\Users\bine\defogger_reenable
2013-09-06 13:57 - 2012-12-16 13:13 - 00000000 ____D C:\Users\bine
2013-09-06 13:47 - 2013-09-06 13:47 - 00377856 _____ C:\Users\bine\Desktop\1z45y8b9.exe
2013-09-06 13:46 - 2013-09-06 13:45 - 01948360 _____ (Farbar) C:\Users\bine\Desktop\FRST64.exe
2013-09-06 13:43 - 2013-09-06 13:43 - 00050477 _____ C:\Users\bine\Desktop\Defogger.exe
2013-09-06 13:40 - 2013-09-06 13:40 - 00016408 _____ C:\Users\bine\Desktop\get-mirror-server.html
2013-09-06 13:35 - 2013-09-06 13:35 - 00007894 _____ C:\Users\bine\Desktop\Anleitung_ TrojanerBoard.txt
2013-09-06 13:31 - 2012-04-21 12:07 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-06 13:27 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-06 13:27 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-06 13:24 - 2013-03-30 02:07 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-06 12:50 - 2013-02-10 18:24 - 00000000 ____D C:\Users\bine\AppData\Roaming\XnView
2013-09-06 12:47 - 2013-09-06 12:47 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-09-06 12:47 - 2012-12-16 14:37 - 00000000 ____D C:\Users\bine\AppData\Roaming\Adobe
2013-09-06 12:47 - 2012-04-21 12:06 - 00000000 ____D C:\ProgramData\Adobe
2013-09-06 12:41 - 2013-06-28 16:24 - 00000000 ____D C:\Users\bine\AppData\Local\CrashDumps
2013-09-06 12:14 - 2012-06-06 15:44 - 01558304 _____ C:\Windows\WindowsUpdate.log
2013-09-06 11:24 - 2013-03-30 02:07 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-06 09:48 - 2013-04-29 12:37 - 00000000 ___RD C:\Users\bine\Dropbox
2013-09-06 09:48 - 2013-04-29 11:26 - 00000000 ____D C:\Users\bine\AppData\Roaming\Dropbox
2013-09-06 09:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-06 09:48 - 2009-07-14 06:51 - 00052517 _____ C:\Windows\setupact.log
2013-09-06 02:39 - 2012-06-07 01:36 - 01542364 _____ C:\Windows\system32\perfh007.dat
2013-09-06 02:39 - 2012-06-07 01:36 - 00414586 _____ C:\Windows\system32\perfc007.dat
2013-09-06 02:39 - 2009-07-14 07:13 - 00005430 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-05 12:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-05 03:15 - 2013-07-28 09:57 - 00000000 ____D C:\Users\bine\Desktop\Desktop-Bilder
2013-09-03 15:26 - 2013-07-28 09:55 - 00000000 ____D C:\Users\bine\Desktop\Rechnungen-2013
2013-08-22 09:11 - 2013-07-24 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-20 22:33 - 2012-04-21 12:07 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 22:33 - 2012-04-21 12:07 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 22:33 - 2012-04-21 12:07 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-18 22:08 - 2013-08-18 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 15:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-15 09:46 - 2013-07-23 23:59 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 09:44 - 2013-06-27 00:01 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-08 09:56 - 2013-08-07 12:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-07 11:44 - 2012-12-31 00:30 - 00000000 ____D C:\Users\bine\AppData\Local\Thunderbird
Files to move or delete:
====================
C:\Users\bine\AppData\Local\Temp\install_reader11_de_mssd_aih.exe
C:\Users\bine\AppData\Local\Temp\uninst1.exe
C:\Users\bine\AppData\Local\Temp\wajam_install.exe
C:\Users\bine\AppData\Local\Temp\{8C030983-978B-4EEF-9F87-ED0C9B216FA3}\ISBEW64.exe
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ZHH\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\TRK\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\THA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\SVE\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\RUS\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\PTG\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\PLK\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\NOR\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\NLD\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\JPN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ITA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\HUN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\HEB\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FRC\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FRA\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\FIN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ESP\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ESM\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ENU\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ENG\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ELL\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\DEU\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\DAN\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CSY\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CHT\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\CHS\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Languages\ARB\VCBResources.dll
C:\Users\bine\AppData\Local\Temp\VCB\Graphics\NewUI.dll
C:\Users\bine\AppData\Local\Temp\Upgrade\MediaGo_1.4.exe
C:\Users\bine\AppData\Local\Temp\Upgrade\Sony Ericsson PC Suite_6.011.00_Web_DEU.exe
C:\Users\bine\AppData\Local\Temp\PCCompanion\NewUI.dll
C:\Users\bine\AppData\Local\Temp\PCCompanion\Drivers\DPInst.exe
C:\Users\bine\AppData\Local\Temp\PCCompanion\Drivers\DPInst64.exe
C:\Users\bine\AppData\Local\Temp\nsx5E09.tmp\DropboxNSISTools.dll
C:\Users\bine\AppData\Local\Temp\nsx5E09.tmp\UAC.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\bin.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\config.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\DomaIQ.exe
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\routes.dll
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\Delta Babylon.exe
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\FlashPlayer.exe
C:\Users\bine\AppData\Local\Temp\DM\qYy3nbGh1voxO2Q\software\OptimizerPro.exe
C:\Users\bine\AppData\Local\Temp\bus9C8D\ff21v.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Setup.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\sqlite3.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\ccp.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\ChromeToolbarSetup.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\CrxInstaller.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\GUninstaller.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\IEHelper.dll
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\MyBabylonTB.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\Setup.exe
C:\Users\bine\AppData\Local\Temp\A858045B-BAB0-7891-B59B-921EE368A014\Latest\sqlite3.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS7D21\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS5C5F\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\HPZids01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\HPZids40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzsetup.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzstub.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\hpzuci12.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\CCC_Uninstaller.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\FixErr1714.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\hpqrrx08.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\PrintUtil.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\x64\printutil.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\util\ccc\enu\WindowsXP-KB822603-x86-enu.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPCommunication.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPeDiag.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPeSupport.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\HPScripting.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzarp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzcdl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzchk01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzdui01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzdui40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzfwx01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzgat01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzmsi01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznop01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznui01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznui40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznuiprn01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpznuiprn40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpnp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpnp40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzprl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzprl40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpsc01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzpsl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrcn01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrcv01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzrein01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzscr01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzscr40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzshl01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzshl40.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpztim01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwis01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwrp01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\hpzwup01.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\InstallMetrics.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\InternetUtil.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\msxml3r.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\RulesEngine.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\usbready.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\x64\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\wis\Win2K_XP\instmsi.exe
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpqNwDr01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx86\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\atl90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpqNwDr40.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscb01.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi0SmrtK.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi1BPDUSB.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi257usw.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi259Nop.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\hpzscbi2Snmp.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfc90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfc90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\mfcm90u.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcm90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcp90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\setup\networkx64\msvcr90.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x64\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hposc_p04a.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hpost_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hposwia_p04b.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\scanner\x32\hpotsti1.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\win2000\hpzc3212.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\difxapi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\hppldcoi.dll
C:\Users\bine\AppData\Local\Temp\7zS289B\drivers\dot4\amd64\winxp\hppldcoi.x64.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BabMaint.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BUSolution.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\BUSUninstall.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\ccp.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\ChromeToolbarSetup.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\CrxInstaller.dll
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\GUninstaller.exe
C:\Users\bine\AppData\Local\Temp\531A2BEC-BAB0-7891-8297-C1AE3FD28693\MyBabylonTB.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemyext.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\icudt.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGCore.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGExportCommon.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGMath.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGOpt.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGSg.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGUtils.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtCore4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtGui4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtNetwork4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtWebKit4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qgif4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qjpeg4.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\optimizations\IGOptExtension.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\D3DCompiler_43.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\d3dx9_43.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGSg.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libEGL.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libGLESv2.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGAttrs.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGGfx.dll
C:\Users\bine\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGSg.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-01 01:30
==================== End Of Log ============================ Gmer.txt Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-06 14:38:00
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST750LM0 rev.2AR1 698,64GB
Running: 1z45y8b9.exe; Driver: C:\Users\bine\AppData\Local\Temp\kxldqpow.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544 fffff80002fc0000 16 bytes [BD, 00, 10, 00, 00, 48, 8B, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 562 fffff80002fc0012 1 byte [F0]
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757b1465 2 bytes [7B, 75]
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757b14bb 2 bytes [7B, 75]
.text ... * 2
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!GetMenu + 412 00000000756d51dd 7 bytes JMP 000000010019be30
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!PeekMessageA + 407 00000000756d610b 7 bytes JMP 000000010019bf70
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!CreateDialogIndirectParamW + 131 00000000756dc6c1 7 bytes JMP 000000010019bf50
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectA + 199 000000007571fc98 7 bytes JMP 000000010019bfc0
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectW + 52 000000007571fcd1 7 bytes JMP 000000010019c090
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\USER32.dll!MessageBoxExA + 31 000000007571fcf5 7 bytes JMP 000000010019c040
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757b1465 2 bytes [7B, 75]
.text C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe[2660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757b14bb 2 bytes [7B, 75]
.text ... * 2
.text C:\Program Files (x86)\Launch Manager\LManager.exe[3008] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757b1465 2 bytes [7B, 75]
.text C:\Program Files (x86)\Launch Manager\LManager.exe[3008] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757b14bb 2 bytes [7B, 75]
.text ... * 2
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3444] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757b1465 2 bytes [7B, 75]
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3444] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757b14bb 2 bytes [7B, 75]
.text ... * 2
.text C:\Users\bine\Desktop\Defogger.exe[4200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000757b1465 2 bytes [7B, 75]
.text C:\Users\bine\Desktop\Defogger.exe[4200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757b14bb 2 bytes [7B, 75]
.text ... * 2
---- Threads - GMER 2.1 ----
Thread C:\Windows\System32\svchost.exe [4124:3060] 000007fef2069688
---- EOF - GMER 2.1 ---- |