API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 24th, 2014
221
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.22 KB | None | 0 0
raw download clone embed print report
  1. can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014
  2. Ran by Thürmer-ZH (administrator) on THÜRMER-ZH-PC on 24-07-2014 16:36:38
  3. Running from C:\Users\Thürmer-ZH\Downloads
  4. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
  5. Internet Explorer Version 11
  6. Boot Mode: Normal
  7.  
  8. The only official download link for FRST:
  9. Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
  10. Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
  11. Download link from any site other than Bleeping Computer is unpermitted or outdated.
  12. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  13.  
  14. ==================== Processes (Whitelisted) =================
  15.  
  16. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  17.  
  18. (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
  19. (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oacat.exe
  20. (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oasrv.exe
  21. (cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
  22. (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
  23. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
  24. (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
  25. (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
  26. (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
  27. () C:\Windows\SysWOW64\PSIService.exe
  28. (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe
  29. (Intel Corporation) C:\Windows\System32\igfxtray.exe
  30. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  31. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  32. (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oaui.exe
  33. (Emsisoft GmbH) C:\Program Files (x86)\Online Armor\oahlp.exe
  34. (FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe
  35. (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
  36. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
  37. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
  38. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
  39. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
  40. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  41. (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
  42. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  43. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  44. (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
  45. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  46. (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
  47.  
  48.  
  49. ==================== Registry (Whitelisted) ==================
  50.  
  51. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  52.  
  53. HKLM\...\Run: [@OnlineArmor GUI] => C:\Program Files (x86)\Online Armor\oaui.exe [7558464 2013-10-11] (Emsisoft GmbH)
  54. HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation)
  55. HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-04-12] (FNet Co., Ltd.)
  56. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  57. HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4841824 2014-07-09] (Emsisoft GmbH)
  58. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  59. HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
  60. HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
  61.  
  62. ==================== Internet (Whitelisted) ====================
  63.  
  64. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  65.  
  66. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
  67. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
  68. SearchScopes: HKLM - DefaultScope value is missing.
  69. SearchScopes: HKLM-x32 - DefaultScope value is missing.
  70. BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
  71. Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll No File
  72. Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  73. Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  74. Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  75. Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  76. Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  77. Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  78. Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
  79. Tcpip\..\Interfaces\{1B101D15-CA47-41A5-965F-67D2A9C92203}: [NameServer]192.168.178.1
  80.  
  81. FireFox:
  82. ========
  83. FF ProfilePath: C:\Users\Thürmer-ZH\AppData\Roaming\Mozilla\Firefox\Profiles\3u2z3vdc.default
  84. FF Homepage: https://ixquick.com/
  85. FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  86. FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  87. FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  88. FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  89. FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  90. FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  91. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  92. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  93. FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  94. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
  95. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
  96. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
  97. FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
  98. FF Extension: NoScript - C:\Users\Thürmer-ZH\AppData\Roaming\Mozilla\Firefox\Profiles\3u2z3vdc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-11-10]
  99. FF Extension: Adblock Plus - C:\Users\Thürmer-ZH\AppData\Roaming\Mozilla\Firefox\Profiles\3u2z3vdc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-07-17]
  100. FF Extension: BetterPrivacy - C:\Users\Thürmer-ZH\AppData\Roaming\Mozilla\Firefox\Profiles\3u2z3vdc.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2013-12-01]
  101. FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
  102. FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-11-06]
  103.  
  104. ==================== Services (Whitelisted) =================
  105.  
  106. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  107.  
  108. R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4741384 2014-07-09] (Emsisoft GmbH)
  109. R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
  110. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
  111. R2 OAcat; C:\Program Files (x86)\Online Armor\OAcat.exe [584864 2013-10-11] (Emsisoft GmbH)
  112. R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
  113. R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
  114. R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [174656 2006-11-02] () [File not signed]
  115. R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0 apoEdition\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
  116. R2 SvcOnlineArmor; C:\Program Files (x86)\Online Armor\oasrv.exe [4457688 2013-10-11] (Emsisoft GmbH)
  117.  
  118. ==================== Drivers (Whitelisted) ====================
  119.  
  120. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  121.  
  122. R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
  123. R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
  124. R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
  125. R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
  126. R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
  127. S3 EtronHub3; No ImagePath
  128. S3 EtronXHCI; No ImagePath
  129. S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2014-03-31] (FNet Co., Ltd.)
  130. R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-04-12] (FNet Co., Ltd.)
  131. R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46016 2012-08-17] ()
  132. R1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [64720 2013-10-11] ()
  133. R1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [62008 2013-10-11] ()
  134. R1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [52360 2013-10-11] (Emsisoft)
  135. R3 OAnet; C:\Windows\System32\DRIVERS\oanet.sys [35368 2013-10-11] (Emsisoft)
  136. S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
  137.  
  138. ==================== NetSvcs (Whitelisted) ===================
  139.  
  140. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  141.  
  142.  
  143. ==================== One Month Created Files and Folders ========
  144.  
  145. (If an entry is included in the fixlist, the file\folder will be moved.)
  146.  
  147. 2014-07-24 16:34 - 2014-07-24 16:36 - 00011645 _____ () C:\Users\Thürmer-ZH\Downloads\FRST.txt
  148. 2014-07-24 16:33 - 2014-07-24 16:34 - 02093568 _____ (Farbar) C:\Users\Thürmer-ZH\Downloads\FRST64.exe
  149. 2014-07-24 07:53 - 2014-07-24 07:53 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Thürmer-ZH\Downloads\revosetup.exe
  150. 2014-07-24 07:53 - 2014-07-24 07:53 - 00001277 _____ () C:\Users\Thürmer-ZH\Desktop\Revo Uninstaller.lnk
  151. 2014-07-24 07:53 - 2014-07-24 07:53 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
  152. 2014-07-23 20:38 - 2014-07-23 20:38 - 00001168 _____ () C:\Users\Thürmer-ZH\Desktop\Online Armor.lnk
  153. 2014-07-23 20:18 - 2014-07-23 21:10 - 00000000 ____D () C:\Users\Thürmer-ZH\AppData\Roaming\OnlineArmor
  154. 2014-07-23 20:18 - 2014-07-23 20:23 - 00000000 ____D () C:\ProgramData\OnlineArmor
  155. 2014-07-23 20:16 - 2014-07-23 20:58 - 00000000 ____D () C:\Program Files (x86)\Online Armor
  156. 2014-07-23 20:16 - 2014-07-23 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Armor
  157. 2014-07-23 20:16 - 2013-10-11 03:41 - 00062008 _____ () C:\Windows\SysWOW64\Drivers\oahlp64.sys
  158. 2014-07-23 20:16 - 2013-10-11 03:40 - 00064720 _____ () C:\Windows\SysWOW64\Drivers\OADriver.sys
  159. 2014-07-23 20:16 - 2013-10-11 03:40 - 00052360 _____ (Emsisoft) C:\Windows\SysWOW64\Drivers\OAmon.sys
  160. 2014-07-23 20:16 - 2013-10-11 03:40 - 00035368 _____ (Emsisoft) C:\Windows\system32\Drivers\OAnet.sys
  161. 2014-07-23 20:15 - 2014-07-23 20:15 - 10696960 _____ (Emsisoft GmbH ) C:\Users\Thürmer-ZH\Downloads\OnlineArmorSetup.exe
  162. 2014-07-22 17:14 - 2014-07-22 17:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
  163. 2014-07-21 19:34 - 2014-07-24 16:36 - 00000000 ____D () C:\FRST
  164. 2014-07-18 11:40 - 2014-07-18 11:40 - 00000000 __SHD () C:\Users\Thürmer-ZH\AppData\Local\EmieUserList
  165. 2014-07-18 11:40 - 2014-07-18 11:40 - 00000000 __SHD () C:\Users\Thürmer-ZH\AppData\Local\EmieSiteList
  166. 2014-07-15 20:02 - 2014-07-15 20:02 - 00001111 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
  167. 2014-07-15 20:02 - 2014-07-15 20:02 - 00001099 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
  168. 2014-07-15 12:48 - 2014-07-15 12:48 - 00000000 ____D () C:\ProgramData\Emsisoft
  169. 2014-07-15 12:09 - 2014-07-24 16:32 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
  170. 2014-07-15 12:09 - 2014-07-15 12:09 - 00001104 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
  171. 2014-07-15 12:09 - 2014-07-15 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
  172. 2014-07-15 12:06 - 2014-07-15 12:08 - 224894184 _____ (Emsisoft GmbH ) C:\Users\Thürmer-ZH\Downloads\EmsisoftAntiMalwareSetup.exe
  173. 2014-07-11 19:44 - 2014-07-24 08:42 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  174. 2014-07-11 19:44 - 2014-07-11 19:44 - 00001115 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  175. 2014-07-11 19:44 - 2014-07-11 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  176. 2014-07-11 19:44 - 2014-07-11 19:44 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  177. 2014-07-11 19:44 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
  178. 2014-07-11 19:44 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
  179. 2014-07-11 19:44 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
  180. 2014-07-09 16:00 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  181. 2014-07-09 16:00 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  182. 2014-07-09 16:00 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  183. 2014-07-09 16:00 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  184. 2014-07-09 16:00 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  185. 2014-07-09 16:00 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  186. 2014-07-09 16:00 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  187. 2014-07-09 16:00 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  188. 2014-07-09 16:00 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  189. 2014-07-09 16:00 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  190. 2014-07-09 16:00 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  191. 2014-07-09 16:00 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  192. 2014-07-09 16:00 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  193. 2014-07-09 16:00 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  194. 2014-07-09 16:00 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  195. 2014-07-09 16:00 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  196. 2014-07-09 16:00 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  197. 2014-07-09 16:00 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  198. 2014-07-09 16:00 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  199. 2014-07-09 16:00 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  200. 2014-07-09 16:00 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  201. 2014-07-09 16:00 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  202. 2014-07-09 16:00 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  203. 2014-07-09 16:00 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  204. 2014-07-09 16:00 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  205. 2014-07-09 16:00 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  206. 2014-07-09 16:00 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  207. 2014-07-09 16:00 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  208. 2014-07-09 16:00 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  209. 2014-07-09 16:00 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  210. 2014-07-09 16:00 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  211. 2014-07-09 16:00 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  212. 2014-07-09 16:00 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  213. 2014-07-09 16:00 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  214. 2014-07-09 16:00 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  215. 2014-07-09 16:00 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  216. 2014-07-09 16:00 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  217. 2014-07-09 16:00 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  218. 2014-07-09 16:00 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  219. 2014-07-09 16:00 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  220. 2014-07-09 16:00 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  221. 2014-07-09 16:00 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  222. 2014-07-09 16:00 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  223. 2014-07-09 16:00 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  224. 2014-07-09 16:00 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  225. 2014-07-09 16:00 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  226. 2014-07-09 16:00 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  227. 2014-07-09 16:00 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  228. 2014-07-09 16:00 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  229. 2014-07-09 16:00 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  230. 2014-07-09 16:00 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  231. 2014-07-09 16:00 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  232. 2014-07-09 16:00 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  233. 2014-07-09 16:00 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  234. 2014-07-09 16:00 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  235. 2014-07-09 16:00 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  236. 2014-07-09 15:59 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
  237. 2014-07-09 15:59 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
  238. 2014-07-09 15:59 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  239. 2014-07-09 15:59 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
  240. 2014-07-09 15:59 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
  241. 2014-07-09 15:59 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  242. 2014-07-09 15:59 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  243. 2014-07-09 15:59 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  244. 2014-07-09 15:59 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  245. 2014-07-09 15:59 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  246. 2014-07-09 15:59 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  247. 2014-07-09 15:59 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  248. 2014-07-09 15:59 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  249. 2014-07-09 15:59 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  250. 2014-07-09 15:59 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  251. 2014-07-09 15:59 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  252. 2014-07-09 15:59 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
  253. 2014-07-09 15:59 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
  254. 2014-07-09 15:59 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
  255. 2014-07-09 15:59 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
  256. 2014-07-09 15:59 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
  257. 2014-07-09 15:59 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
  258. 2014-07-09 15:59 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
  259.  
  260. ==================== One Month Modified Files and Folders =======
  261.  
  262. (If an entry is included in the fixlist, the file\folder will be moved.)
  263.  
  264. 2014-07-24 16:36 - 2014-07-24 16:34 - 00011645 _____ () C:\Users\Thürmer-ZH\Downloads\FRST.txt
  265. 2014-07-24 16:36 - 2014-07-21 19:34 - 00000000 ____D () C:\FRST
  266. 2014-07-24 16:36 - 2013-04-13 13:08 - 00699092 _____ () C:\Windows\system32\perfh007.dat
  267. 2014-07-24 16:36 - 2013-04-13 13:08 - 00149232 _____ () C:\Windows\system32\perfc007.dat
  268. 2014-07-24 16:36 - 2009-07-14 07:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
  269. 2014-07-24 16:35 - 2013-04-12 21:21 - 01968170 _____ () C:\Windows\WindowsUpdate.log
  270. 2014-07-24 16:34 - 2014-07-24 16:33 - 02093568 _____ (Farbar) C:\Users\Thürmer-ZH\Downloads\FRST64.exe
  271. 2014-07-24 16:32 - 2014-07-15 12:09 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
  272. 2014-07-24 16:31 - 2013-07-29 21:24 - 00051496 _____ () C:\Windows\setupact.log
  273. 2014-07-24 16:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  274. 2014-07-24 16:30 - 2009-07-14 06:45 - 00025824 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  275. 2014-07-24 16:30 - 2009-07-14 06:45 - 00025824 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  276. 2014-07-24 14:45 - 2013-04-12 22:28 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{3FB874FA-BC60-4EB8-8ED8-92928BB7D09D}
  277. 2014-07-24 09:39 - 2014-06-05 20:19 - 01354223 _____ () C:\Users\Thürmer-ZH\Downloads\AdwCleaner.exe
  278. 2014-07-24 08:42 - 2014-07-11 19:44 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  279. 2014-07-24 07:53 - 2014-07-24 07:53 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Thürmer-ZH\Downloads\revosetup.exe
  280. 2014-07-24 07:53 - 2014-07-24 07:53 - 00001277 _____ () C:\Users\Thürmer-ZH\Desktop\Revo Uninstaller.lnk
  281. 2014-07-24 07:53 - 2014-07-24 07:53 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
  282. 2014-07-23 21:10 - 2014-07-23 20:18 - 00000000 ____D () C:\Users\Thürmer-ZH\AppData\Roaming\OnlineArmor
  283. 2014-07-23 20:58 - 2014-07-23 20:16 - 00000000 ____D () C:\Program Files (x86)\Online Armor
  284. 2014-07-23 20:44 - 2014-02-24 09:55 - 00000000 ____D () C:\Program Files (x86)\StarMoney 9.0 apoEdition
  285. 2014-07-23 20:38 - 2014-07-23 20:38 - 00001168 _____ () C:\Users\Thürmer-ZH\Desktop\Online Armor.lnk
  286. 2014-07-23 20:28 - 2010-11-21 05:47 - 00264734 _____ () C:\Windows\PFRO.log
  287. 2014-07-23 20:23 - 2014-07-23 20:18 - 00000000 ____D () C:\ProgramData\OnlineArmor
  288. 2014-07-23 20:16 - 2014-07-23 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Armor
  289. 2014-07-23 20:15 - 2014-07-23 20:15 - 10696960 _____ (Emsisoft GmbH ) C:\Users\Thürmer-ZH\Downloads\OnlineArmorSetup.exe
  290. 2014-07-22 22:24 - 2013-06-12 09:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
  291. 2014-07-22 17:14 - 2014-07-22 17:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
  292. 2014-07-18 11:40 - 2014-07-18 11:40 - 00000000 __SHD () C:\Users\Thürmer-ZH\AppData\Local\EmieUserList
  293. 2014-07-18 11:40 - 2014-07-18 11:40 - 00000000 __SHD () C:\Users\Thürmer-ZH\AppData\Local\EmieSiteList
  294. 2014-07-15 20:02 - 2014-07-15 20:02 - 00001111 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
  295. 2014-07-15 20:02 - 2014-07-15 20:02 - 00001099 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
  296. 2014-07-15 20:02 - 2013-12-07 15:07 - 00001841 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
  297. 2014-07-15 12:48 - 2014-07-15 12:48 - 00000000 ____D () C:\ProgramData\Emsisoft
  298. 2014-07-15 12:09 - 2014-07-15 12:09 - 00001104 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
  299. 2014-07-15 12:09 - 2014-07-15 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
  300. 2014-07-15 12:08 - 2014-07-15 12:06 - 224894184 _____ (Emsisoft GmbH ) C:\Users\Thürmer-ZH\Downloads\EmsisoftAntiMalwareSetup.exe
  301. 2014-07-11 19:44 - 2014-07-11 19:44 - 00001115 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  302. 2014-07-11 19:44 - 2014-07-11 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  303. 2014-07-11 19:44 - 2014-07-11 19:44 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
  304. 2014-07-11 15:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
  305. 2014-07-09 16:05 - 2009-07-14 06:45 - 00374240 _____ () C:\Windows\system32\FNTCACHE.DAT
  306. 2014-07-09 16:03 - 2010-11-21 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
  307. 2014-07-09 16:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
  308. 2014-07-09 16:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
  309. 2014-07-09 16:02 - 2013-07-12 21:17 - 00000000 ____D () C:\Windows\system32\MRT
  310. 2014-07-09 16:01 - 2013-05-26 20:20 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  311. 2014-07-08 09:15 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  312. 2014-07-04 16:11 - 2013-04-12 21:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
  313. 2014-06-26 09:36 - 2013-05-26 18:01 - 00001316 ___SH () C:\Windows\SysWOW64\KGyGaAvL.sys
  314. 2014-06-26 09:36 - 2013-05-26 18:01 - 00000000 ____D () C:\Users\Thürmer-ZH\Documents\Meine PSP-Dateien
  315. 2014-06-26 09:36 - 2013-05-26 18:01 - 00000000 ____D () C:\Users\Thürmer-ZH\AppData\Roaming\Corel
  316.  
  317. Some content of TEMP:
  318. ====================
  319. C:\Users\Thürmer-ZH\AppData\Local\Temp\avgnt.exe
  320. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
  321. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-10.exe
  322. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-11.exe
  323. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-12.exe
  324. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-13.exe
  325. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-2.exe
  326. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-3.exe
  327. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-4.exe
  328. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-5.exe
  329. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-6.exe
  330. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-7.exe
  331. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-8.exe
  332. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer-9.exe
  333. C:\Users\Thürmer-ZH\AppData\Local\Temp\fp_pl_pfs_installer.exe
  334. C:\Users\Thürmer-ZH\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
  335. C:\Users\Thürmer-ZH\AppData\Local\Temp\vlc-2.1.3-win64.exe
  336. C:\Users\Thürmer-ZH\AppData\Local\Temp\vlc-2.1.4-win64.exe
  337.  
  338.  
  339. ==================== Bamital & volsnap Check =================
  340.  
  341. (There is no automatic fix for files that do not pass verification.)
  342.  
  343. C:\Windows\System32\winlogon.exe => File is digitally signed
  344. C:\Windows\System32\wininit.exe => File is digitally signed
  345. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  346. C:\Windows\explorer.exe => File is digitally signed
  347. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  348. C:\Windows\System32\svchost.exe => File is digitally signed
  349. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  350. C:\Windows\System32\services.exe => File is digitally signed
  351. C:\Windows\System32\User32.dll => File is digitally signed
  352. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  353. C:\Windows\System32\userinit.exe => File is digitally signed
  354. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  355. C:\Windows\System32\rpcss.dll => File is digitally signed
  356. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  357.  
  358.  
  359. LastRegBack: 2014-07-21 19:16
  360.  
  361. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!