|
Plagegeister aller Art und deren Bekämpfung: Polizei VirusWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
06.06.2013, 18:22 | #16 |
/// the machine /// TB-Ausbilder | Polizei Virus Es brennt kein Licht hinten am Netzwerkanschluss am Rechner???? WLAN an Board am Rechner?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.06.2013, 18:50 | #17 |
| Polizei Virus ...musste Rasenmähen...sonnst gibts haue von meiner Frau
__________________nein kein licht brennt! kein W-Lan bei dem Rechner! Motherboard; ASUS P8P67 |
06.06.2013, 18:54 | #18 |
/// the machine /// TB-Ausbilder | Polizei Virus Wlan-Stick besorgen, anschliessen, und probieren.
__________________Und Rasenmähen stinkt, deswegen hab ich keinen Garten
__________________ |
06.06.2013, 19:02 | #19 |
| Polizei Virus nun klapst habe neue Motherboard Treiber (Realtek ) runtergeladen nun habe ich weider I -Net! nun mache ich deine schritte durch! |
06.06.2013, 19:07 | #20 |
/// the machine /// TB-Ausbilder | Polizei Virus supi
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
07.06.2013, 06:07 | #21 |
| Polizei Virus Morgen! anbei die log´s: Eset: ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: Can not open internetCan not open internetESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=563091ac690e0a44969736a157a165e5 # engine=14015 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-06-06 06:49:22 # local_time=2013-06-06 08:49:22 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1797 16775165 100 94 194935 107081383 272884 0 # compatibility_mode=5893 16776573 100 94 12948 122174412 0 0 # scanned=10187 # found=1 # cleaned=0 # scan_time=2627 sh=34398AC599276CB4B2DEB33BD62E41E235A2BEDC ft=1 fh=ac1dfa3e59e7187c vn="a variant of Win32/Kryptik.BCWF trojan" ac=I fn="C:\FRST\Quarantine\skype.dat" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=563091ac690e0a44969736a157a165e5 # engine=14015 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-06-06 11:43:59 # local_time=2013-06-07 01:43:59 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1797 16775165 100 94 212612 107099060 290561 0 # compatibility_mode=5893 16776573 100 94 30625 122192089 0 0 # scanned=244853 # found=4 # cleaned=0 # scan_time=13487 sh=34398AC599276CB4B2DEB33BD62E41E235A2BEDC ft=1 fh=ac1dfa3e59e7187c vn="a variant of Win32/Kryptik.BCWF trojan" ac=I fn="C:\FRST\Quarantine\skype.dat" sh=09B94953779B3A53481D97F15F3F46EFA5E6BB4B ft=0 fh=0000000000000000 vn="Win32/Spy.SpyEye.CFG.A trojan" ac=I fn="C:\Req.Clean\11D66D3D7F9DAE3" sh=34398AC599276CB4B2DEB33BD62E41E235A2BEDC ft=1 fh=ac1dfa3e59e7187c vn="a variant of Win32/Kryptik.BCWF trojan" ac=I fn="C:\Users\Warter\AppData\Local\Temp\xkdowwq" sh=A87CB16002F2D6374FEDB3302074C64FC2CA6454 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Warter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\3714b6a3-38c1bc50" Security Chek: UNSUPPORTED OPERATING SYSTEM! ABORTED! FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-06-2013 01 Ran by Warter (administrator) on 07-06-2013 07:04:21 Running from C:\Users\Warter\Desktop Windows 7 Enterprise Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe (Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe () C:\Windows\SysWOW64\PnkBstrA.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe (Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech Inc.) C:\Program Files\Logitech\G-series Software\LGDCore.exe (Logitech Inc.) C:\Program Files\Logitech\G-series Software\LCDMon.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech Inc.) C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at) C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Program Files (x86)\Pando Networks\Media Booster\pmb.exe (Microsoft Corporation) C:\Windows\System32\dinotify.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [11545192 2010-11-02] (Realtek Semiconductor) HKLM\...\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE [1777664 2006-03-06] (Logitech Inc.) HKLM\...\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe" [709120 2006-03-06] (Logitech Inc.) HKLM\...\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming [1744152 2011-10-07] (Logitech, Inc.) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-20] (Microsoft Corporation) MountPoints2: J - J:\AutoRun.exe MountPoints2: {153f7967-2c73-11e1-addc-f46d0499435e} - J:\haosheng.exe MountPoints2: {712bd3d3-7a68-11e0-94be-806e6f6e6963} - G:\SETUP.EXE MountPoints2: {712bd3d4-7a68-11e0-94be-806e6f6e6963} - H:\setup.exe MountPoints2: {7389687e-ba03-11e0-9bc6-f46d0499435e} - I:\setup.exe MountPoints2: {c52930cc-f0e3-11e0-9f77-001e101fb681} - J:\AutoRun.exe MountPoints2: {e1931a80-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe MountPoints2: {e1931a9f-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe HKLM-x32\...\Run: [] [x] HKLM-x32\...\Run: [A1Webassistent] C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe /auto [18577272 2011-08-04] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at) HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 FireFox: ======== FF ProfilePath: C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default FF Homepage: www.google.at FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=1.102.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @gametap.com/npdd,version=1.0 - F:\Spiele\Downlaoder\npdd.dll (Metaboli) FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360 2011-03-28] (Avira GmbH) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480 2011-06-30] (Avira GmbH) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] () S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-05-27] () R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.) ==================== Drivers (Whitelisted) ==================== R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-06-26] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88288 2011-06-30] (Avira GmbH) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [123784 2011-06-30] (Avira GmbH) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-06-26] () S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x] S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x] S3 massfilter; system32\drivers\massfilter.sys [x] S0 mv91xx; system32\DRIVERS\mv91xx.sys [x] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x] S3 tsusbhub; system32\drivers\tsusbhub.sys [x] S3 VGPU; System32\drivers\rdvgkmd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-06-06 19:59 - 2010-01-06 00:39 - 00107552 ____A (Realtek Semiconductor Corporation) C:\Windows\System32\SET55D2.tmp 2013-06-06 19:59 - 2010-01-06 00:39 - 00107552 ____A (Realtek Semiconductor Corporation) C:\Windows\System32\RTNUninst64.dll 2013-06-06 19:59 - 2009-12-03 17:27 - 00074272 ____A C:\Windows\System32\RtNicProp64.dll 2013-06-06 19:55 - 2011-04-26 11:07 - 00557848 ____A (Intel Corporation) C:\Windows\System32\Drivers\iaStor.sys 2013-06-06 18:09 - 2013-06-06 19:59 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-06-06 18:09 - 2013-06-06 19:55 - 00000000 ____D C:\Windows\LastGood 2013-06-06 17:05 - 2013-06-06 17:05 - 00000000 ____D C:\Windows\ERUNT 2013-06-06 17:04 - 2013-06-06 17:05 - 00000000 ____D C:\JRT 2013-06-06 16:59 - 2013-06-06 17:00 - 00005064 ____A C:\AdwCleaner[S1].txt 2013-06-06 16:58 - 2013-06-06 16:58 - 00890839 ____A C:\Users\Warter\Desktop\SecurityCheck.exe 2013-06-06 16:58 - 2013-06-06 16:58 - 00760723 ____A (Farbar) C:\Users\Warter\Desktop\MiniToolBox.exe 2013-06-06 16:58 - 2013-06-06 16:57 - 02347384 ____A (ESET) C:\Users\Warter\Desktop\esetsmartinstaller_enu.exe 2013-06-06 16:58 - 2013-06-06 16:56 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Warter\Desktop\JRT.exe 2013-06-06 16:58 - 2013-06-06 16:55 - 00632031 ____A C:\Users\Warter\Desktop\adwcleaner.exe 2013-06-06 16:19 - 2013-06-06 14:29 - 01917710 ____A (Farbar) C:\Users\Warter\Desktop\FRST64.exe 2013-06-06 15:57 - 2013-06-07 02:32 - 00033861 ____A C:\Windows\WindowsUpdate.log 2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt 2013-06-06 14:56 - 2013-06-06 17:01 - 00065536 _____ C:\Windows\System32\Ikeext.etl 2013-06-06 14:56 - 2013-06-06 17:01 - 00000392 ____A C:\Windows\setupact.log 2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST 2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec 2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-03 23:45 - 2013-06-03 23:51 - 00010360 ____A C:\Windows\IE10_main.log 2013-06-03 23:44 - 2013-06-06 21:41 - 00000000 ____D C:\Users\Warter\Documents\dragoon 2013-06-03 22:33 - 2013-06-03 23:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-05-16 20:41 - 2013-05-20 19:16 - 00000381 ____A C:\Windows\check.txt 2013-05-16 10:13 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys 2013-05-16 10:13 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys 2013-05-16 10:13 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-05-16 10:13 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe 2013-05-16 10:13 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll 2013-05-16 10:13 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll 2013-05-16 10:13 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll 2013-05-16 10:13 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll 2013-05-16 10:13 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-05-16 10:13 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-05-16 10:13 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-05-16 10:13 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll ==================== One Month Modified Files and Folders ======= 2013-06-07 07:04 - 2012-12-22 12:12 - 00000000 ____D C:\Users\Warter\AppData\Local\PMB Files 2013-06-07 07:01 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-06-07 07:01 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-06-07 03:00 - 2013-06-06 15:57 - 00033861 ____A C:\Windows\WindowsUpdate.log 2013-06-07 02:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2013-06-06 21:41 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon 2013-06-06 19:59 - 2013-06-06 18:09 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-06-06 19:59 - 2011-05-09 20:03 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-06-06 19:59 - 2011-05-09 19:57 - 00001769 ____A C:\Windows\Language_trs.ini 2013-06-06 19:55 - 2013-06-06 18:09 - 00000000 ____D C:\Windows\LastGood 2013-06-06 19:55 - 2011-05-09 19:58 - 00000000 ____D C:\Program Files (x86)\Intel 2013-06-06 19:53 - 2011-11-29 19:32 - 00000000 ____D C:\Users\Warter\Desktop\Renson 2013-06-06 18:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF 2013-06-06 17:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-06-06 17:05 - 2013-06-06 17:05 - 00000000 ____D C:\Windows\ERUNT 2013-06-06 17:05 - 2013-06-06 17:04 - 00000000 ____D C:\JRT 2013-06-06 17:05 - 2009-07-14 12:49 - 00707918 ____A C:\Windows\System32\perfh007.dat 2013-06-06 17:05 - 2009-07-14 12:49 - 00153404 ____A C:\Windows\System32\perfc007.dat 2013-06-06 17:05 - 2009-07-14 07:13 - 01644414 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-06 17:01 - 2013-06-06 14:56 - 00065536 _____ C:\Windows\System32\Ikeext.etl 2013-06-06 17:01 - 2013-06-06 14:56 - 00000392 ____A C:\Windows\setupact.log 2013-06-06 17:01 - 2011-05-10 16:20 - 00000000 ____D C:\ProgramData\NVIDIA 2013-06-06 17:01 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-06-06 17:00 - 2013-06-06 16:59 - 00005064 ____A C:\AdwCleaner[S1].txt 2013-06-06 16:58 - 2013-06-06 16:58 - 00890839 ____A C:\Users\Warter\Desktop\SecurityCheck.exe 2013-06-06 16:58 - 2013-06-06 16:58 - 00760723 ____A (Farbar) C:\Users\Warter\Desktop\MiniToolBox.exe 2013-06-06 16:57 - 2013-06-06 16:58 - 02347384 ____A (ESET) C:\Users\Warter\Desktop\esetsmartinstaller_enu.exe 2013-06-06 16:56 - 2013-06-06 16:58 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Warter\Desktop\JRT.exe 2013-06-06 16:55 - 2013-06-06 16:58 - 00632031 ____A C:\Users\Warter\Desktop\adwcleaner.exe 2013-06-06 15:10 - 2011-05-09 18:43 - 00000000 ____D C:\users\Warter 2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt 2013-06-06 14:29 - 2013-06-06 16:19 - 01917710 ____A (Farbar) C:\Users\Warter\Desktop\FRST64.exe 2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST 2013-06-06 07:10 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-04 14:40 - 2012-04-28 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK 2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR 2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-06-03 23:51 - 2013-06-03 23:45 - 00010360 ____A C:\Windows\IE10_main.log 2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec 2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-03 23:44 - 2013-06-03 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-05-25 13:58 - 2011-10-25 18:53 - 00000000 ____D C:\Users\Warter\AppData\Roaming\TS3Client 2013-05-23 15:05 - 2012-01-16 20:24 - 00000000 ____D C:\Users\Warter\AppData\Roaming\Mumble 2013-05-21 16:05 - 2012-09-21 09:10 - 00000000 ____D C:\Users\Warter\Desktop\Fotos Handy 2013-05-20 19:16 - 2013-05-16 20:41 - 00000381 ____A C:\Windows\check.txt 2013-05-16 20:34 - 2009-07-14 06:45 - 00294344 ____A C:\Windows\System32\FNTCACHE.DAT 2013-05-16 16:39 - 2010-06-08 22:10 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-05-16 10:07 - 2012-04-09 19:34 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-05-16 10:07 - 2011-05-19 20:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-05-08 20:37 - 2012-09-27 11:06 - 00000000 ____D C:\Users\Warter\Documents\FIFA 13 ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit Last Boot: 2013-06-03 15:51 ==================== End Of Log ============================ |
07.06.2013, 06:32 | #22 |
/// the machine /// TB-Ausbilder | Polizei Virus Hi, Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Fix mit FRST Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Req.Clean\11D66D3D7F9DAE3 HKLM-x32\...\Run: [] [x]
Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.06.2013, 20:20 | #23 |
| Polizei Virus Sorry war unterwegs kind und kegel :-) Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-06-2013 01 Ran by Warter at 2013-06-08 21:14:48 Run:3 Running from C:\Users\Warter\Desktop Boot Mode: Normal ============================================== C:\Req.Clean\11D66D3D7F9DAE3 => Moved successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. ==== End of Fixlog ==== |
08.06.2013, 20:42 | #24 |
/// the machine /// TB-Ausbilder | Polizei Virus Wenn Du keine Probleme mehr hast sind wir fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob/Kritik loswerden möchtest: Lob, Kritik und Wünsche - Trojaner-Board Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |