Polizei Virus

Sharkyat · 06.06.2013, 13:45

Hi Leute!

Evt kann mir einer helfen, habe seit Heute den Virus Polizeidirektion drauf und bekomme ihn nicht weg..bzw finde den auch nicht!

Habe nun mit FRST64 einen Scan gemacht. habe ich hier aus dem Forum
http://www.trojaner-board.de/136118-gvu-trojaner.html

weiss leider nicht mehr weiter!

FRST:
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-06-2013 01
Ran by Warter (administrator) on 06-06-2013 14:29:47
Running from I:\
Windows 7 Enterprise Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)
 
==================== Processes (Whitelisted) =================
 
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [] [x]
HKLM\...\Winlogon: [Shell] [x ] () <=== ATTENTION
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKCU\...\Winlogon: [Shell] explorer.exe,C:\Users\Warter\AppData\Roaming\skype.dat [66560 2011-11-17] () <==== ATTENTION 
MountPoints2: J - J:\AutoRun.exe
MountPoints2: {153f7967-2c73-11e1-addc-f46d0499435e} - J:\haosheng.exe
MountPoints2: {712bd3d3-7a68-11e0-94be-806e6f6e6963} - G:\SETUP.EXE
MountPoints2: {712bd3d4-7a68-11e0-94be-806e6f6e6963} - H:\setup.exe
MountPoints2: {7389687e-ba03-11e0-9bc6-f46d0499435e} - I:\setup.exe
MountPoints2: {c52930cc-f0e3-11e0-9f77-001e101fb681} - J:\AutoRun.exe
MountPoints2: {e1931a80-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
MountPoints2: {e1931a9f-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
HKLM-x32\...\Run: [] [x]
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File
SearchScopes: HKCU - {28CCA902-2A27-4757-A37F-340292A55DE1} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYAT&apn_uid=D8D8B73A-A23B-41B5-ACD4-207C51F76102&apn_sauid=900B1885-0C5F-47E5-B36C-770344698AD2
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
 
FireFox:
========
FF ProfilePath: C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default
FF SelectedSearchEngine: Ask.com
FF Homepage: www.google.at
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - F:\Spiele\Downlaoder\npdd.dll (Metaboli)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Ask Toolbar - C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default\Extensions\toolbar@ask.com
 
==================== Services (Whitelisted) =================
 
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360 2011-03-28] (Avira GmbH)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480 2011-06-30] (Avira GmbH)
S2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] ()
S2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()
S2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-05-27] ()
S2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
 
==================== Drivers (Whitelisted) ====================
 
S1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
S1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-06-26] ()
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88288 2011-06-30] (Avira GmbH)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [123784 2011-06-30] (Avira GmbH)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-06-26] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
 
==================== NetSvcs (Whitelisted) ===================
 
 
==================== One Month Created Files and Folders ========
 
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-06 07:33 - 2013-06-06 09:54 - 00000004 ____A C:\Users\Warter\AppData\Roaming\skype.ini
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:45 - 2013-06-03 23:51 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:44 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-03 22:33 - 2013-06-03 23:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-21 16:01 - 2013-05-21 16:06 - 00000000 ____D C:\Users\Warter\Desktop\Fotoss
2013-05-16 20:41 - 2013-05-20 19:16 - 00000381 ____A C:\Windows\check.txt
2013-05-16 10:13 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-16 10:13 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-16 10:13 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-16 10:13 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-16 10:13 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-16 10:13 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-16 10:13 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-16 10:13 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
 
==================== One Month Modified Files and Folders =======
 
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-06 14:28 - 2009-07-14 12:49 - 00707918 ____A C:\Windows\System32\perfh007.dat
2013-06-06 14:28 - 2009-07-14 12:49 - 00153404 ____A C:\Windows\System32\perfc007.dat
2013-06-06 14:28 - 2009-07-14 07:13 - 01644414 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-06 13:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-06-06 09:54 - 2013-06-06 07:33 - 00000004 ____A C:\Users\Warter\AppData\Roaming\skype.ini
2013-06-06 09:54 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-06 09:54 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-06 09:38 - 2011-05-10 16:20 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-06 09:38 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-06 08:11 - 2012-12-22 12:12 - 00000000 ____D C:\Users\Warter\AppData\Local\PMB Files
2013-06-06 07:10 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-04 14:40 - 2012-04-28 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-03 23:51 - 2013-06-03 23:45 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:44 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-03 23:44 - 2013-06-03 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-25 13:58 - 2011-10-25 18:53 - 00000000 ____D C:\Users\Warter\AppData\Roaming\TS3Client
2013-05-23 15:05 - 2012-01-16 20:24 - 00000000 ____D C:\Users\Warter\AppData\Roaming\Mumble
2013-05-22 21:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-05-21 16:06 - 2013-05-21 16:01 - 00000000 ____D C:\Users\Warter\Desktop\Fotoss
2013-05-21 16:05 - 2012-09-21 09:10 - 00000000 ____D C:\Users\Warter\Desktop\Fotos Handy
2013-05-20 19:16 - 2013-05-16 20:41 - 00000381 ____A C:\Windows\check.txt
2013-05-16 20:34 - 2009-07-14 06:45 - 00294344 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-16 16:39 - 2010-06-08 22:10 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-16 10:07 - 2012-04-09 19:34 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-05-16 10:07 - 2011-05-19 20:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-05-08 20:37 - 2012-09-27 11:06 - 00000000 ____D C:\Users\Warter\Documents\FIFA 13
 
Files to move or delete:
====================
C:\Users\Warter\fraps.exe
C:\Users\Warter\uninstall.exe
C:\Users\Warter\AppData\Roaming\skype.dat
C:\Users\Warter\AppData\Roaming\skype.ini
C:\ProgramData\NTUser.dat
 
==================== Bamital & volsnap Check =================
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
Last Boot: 2013-06-03 15:51
 
==================== End Of Log ============================

--- --- ---

Additional ScannFRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-06-2013 01
Ran by Warter at 2013-06-06 14:30:20 Run:
Running from I:\
Boot Mode: Safe Mode (minimal)
==========================================================
 
 
==================== Installed Programs =======================
 
„Der Herr der Ringe Online™“ v03.08.00.8025 (Version: 03.08.00.8025)
A1 Internet Software (Version: 8.1.0.55)
A1 Modemwechsel (Version: 3.1.0.58)
A1 Servicecenter (Version: 1.1.0.11)
A1 Webassistent (Version: 4.1.0.163)
Adobe Flash Player 11 ActiveX (Version: 11.5.502.135)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
AI Suite II (Version: 1.01.14)
Ask Toolbar (Version: 1.15.15.0)
Ask Toolbar Updater (Version: 1.2.4.36191)
Avira AntiVir Personal - Free Antivirus (Version: 10.2.0.719)
Battlefield 3™ (Version: 1.4.0.0)
Battlelog Web Plugins (Version: 2.1.3)
Bing Bar (Version: 6.3.2291.0)
Bing Bar Platform (Version: 6.3.2291.0)
Chivalry: Medieval Warfare
DEFIANCE (Version: 1.00.0000)
Downloader
Dragon's Prophet (Version: 1.0.1087.10)
eReg (Version: 1.20.138.34)
ESN Sonar (Version: 0.70.4)
FIFA 13 (Version: 1.0.0.0)
Fraps
GIMP 2.8.2 (Version: 2.8.2)
HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Officejet 6500 E710n-z Hilfe (Version: 140.0.2.2)
HP Update (Version: 5.002.006.003)
I.R.I.S. OCR (Version: 12.3.4.0)
Intel(R) Rapid Storage Technology (Version: 10.1.0.1008)
Intel® Watchdog Timer Driver (Intel® WDT)
Java 7 Update 17 (Version: 7.0.170)
Java Auto Updater (Version: 2.1.9.0)
Java(TM) 6 Update 37 (Version: 6.0.370)
Junk Mail filter update (Version: 14.0.8117.416)
Logitech G-series Keyboard Software (Version: 1.2.218.0)
Logitech SetPoint 6.32 (Version: 6.32.20)
Marketsplash Schnellzugriffe (Version: 1.0.1.7)
McAfee Security Scan Plus (Version: 3.0.318.3)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (Version: 3.5.30730.0)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Default Manager (Version: 2.2.114.0)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 14.0.1468.721)
Mumble 1.2.4 (Version: 1.2.4)
Neverwinter
NVIDIA 3D Vision Controller Driver (Version: 275.33)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)
NVIDIA 3D Vision Treiber 314.22 (Version: 314.22)
NVIDIA Display Control Panel (Version: 1.10)
NVIDIA Grafiktreiber 314.22 (Version: 314.22)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1422)
NVIDIA Systemsteuerung 314.22 (Version: 314.22)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
OpenAL
OpenOffice.org 3.3 (Version: 3.3.9567)
Origin (Version: 8.5.0.4554)
Pando Media Booster (Version: 2.6.0.8)
PlanetSide 2
PunkBuster Services (Version: 0.992)
R.U.S.E
Realtek Ethernet Controller Driver (Version: 7.31.1025.2010)
Realtek High Definition Audio Driver (Version: 6.0.1.6235)
Red Orchestra 2: Heroes of Stalingrad
Sid Meier's Civilization V
Sins of a Solar Empire: Rebellion
SketchUp 8 (Version: 3.0.16944)
Skype Click to Call (Version: 6.3.11079)
Skype™ 5.10 (Version: 5.10.116)
Spybot - Search & Destroy (Version: 1.6.2)
Studie zur Verbesserung von HP Officejet 6500 E710n-z Produkten (Version: 22.50.231.0)
TeamSpeak 3 Client
The Elder Scrolls V: Skyrim
The Secret World (Version: 1.0.0)
The War Z version alpha (Version: alpha)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Visual C++ 2008 Runtime (x64) (Version: 1.0.1)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Mail (Version: 14.0.8117.0416)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinRAR 4.01 (32-Bit) (Version: 4.01.0)
World of Warcraft (Version: 5.1.0.16357)
XCOM: Enemy Unknown
X-Mouse Button Control 2.3 (Version: 2.3)
 
==================== Restore Points =========================
 
 
==================== Hosts content: ==========================
 
 
127.0.0.1    www.007guard.com
127.0.0.1    007guard.com
127.0.0.1    008i.com
127.0.0.1    www.008k.com
127.0.0.1    008k.com
127.0.0.1    www.00hq.com
127.0.0.1    00hq.com
127.0.0.1    010402.com
127.0.0.1    www.032439.com
127.0.0.1    032439.com
127.0.0.1    www.0scan.com
127.0.0.1    0scan.com
127.0.0.1    1000gratisproben.com
127.0.0.1    www.1000gratisproben.com
127.0.0.1    1001namen.com
127.0.0.1    www.1001namen.com
127.0.0.1    www.100888290cs.com
127.0.0.1    100888290cs.com
127.0.0.1    100sexlinks.com
 
There are more than 1000 lines starting with "127.0.0.1"
 
 
==================== Faulty Device Manager Devices =============
 
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (06/06/2013 08:29:40 AM) (Source: Winlogon) (User: )
Description: Fehler bei der Windows-Lizenzaktivierung. Fehler 0x00000000.
 
Error: (06/06/2013 08:29:40 AM) (Source: Software Protection Platform Service) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
0x8007043C
 
Error: (06/03/2013 03:53:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error: (06/03/2013 02:59:19 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (05/22/2013 09:00:25 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error: (05/22/2013 11:04:23 AM) (Source: Application Hang) (User: )
Description: Programm A1Webassistent.exe, Version 4.1.0.163 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 
Prozess-ID: f04
 
Startzeit: 01ce56c46585adf1
 
Endzeit: 0
 
Anwendungspfad: C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe
 
Berichts-ID: 8daa48a0-c2be-11e2-992f-f46d0499435e
 
Error: (05/20/2013 07:17:16 PM) (Source: Software Protection Platform Service) (User: )
Description: Rearming-Fehler für AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 0 Verbleibende Rearm-Anzahl. Fehlercode: 0xC004D307
 
Error: (05/20/2013 07:17:07 PM) (Source: Application Hang) (User: )
Description: Programm A1Webassistent.exe, Version 4.1.0.163 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 
Prozess-ID: e38
 
Startzeit: 01ce557b97fa4521
 
Endzeit: 15
 
Anwendungspfad: C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe
 
Berichts-ID: 144dab43-c171-11e2-981a-f46d0499435e
 
Error: (05/20/2013 01:18:28 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (05/17/2013 08:00:16 AM) (Source: Software Protection Platform Service) (User: )
Description: Rearming-Fehler für AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 0 Verbleibende Rearm-Anzahl. Fehlercode: 0xC004D307
 
 
System errors:
=============
Error: (06/06/2013 02:25:36 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}
 
Error: (06/06/2013 02:25:36 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}
 
Error: (06/06/2013 02:25:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068
 
Error: (06/06/2013 02:21:23 PM) (Source: iaStor) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.
 
Error: (06/06/2013 01:53:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068
 
Error: (06/06/2013 01:53:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068
 
Error: (06/06/2013 01:53:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068
 
Error: (06/06/2013 01:53:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068
 
Error: (06/06/2013 01:53:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068
 
Error: (06/06/2013 01:53:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068
 
 
Microsoft Office Sessions:
=========================
Error: (06/06/2013 08:29:40 AM) (Source: Winlogon)(User: )
Description: 0x000000000x00000001
 
Error: (06/06/2013 08:29:40 AM) (Source: Software Protection Platform Service)(User: )
Description: 0x8007043C
 
Error: (06/03/2013 03:53:08 PM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\spybot - search & destroy\DelZip179.dllc:\program files (x86)\spybot - search & destroy\DelZip179.dll8
 
Error: (06/03/2013 02:59:19 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (05/22/2013 09:00:25 PM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\spybot - search & destroy\DelZip179.dllc:\program files (x86)\spybot - search & destroy\DelZip179.dll8
 
Error: (05/22/2013 11:04:23 AM) (Source: Application Hang)(User: )
Description: A1Webassistent.exe4.1.0.163f0401ce56c46585adf10C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe8daa48a0-c2be-11e2-992f-f46d0499435e
 
Error: (05/20/2013 07:17:16 PM) (Source: Software Protection Platform Service)(User: )
Description: 0xC004D30755c92734-d682-4d71-983e-d6ec3f16059f(null)0
 
Error: (05/20/2013 07:17:07 PM) (Source: Application Hang)(User: )
Description: A1Webassistent.exe4.1.0.163e3801ce557b97fa452115C:\Program Files (x86)\A1\A1 Webassistent\A1Webassistent.exe144dab43-c171-11e2-981a-f46d0499435e
 
Error: (05/20/2013 01:18:28 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
 
Error: (05/17/2013 08:00:16 AM) (Source: Software Protection Platform Service)(User: )
Description: 0xC004D30755c92734-d682-4d71-983e-d6ec3f16059f(null)0
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 16%
Total physical RAM: 8168.89 MB
Available physical RAM: 6808.96 MB
Total Pagefile: 16335.96 MB
Available Pagefile: 15125.79 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:48.41 GB) (Free:5.71 GB) NTFS (Disk=0 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: (Fast_Drive) (Fixed) (Total:34.46 GB) (Free:5.58 GB) NTFS (Disk=1 Partition=1)
Drive e: (Programme Tools Office) (Fixed) (Total:68.79 GB) (Free:42.44 GB) NTFS (Disk=0 Partition=2)
Drive f: (Games Video Fotos) (Fixed) (Total:348.56 GB) (Free:80.81 GB) NTFS (Disk=0 Partition=3)
Drive i: () (Removable) (Total:3.73 GB) (Free:3.73 GB) FAT32 (Disk=2 Partition=1)
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: DA45DA45)
Partition 1: (Active) - (Size=48 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=417 GB) - (Type=05)
 
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 34 GB) (Disk ID: DA7EDA7E)
Partition 1: (Active) - (Size=34 GB) - (Type=07 NTFS)
 
========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)
 
==================== End Of Log ============================

--- --- ---

schrauber · 06.06.2013, 13:47

Hi,

Fix mit FRST
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKLM\...\Run: [] [x]
HKLM\...\Winlogon: [Shell] [x ] () <=== ATTENTION
HKCU\...\Winlogon: [Shell] explorer.exe,C:\Users\Warter\AppData\Roaming\skype.dat [66560 2011-11-17] () <==== ATTENTION 
2013-06-06 07:33 - 2013-06-06 09:54 - 00000004 ____A C:\Users\Warter\AppData\Roaming\skype.ini
C:\Users\Warter\fraps.exe
C:\Users\Warter\uninstall.exe
C:\Users\Warter\AppData\Roaming\skype.dat
C:\Users\Warter\AppData\Roaming\skype.ini
C:\ProgramData\NTUser.dat

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Fix Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Normal booten und ein neues FRST Log bitte.

Sharkyat · 06.06.2013, 14:12

Danke für deine Hilfe!

hier der log:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-06-2013 01
Ran by Warter at 2013-06-06 15:10:24 Run:1
Running from I:\
Boot Mode: Safe Mode (minimal)
==============================================

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value was restored successfully.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
C:\Users\Warter\AppData\Roaming\skype.ini => Moved successfully.
C:\Users\Warter\fraps.exe => Moved successfully.
C:\Users\Warter\uninstall.exe => Moved successfully.
C:\Users\Warter\AppData\Roaming\skype.dat => Moved successfully.
C:\Users\Warter\AppData\Roaming\skype.ini => File/Directory not found.
C:\ProgramData\NTUser.dat => Moved successfully.

==== End of Fixlog ====

hab auch noch einen Virusscann Log wenn dir der was helfen sollte:

Avira AntiVir Personal
Erstellungsdatum der Reportdatei: Donnerstag, 6. Juni 2013 14:07

Es wird nach 4732607 Virenstämmen gesucht.

Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer : Avira AntiVir Personal - Free Antivirus
Seriennummer : 0000149996-ADJIE-0000001
Plattform : Windows 7 x64
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Abgesicherter Modus
Benutzername : Warter
Computername : WARTER-PC

Versionsinformationen:
BUILD.DAT : 10.2.0.719 36070 Bytes 25.10.2012 10:38:00
AVSCAN.EXE : 10.3.0.7 484008 Bytes 30.06.2011 16:56:16
AVSCAN.DLL : 10.0.5.0 57192 Bytes 30.06.2011 16:56:16
LUKE.DLL : 10.3.0.5 45416 Bytes 30.06.2011 16:56:16
LUKERES.DLL : 10.0.0.0 13672 Bytes 14.01.2010 10:59:47
AVSCPLR.DLL : 10.3.0.7 119656 Bytes 30.06.2011 16:56:16
AVREG.DLL : 10.3.0.9 88833 Bytes 12.07.2011 16:01:28
VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 18:12:34
VBASE001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 12:17:28
VBASE002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 13:00:32
VBASE003.VDF : 7.11.80.61 2048 Bytes 28.05.2013 13:00:32
VBASE004.VDF : 7.11.80.62 2048 Bytes 28.05.2013 13:00:32
VBASE005.VDF : 7.11.80.63 2048 Bytes 28.05.2013 13:00:32
VBASE006.VDF : 7.11.80.64 2048 Bytes 28.05.2013 13:00:32
VBASE007.VDF : 7.11.80.65 2048 Bytes 28.05.2013 13:00:32
VBASE008.VDF : 7.11.80.66 2048 Bytes 28.05.2013 13:00:32
VBASE009.VDF : 7.11.80.67 2048 Bytes 28.05.2013 13:00:32
VBASE010.VDF : 7.11.80.68 2048 Bytes 28.05.2013 13:00:32
VBASE011.VDF : 7.11.80.69 2048 Bytes 28.05.2013 13:00:32
VBASE012.VDF : 7.11.80.70 2048 Bytes 28.05.2013 13:00:32
VBASE013.VDF : 7.11.80.71 2048 Bytes 28.05.2013 13:00:32
VBASE014.VDF : 7.11.81.57 145408 Bytes 29.05.2013 13:00:33
VBASE015.VDF : 7.11.81.137 130048 Bytes 30.05.2013 13:00:34
VBASE016.VDF : 7.11.81.255 207360 Bytes 31.05.2013 13:00:34
VBASE017.VDF : 7.11.82.91 156160 Bytes 03.06.2013 13:00:35
VBASE018.VDF : 7.11.82.92 2048 Bytes 03.06.2013 13:00:35
VBASE019.VDF : 7.11.82.93 2048 Bytes 03.06.2013 13:00:35
VBASE020.VDF : 7.11.82.94 2048 Bytes 03.06.2013 13:00:35
VBASE021.VDF : 7.11.82.95 2048 Bytes 03.06.2013 13:00:35
VBASE022.VDF : 7.11.82.96 2048 Bytes 03.06.2013 13:00:35
VBASE023.VDF : 7.11.82.97 2048 Bytes 03.06.2013 13:00:35
VBASE024.VDF : 7.11.82.98 2048 Bytes 03.06.2013 13:00:35
VBASE025.VDF : 7.11.82.99 2048 Bytes 03.06.2013 13:00:35
VBASE026.VDF : 7.11.82.100 2048 Bytes 03.06.2013 13:00:35
VBASE027.VDF : 7.11.82.101 2048 Bytes 03.06.2013 13:00:35
VBASE028.VDF : 7.11.82.102 2048 Bytes 03.06.2013 13:00:35
VBASE029.VDF : 7.11.82.103 2048 Bytes 03.06.2013 13:00:36
VBASE030.VDF : 7.11.82.104 2048 Bytes 03.06.2013 13:00:36
VBASE031.VDF : 7.11.82.124 44032 Bytes 03.06.2013 13:00:36
Engineversion : 8.2.12.50
AEVDF.DLL : 8.1.2.10 102772 Bytes 12.07.2012 14:25:29
AESCRIPT.DLL : 8.1.4.118 487805 Bytes 25.05.2013 10:45:04
AESCN.DLL : 8.1.10.4 131446 Bytes 28.03.2013 07:44:47
AESBX.DLL : 8.2.5.12 606578 Bytes 14.06.2012 17:34:51
AERDL.DLL : 8.2.0.88 643444 Bytes 10.01.2013 20:14:02
AEPACK.DLL : 8.3.2.12 754040 Bytes 10.05.2013 18:33:28
AEOFFICE.DLL : 8.1.2.56 205180 Bytes 10.03.2013 18:35:28
AEHEUR.DLL : 8.1.4.386 5947769 Bytes 03.06.2013 13:00:43
AEHELP.DLL : 8.1.25.10 258425 Bytes 10.05.2013 18:33:19
AEGEN.DLL : 8.1.7.4 442741 Bytes 10.05.2013 18:33:18
AEEXP.DLL : 8.4.0.32 201078 Bytes 25.05.2013 10:45:05
AEEMU.DLL : 8.1.3.2 393587 Bytes 12.07.2012 14:25:28
AECORE.DLL : 8.1.31.2 201080 Bytes 20.02.2013 11:44:34
AEBB.DLL : 8.1.1.4 53619 Bytes 05.11.2012 14:35:21
AVWINLL.DLL : 10.0.0.0 19304 Bytes 28.03.2011 14:14:57
AVPREF.DLL : 10.0.3.2 44904 Bytes 30.06.2011 16:56:16
AVREP.DLL : 10.0.0.10 174120 Bytes 19.05.2011 17:49:04
AVARKT.DLL : 10.0.26.1 255336 Bytes 30.06.2011 16:56:16
AVEVTLOG.DLL : 10.0.0.9 203112 Bytes 30.06.2011 16:56:16
SQLITE3.DLL : 3.6.19.0 355688 Bytes 17.06.2010 13:27:02
AVSMTP.DLL : 10.0.0.17 63848 Bytes 28.03.2011 14:14:57
NETNT.DLL : 10.0.0.0 11624 Bytes 28.03.2011 14:15:04
RCIMAGE.DLL : 10.0.0.35 2589544 Bytes 30.06.2011 16:56:16
RCTEXT.DLL : 10.0.64.0 98664 Bytes 30.06.2011 16:56:16

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: ShlExt
Konfigurationsdatei...................: C:\Users\Warter\AppData\Local\Temp\bb76b70c.avp
Protokollierung.......................: standard
Primäre Aktion........................: interaktiv
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:,
Durchsuche aktive Programme...........: aus
Durchsuche Registrierung..............: aus
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert
Auszulassende Dateien.................: D:\Origin\Origin.exe,

Beginn des Suchlaufs: Donnerstag, 6. Juni 2013 14:07

Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
C:\Users\Warter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\186b33cd-41799cae
[0] Archivtyp: ZIP
--> hw.class
[FUND] Enthält Erkennungsmuster des Exploits EXP/JAVA.Posmary.Gen
--> mac.class
[FUND] Enthält Erkennungsmuster des Exploits EXP/JAVA.Ongleful.Gen
--> test.class
[FUND] Enthält Erkennungsmuster des Exploits EXP/JAVA.Pershex.Gen

Beginne mit der Desinfektion:
C:\Users\Warter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\186b33cd-41799cae
[FUND] Enthält Erkennungsmuster des Exploits EXP/JAVA.Pershex.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '552f2796.qua' verschoben!

Ende des Suchlaufs: Donnerstag, 6. Juni 2013 14:53
Benötigte Zeit: 39:12 Minute(n)

Der Suchlauf wurde vollständig durchgeführt.

34965 Verzeichnisse wurden überprüft
779951 Dateien wurden geprüft
3 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
1 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
779948 Dateien ohne Befall
6686 Archive wurden durchsucht
0 Warnungen
1 Hinweise

schrauber · 06.06.2013, 14:32

Rechner normal booten, freuen, FRST neu laden, im Normalmodus laufen lassen, Log in Codetags posten

Sharkyat · 06.06.2013, 14:43

Zitat:

Zitat von schrauber

Rechner normal booten, freuen, FRST neu laden, im Normalmodus laufen lassen, Log in Codetags posten

verstehe ich nicht:

FRST neu laden, im Normalmodus laufen lassen, Log in Codetags posten

aber schon Mal Danke!

schrauber · 06.06.2013, 14:50

Du bist doch derzeit im Abgesicherten Modus unterwegs oder nicht?

Rechner jetzt ganz normal booten, dann FRST ausführen und ein frisches Scanlog posten.

Sharkyat · 06.06.2013, 15:01

Sorry! bin nicht so ganz fit was den PC angeht :-)

ja ich war im Abgesichertem :-)
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-06-2013 01
Ran by Warter (administrator) on 06-06-2013 15:58:57
Running from I:\
Windows 7 Enterprise Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

==================== Registry (Whitelisted) ==================

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
MountPoints2: J - J:\AutoRun.exe
MountPoints2: {153f7967-2c73-11e1-addc-f46d0499435e} - J:\haosheng.exe
MountPoints2: {712bd3d3-7a68-11e0-94be-806e6f6e6963} - G:\SETUP.EXE
MountPoints2: {712bd3d4-7a68-11e0-94be-806e6f6e6963} - H:\setup.exe
MountPoints2: {7389687e-ba03-11e0-9bc6-f46d0499435e} - I:\setup.exe
MountPoints2: {c52930cc-f0e3-11e0-9f77-001e101fb681} - J:\AutoRun.exe
MountPoints2: {e1931a80-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
MountPoints2: {e1931a9f-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
HKLM-x32\...\Run: []  [x]

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} -  No File
SearchScopes: HKCU - {28CCA902-2A27-4757-A37F-340292A55DE1} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYAT&apn_uid=D8D8B73A-A23B-41B5-ACD4-207C51F76102&apn_sauid=900B1885-0C5F-47E5-B36C-770344698AD2
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default
FF SelectedSearchEngine: Ask.com
FF Homepage: www.google.at
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - F:\Spiele\Downlaoder\npdd.dll (Metaboli)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Ask Toolbar - C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default\Extensions\toolbar@ask.com

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360 2011-03-28] (Avira GmbH)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480 2011-06-30] (Avira GmbH)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-05-27] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-06-26] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88288 2011-06-30] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [123784 2011-06-30] (Avira GmbH)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-06-26] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-06 15:57 - 2013-06-06 15:57 - 00000778 ____A C:\Windows\WindowsUpdate.log
2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt
2013-06-06 14:56 - 2013-06-06 15:55 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-06-06 14:56 - 2013-06-06 15:55 - 00000224 ____A C:\Windows\setupact.log
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:45 - 2013-06-03 23:51 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:44 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-03 22:33 - 2013-06-03 23:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-21 16:01 - 2013-05-21 16:06 - 00000000 ____D C:\Users\Warter\Desktop\Fotoss
2013-05-16 20:41 - 2013-05-20 19:16 - 00000381 ____A C:\Windows\check.txt
2013-05-16 10:13 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-16 10:13 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-16 10:13 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-16 10:13 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-16 10:13 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-16 10:13 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-16 10:13 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-16 10:13 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll

==================== One Month Modified Files and Folders =======

2013-06-06 15:57 - 2013-06-06 15:57 - 00000778 ____A C:\Windows\WindowsUpdate.log
2013-06-06 15:55 - 2013-06-06 14:56 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-06-06 15:55 - 2013-06-06 14:56 - 00000224 ____A C:\Windows\setupact.log
2013-06-06 15:55 - 2011-05-10 16:20 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-06 15:55 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-06 15:10 - 2011-05-09 18:43 - 00000000 ____D C:\users\Warter
2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt
2013-06-06 14:57 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-06 14:57 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-06 14:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-06-06 14:33 - 2009-07-14 12:49 - 00707918 ____A C:\Windows\System32\perfh007.dat
2013-06-06 14:33 - 2009-07-14 12:49 - 00153404 ____A C:\Windows\System32\perfc007.dat
2013-06-06 14:33 - 2009-07-14 07:13 - 01644414 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-06 08:11 - 2012-12-22 12:12 - 00000000 ____D C:\Users\Warter\AppData\Local\PMB Files
2013-06-06 07:10 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-04 14:40 - 2012-04-28 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-03 23:51 - 2013-06-03 23:45 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:44 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-03 23:44 - 2013-06-03 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-25 13:58 - 2011-10-25 18:53 - 00000000 ____D C:\Users\Warter\AppData\Roaming\TS3Client
2013-05-23 15:05 - 2012-01-16 20:24 - 00000000 ____D C:\Users\Warter\AppData\Roaming\Mumble
2013-05-22 21:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-05-21 16:06 - 2013-05-21 16:01 - 00000000 ____D C:\Users\Warter\Desktop\Fotoss
2013-05-21 16:05 - 2012-09-21 09:10 - 00000000 ____D C:\Users\Warter\Desktop\Fotos Handy
2013-05-20 19:16 - 2013-05-16 20:41 - 00000381 ____A C:\Windows\check.txt
2013-05-16 20:34 - 2009-07-14 06:45 - 00294344 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-16 16:39 - 2010-06-08 22:10 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-16 10:07 - 2012-04-09 19:34 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-05-16 10:07 - 2011-05-19 20:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-05-08 20:37 - 2012-09-27 11:06 - 00000000 ____D C:\Users\Warter\Documents\FIFA 13

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


Last Boot: 2013-06-03 15:51

==================== End Of Log ============================

--- --- ---

schrauber · 06.06.2013, 15:15

Was ist den Laufwerk I?

Unsere Tools müssen vom Desktop laufen, mit Adminrechten.

Sharkyat · 06.06.2013, 15:22

I ist der USB Stick den ich drinnen habe um die LOG zu kopeiren und dann hier am Laptop ins Forum zu kriegen!

hier nochmals FRST als Admin vom Desktopm gestartet:
PS: Fehler / Virus kommt nun nicht mehr!

kann ich nun wieder den betrofennen Rechner an Internet anstecken?
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-06-2013 01
Ran by Warter (administrator) on 06-06-2013 16:19:31
Running from C:\Users\Warter\Desktop
Windows 7 Enterprise Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(Avira GmbH) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

==================== Registry (Whitelisted) ==================

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
MountPoints2: J - J:\AutoRun.exe
MountPoints2: {153f7967-2c73-11e1-addc-f46d0499435e} - J:\haosheng.exe
MountPoints2: {712bd3d3-7a68-11e0-94be-806e6f6e6963} - G:\SETUP.EXE
MountPoints2: {712bd3d4-7a68-11e0-94be-806e6f6e6963} - H:\setup.exe
MountPoints2: {7389687e-ba03-11e0-9bc6-f46d0499435e} - I:\setup.exe
MountPoints2: {c52930cc-f0e3-11e0-9f77-001e101fb681} - J:\AutoRun.exe
MountPoints2: {e1931a80-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
MountPoints2: {e1931a9f-eeaa-11e0-ace9-f46d0499435e} - J:\AutoRun.exe
HKLM-x32\...\Run: []  [x]

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
URLSearchHook: (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} -  No File
SearchScopes: HKCU - {28CCA902-2A27-4757-A37F-340292A55DE1} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYAT&apn_uid=D8D8B73A-A23B-41B5-ACD4-207C51F76102&apn_sauid=900B1885-0C5F-47E5-B36C-770344698AD2
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default
FF SelectedSearchEngine: Ask.com
FF Homepage: www.google.at
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=1.102.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - F:\Spiele\Downlaoder\npdd.dll (Metaboli)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Ask Toolbar - C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default\Extensions\toolbar@ask.com

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360 2011-03-28] (Avira GmbH)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480 2011-06-30] (Avira GmbH)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2010-12-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-05-27] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2011-06-26] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88288 2011-06-30] (Avira GmbH)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [123784 2011-06-30] (Avira GmbH)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2011-06-26] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [x]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S0 mv91xx; system32\DRIVERS\mv91xx.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-06 16:19 - 2013-06-06 14:29 - 01917710 ____A (Farbar) C:\Users\Warter\Desktop\FRST64.exe
2013-06-06 15:57 - 2013-06-06 15:57 - 00003446 ____A C:\Windows\WindowsUpdate.log
2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt
2013-06-06 14:56 - 2013-06-06 15:55 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-06-06 14:56 - 2013-06-06 15:55 - 00000224 ____A C:\Windows\setupact.log
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:45 - 2013-06-03 23:51 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:44 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-03 22:33 - 2013-06-03 23:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-21 16:01 - 2013-05-21 16:06 - 00000000 ____D C:\Users\Warter\Desktop\Fotoss
2013-05-16 20:41 - 2013-05-20 19:16 - 00000381 ____A C:\Windows\check.txt
2013-05-16 10:13 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-16 10:13 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-16 10:13 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-16 10:13 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-16 10:13 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-16 10:13 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-16 10:13 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-16 10:13 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-16 10:13 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-16 10:13 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll

==================== One Month Modified Files and Folders =======

2013-06-06 16:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-06-06 15:59 - 2013-06-06 15:57 - 00003446 ____A C:\Windows\WindowsUpdate.log
2013-06-06 15:59 - 2009-07-14 12:49 - 00707918 ____A C:\Windows\System32\perfh007.dat
2013-06-06 15:59 - 2009-07-14 12:49 - 00153404 ____A C:\Windows\System32\perfc007.dat
2013-06-06 15:59 - 2009-07-14 07:13 - 01644414 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-06 15:55 - 2013-06-06 14:56 - 00065536 _____ C:\Windows\System32\Ikeext.etl
2013-06-06 15:55 - 2013-06-06 14:56 - 00000224 ____A C:\Windows\setupact.log
2013-06-06 15:55 - 2011-05-10 16:20 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-06 15:55 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-06 15:10 - 2011-05-09 18:43 - 00000000 ____D C:\users\Warter
2013-06-06 15:09 - 2013-06-06 15:09 - 00000460 ____A C:\Users\Warter\Desktop\Fixlist.txt
2013-06-06 14:57 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-06 14:57 - 2009-07-14 06:45 - 00012272 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-06 14:29 - 2013-06-06 16:19 - 01917710 ____A (Farbar) C:\Users\Warter\Desktop\FRST64.exe
2013-06-06 14:29 - 2013-06-06 14:29 - 00000000 ____D C:\FRST
2013-06-06 08:11 - 2012-12-22 12:12 - 00000000 ____D C:\Users\Warter\AppData\Local\PMB Files
2013-06-06 07:10 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-04 14:40 - 2012-04-28 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-06-04 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-03 23:51 - 2013-06-03 23:45 - 00010360 ____A C:\Windows\IE10_main.log
2013-06-03 23:48 - 2013-06-03 23:48 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-03 23:48 - 2013-06-03 23:48 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-03 23:48 - 2013-06-03 23:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-03 23:48 - 2013-06-03 23:48 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-03 23:48 - 2013-06-03 23:48 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-03 23:48 - 2013-06-03 23:48 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-03 23:48 - 2013-06-03 23:48 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-03 23:47 - 2013-06-03 23:47 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:47 - 2013-06-03 23:47 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-03 23:44 - 2013-06-03 23:44 - 00000000 ____D C:\Users\Warter\Documents\dragoon
2013-06-03 23:44 - 2013-06-03 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-05-25 13:58 - 2011-10-25 18:53 - 00000000 ____D C:\Users\Warter\AppData\Roaming\TS3Client
2013-05-23 15:05 - 2012-01-16 20:24 - 00000000 ____D C:\Users\Warter\AppData\Roaming\Mumble
2013-05-22 21:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-05-21 16:06 - 2013-05-21 16:01 - 00000000 ____D C:\Users\Warter\Desktop\Fotoss
2013-05-21 16:05 - 2012-09-21 09:10 - 00000000 ____D C:\Users\Warter\Desktop\Fotos Handy
2013-05-20 19:16 - 2013-05-16 20:41 - 00000381 ____A C:\Windows\check.txt
2013-05-16 20:34 - 2009-07-14 06:45 - 00294344 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-16 16:39 - 2010-06-08 22:10 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-16 10:07 - 2012-04-09 19:34 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-05-16 10:07 - 2011-05-19 20:14 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-05-08 20:37 - 2012-09-27 11:06 - 00000000 ____D C:\Users\Warter\Documents\FIFA 13

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


Last Boot: 2013-06-03 15:51

==================== End Of Log ============================

--- --- ---

schrauber · 06.06.2013, 15:25

Klar, als ran ans Netz

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log, dann sind wir fertig

Sharkyat · 06.06.2013, 15:44

hmm kein Internet funktioniert!

komme auch nicht auf den Router bzw wird dieser nicht angezeigt. im Gerätemanager bei Netzwerk adapter wird angezeigt das ich einen Fehler habe Code 31

hab schon Kabel gewechselt (mit Laptop funktioniert es)

schrauber · 06.06.2013, 15:47

Dann mach mal AdwCleaner und JRT per Stick, auserdem noch das:

Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool

Setze einen Haken bei folgenden Einträgen

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset IE Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Minidump Files

Klicke Go und poste den Inhalt der Result.txt.

Sharkyat · 06.06.2013, 16:15

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v2.301 - Datei am 06/06/2013 um 16:59:52 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (64 bits)
# Benutzer : Warter - WARTER-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Warter\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default\searchplugins\Askcom.xml
Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\Users\Warter\AppData\Local\APN
Ordner Gelöscht : C:\Users\Warter\AppData\Local\OpenCandy
Ordner Gelöscht : C:\Users\Warter\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Warter\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default\extensions\toolbar@ask.com
Ordner Gelöscht : C:\Users\Warter\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\APN
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\Headlight
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\APN
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Wert Gelöscht : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16576

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v21.0 (de)

Datei : C:\Users\Warter\AppData\Roaming\Mozilla\Firefox\Profiles\jb19ka26.default\prefs.js

Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Gelöscht : user_pref("browser.search.defaultenginename", "Ask.com");
Gelöscht : user_pref("browser.search.order.1", "Ask.com");
Gelöscht : user_pref("browser.search.selectedEngine", "Ask.com");
Gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", "");

*************************

AdwCleaner[S1].txt - [4945 octets] - [06/06/2013 16:59:52]

########## EOF - C:\AdwCleaner[S1].txt - [5005 octets] ##########

--- --- ---

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Enterprise x64
Ran by Warter on 06.06.2013 at 17:05:29,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{28CCA902-2A27-4757-A37F-340292A55DE1}

~~~ Files

~~~ Folders

~~~ FireFox

Emptied folder: C:\Users\Warter\AppData\Roaming\mozilla\firefox\profiles\jb19ka26.default\minidumps [41 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.06.2013 at 17:07:46,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

MiniToolBox by Farbar Version:21-04-2013
Ran by Warter (administrator) on 06-06-2013 at 17:11:29
Running from "C:\Users\Warter\Desktop"
Windows 7 Enterprise Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 100sexlinks.com

There are 15219 more lines starting with "127.0.0.1"

========================= IP Configuration: ================================

# ----------------------------------
# IPv4-Konfiguration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled

popd
# Ende der IPv4-Konfiguration

Windows-IP-Konfiguration

Hostname . . . . . . . . . . . . : Warter-PC
Prim„res DNS-Suffix . . . . . . . :
Knotentyp . . . . . . . . . . . . : Hybrid
IP-Routing aktiviert . . . . . . : Nein
WINS-Proxy aktiviert . . . . . . : Nein

Tunneladapter Reusable ISATAP Interface {43DFB34E-28E2-47B0-9A2B-C21B11A3B345}:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 3:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-Teredo-Tunneling-Adapter
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter 6TO4 Adapter:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-6zu4-Adapter
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja
Server: UnKnown
Address: 127.0.0.1

Ping-Anforderung konnte Host "google.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.
Server: UnKnown
Address: 127.0.0.1

Ping-Anforderung konnte Host "yahoo.com" nicht finden. šberprfen Sie den Namen, und versuchen Sie es erneut.

Ping wird ausgefhrt fr 127.0.0.1 mit 32 Bytes Daten:
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128

Ping-Statistik fr 127.0.0.1:
Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0
(0% Verlust),
Ca. Zeitangaben in Millisek.:
Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms
===========================================================================
Schnittstellenliste
1...........................Software Loopback Interface 1
13...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter
10...00 00 00 00 00 00 00 e0 Microsoft-Teredo-Tunneling-Adapter
12...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik
127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 306
127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 306
127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306
224.0.0.0 240.0.0.0 Auf Verbindung 127.0.0.1 306
255.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306
===========================================================================
St„ndige Routen:
Keine

IPv6-Routentabelle
===========================================================================
Aktive Routen:
If Metrik Netzwerkziel Gateway
1 306 ::1/128 Auf Verbindung
1 306 ff00::/8 Auf Verbindung
===========================================================================
St„ndige Routen:
Keine
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [232448] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [326144] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

=========================== Installed Programs ============================

„Der Herr der Ringe Online™“ v03.08.00.8025 (Version: 03.08.00.8025)
A1 Internet Software (Version: 8.1.0.55)
A1 Modemwechsel (Version: 3.1.0.58)
A1 Servicecenter (Version: 1.1.0.11)
A1 Webassistent (Version: 4.1.0.163)
Adobe Flash Player 11 ActiveX (Version: 11.5.502.135)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
AI Suite II (Version: 1.01.14)
Avira AntiVir Personal - Free Antivirus (Version: 10.2.0.719)
Battlefield 3™ (Version: 1.4.0.0)
Battlelog Web Plugins (Version: 2.1.3)
Bing Bar (Version: 6.3.2291.0)
Bing Bar Platform (Version: 6.3.2291.0)
Chivalry: Medieval Warfare
DEFIANCE (Version: 1.00.0000)
Downloader
Dragon's Prophet (Version: 1.0.1087.10)
eReg (Version: 1.20.138.34)
ESN Sonar (Version: 0.70.4)
FIFA 13 (Version: 1.0.0.0)
Fraps
GIMP 2.8.2 (Version: 2.8.2)
HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Officejet 6500 E710n-z Hilfe (Version: 140.0.2.2)
HP Update (Version: 5.002.006.003)
I.R.I.S. OCR (Version: 12.3.4.0)
Intel(R) Rapid Storage Technology (Version: 10.1.0.1008)
Intel® Watchdog Timer Driver (Intel® WDT)
Java 7 Update 17 (Version: 7.0.170)
Java Auto Updater (Version: 2.1.9.0)
Java(TM) 6 Update 37 (Version: 6.0.370)
Junk Mail filter update (Version: 14.0.8117.416)
Logitech G-series Keyboard Software (Version: 1.2.218.0)
Logitech SetPoint 6.32 (Version: 6.32.20)
Marketsplash Schnellzugriffe (Version: 1.0.1.7)
McAfee Security Scan Plus (Version: 3.0.318.3)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (Version: 3.5.30730.0)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Default Manager (Version: 2.2.114.0)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 14.0.1468.721)
Mumble 1.2.4 (Version: 1.2.4)
Neverwinter
NVIDIA 3D Vision Controller Driver (Version: 275.33)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)
NVIDIA 3D Vision Treiber 314.22 (Version: 314.22)
NVIDIA Display Control Panel (Version: 1.10)
NVIDIA Grafiktreiber 314.22 (Version: 314.22)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1422)
NVIDIA Systemsteuerung 314.22 (Version: 314.22)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
OpenAL
OpenOffice.org 3.3 (Version: 3.3.9567)
Origin (Version: 8.5.0.4554)
Pando Media Booster (Version: 2.6.0.8)
PlanetSide 2
PunkBuster Services (Version: 0.992)
R.U.S.E
Realtek Ethernet Controller Driver (Version: 7.31.1025.2010)
Realtek High Definition Audio Driver (Version: 6.0.1.6235)
Red Orchestra 2: Heroes of Stalingrad
Sid Meier's Civilization V
Sins of a Solar Empire: Rebellion
SketchUp 8 (Version: 3.0.16944)
Skype Click to Call (Version: 6.3.11079)
Skype™ 5.10 (Version: 5.10.116)
Spybot - Search & Destroy (Version: 1.6.2)
Studie zur Verbesserung von HP Officejet 6500 E710n-z Produkten (Version: 22.50.231.0)
TeamSpeak 3 Client
The Elder Scrolls V: Skyrim
The Secret World (Version: 1.0.0)
The War Z version alpha (Version: alpha)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Visual C++ 2008 Runtime (x64) (Version: 1.0.1)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Mail (Version: 14.0.8117.0416)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinRAR 4.01 (32-Bit) (Version: 4.01.0)
World of Warcraft (Version: 5.1.0.16357)
XCOM: Enemy Unknown
X-Mouse Button Control 2.3 (Version: 2.3)

========================= Memory info: ===================================

Percentage of memory in use: 18%
Total physical RAM: 8168.89 MB
Available physical RAM: 6624.21 MB
Total Pagefile: 16335.96 MB
Available Pagefile: 14639.05 MB
Total Virtual: 4095.88 MB
Available Virtual: 3974.7 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:48.41 GB) (Free:5.66 GB) NTFS
2 Drive d: (Fast_Drive) (Fixed) (Total:34.46 GB) (Free:5.58 GB) NTFS
3 Drive e: (Programme Tools Office) (Fixed) (Total:68.79 GB) (Free:42.44 GB) NTFS
4 Drive f: (Games Video Fotos) (Fixed) (Total:348.56 GB) (Free:80.81 GB) NTFS
7 Drive i: () (Removable) (Total:3.73 GB) (Free:3.72 GB) FAT32

========================= Users: ========================================

Benutzerkonten fr \\WARTER-PC

Administrator ASPNET Gast
UpdatusUser Warter
Der Befehl wurde erfolgreich ausgefhrt.

========================= Minidump Files ==================================

No minidump file found

**** End of log ****

schrauber · 06.06.2013, 16:32

Hi,

Netzwerkkabel ist angeschlossen? Hast Du einen oder mehrere Anschlüsse? Zweit-PC oder WLAN zur Hand?

Sharkyat · 06.06.2013, 17:01

Netzwerkkabel ist angeschlossen? ja angeschlossen aber es leuchtet nichts am PS (grüne lampe)

Hast Du einen oder mehrere Anschlüsse? leider nur einen der ist direkt am Motherboard

Zweit-PC oder WLAN zur Hand? habe soeben am selben Kabel den Laptop angehängt der ging einwandfrei (hab vorher natürlich W-Lan ausgemacht am Laptop)

Heute Morgen so um 07:00 gings aber noch! habe ich durch mein selbst herumprobieren evt irgendwas deaktiviert?

06.06.2013, 14:32	#4
schrauber /// the machine /// TB-Ausbilder	Polizei Virus Rechner normal booten, freuen, FRST neu laden, im Normalmodus laufen lassen, Log in Codetags posten __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

06.06.2013, 14:50	#6
schrauber /// the machine /// TB-Ausbilder	Polizei Virus Du bist doch derzeit im Abgesicherten Modus unterwegs oder nicht? Rechner jetzt ganz normal booten, dann FRST ausführen und ein frisches Scanlog posten. __________________ --> Polizei Virus

06.06.2013, 15:15	#8
schrauber /// the machine /// TB-Ausbilder	Polizei Virus Was ist den Laufwerk I? Unsere Tools müssen vom Desktop laufen, mit Adminrechten. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

06.06.2013, 16:32	#14
schrauber /// the machine /// TB-Ausbilder	Polizei Virus Hi, Netzwerkkabel ist angeschlossen? Hast Du einen oder mehrere Anschlüsse? Zweit-PC oder WLAN zur Hand? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Polizei Virus

Plagegeister aller Art und deren Bekämpfung: Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Polizei Virus

Ähnliche Themen: Polizei Virus

06.06.2013, 15:44	#11
Sharkyat	Polizei Virus hmm kein Internet funktioniert! komme auch nicht auf den Router bzw wird dieser nicht angezeigt. im Gerätemanager bei Netzwerk adapter wird angezeigt das ich einen Fehler habe Code 31 hab schon Kabel gewechselt (mit Laptop funktioniert es)