| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Bundespolizei Trojaner WIN7 64bit mit FRST LogWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.06.2013, 00:03
| #1 |
 |  Bundespolizei Trojaner WIN7 64bit mit FRST Log Hey Leute, habe mir gerade diesen GVU Trojaner eingefangen und konnte nicht in den Abgesicherten Modus. Habe FRST schon durchlaufen lassen. €: Mach es natürlich gerne nochmal mit diesem OTL, wollte nur etwas Vorarbeit leisten  Hier die Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2013
Ran by SYSTEM on 11-06-2013 00:48:24
Running from G:\
Windows 7 Professional (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Recovery
The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Cmaudio8788] C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd [8761344 2010-09-16] (C-Media Corporation)
HKLM\...\Run: [Cmaudio8788GX] C:\Windows\syswow64\HsMgr.exe Envoke [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] C:\Windows\system\HsMgr64.exe Envoke [282112 2008-07-11] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [35760 2009-12-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [948672 2009-12-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DeathAdder] C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [311296 2009-12-15] ()
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [37232 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] [x]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [640376 2008-06-11] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe_ID0ENQBO] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [378224 2008-08-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252136 2011-05-04] (Sun Microsystems, Inc.)
HKU\flokke\...\Run: [AdobeBridge] [x]
HKU\flokke\...\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe" [x]
HKU\flokke\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] C:\Users\flokke\5515292.exe [45056 2013-06-10] (Adobe Systems Incorporated)
HKU\flokke\...\Winlogon: [Shell] cmd.exe [345088 2010-11-20] (Microsoft Corporation) <==== ATTENTION
HKU\flokke\...\Command Processor: "C:\Users\flokke\5515292.exe" <===== ATTENTION!
HKU\Mcx1-SLAVE6\...\Winlogon: [Shell] C:\Windows\eHome\McrMgr.exe [343552 2009-07-14] (Microsoft Corporation)
Startup: C:\Users\flokke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> (No File)
==================== Services (Whitelisted) =================
S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated)
S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75064 2010-10-27] ()
==================== Drivers (Whitelisted) ====================
S3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1266688 2010-09-16] (C-Media Inc)
S3 CYUSB; C:\Windows\System32\Drivers\CYUSB.sys [47104 2009-08-10] (Cypress Semiconductor)
S3 DAdderFltr; C:\Windows\System32\drivers\dadder.sys [12928 2009-12-16] (Razer (Asia-Pacific) Pte Ltd)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-02-03] (Duplex Secure Ltd.)
S3 cpuz130; \??\C:\Users\flokke\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x]
S3 StarOpen; No ImagePath
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-11 00:48 - 2013-06-11 00:48 - 00000000 ____D C:\FRST
2013-06-10 22:53 - 2013-06-10 22:53 - 00163050 ____A C:\Users\flokke\AppData\Roaming\2433f433
2013-06-10 22:53 - 2013-06-10 22:53 - 00162995 ____A C:\Users\flokke\AppData\Local\2433f433
2013-06-10 22:53 - 2013-06-10 22:53 - 00162995 ____A C:\ProgramData\2433f433
2013-06-10 22:53 - 2013-06-10 22:53 - 00045056 ____A (Adobe Systems Incorporated) C:\Users\flokke\5515292.exe
2013-06-10 20:04 - 2013-06-10 20:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-06 18:04 - 2013-06-07 22:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-05 16:55 - 2013-06-05 16:55 - 00000000 ____D C:\Users\flokke\Desktop\Datenbanken_VL-Neue_Dokumente
2013-06-04 12:11 - 2013-06-04 12:11 - 00000000 ____D C:\Users\flokke\Desktop\AmazingSQL
2013-05-29 20:45 - 2013-05-29 20:45 - 00000000 ____D C:\Poker
2013-05-29 19:23 - 2013-05-29 19:23 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-05-29 19:23 - 2013-05-29 19:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-29 19:23 - 2013-05-29 19:23 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-29 19:23 - 2013-05-29 19:23 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-29 19:23 - 2013-05-29 19:23 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-29 19:23 - 2013-05-29 19:23 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-29 19:23 - 2013-05-29 19:23 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-29 19:23 - 2013-05-29 19:23 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-29 19:23 - 2013-05-29 19:23 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-29 19:23 - 2013-05-29 19:23 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-29 19:23 - 2013-05-29 19:23 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-05-29 19:22 - 2013-05-29 19:22 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-29 19:20 - 2013-05-29 19:28 - 00010795 ____A C:\Windows\IE10_main.log
2013-05-29 19:07 - 2013-05-29 19:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-05-29 19:07 - 2013-05-29 19:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-05-29 14:22 - 2013-04-12 15:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-05-29 14:22 - 2013-04-10 07:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-29 14:22 - 2013-04-10 07:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-29 14:22 - 2013-02-27 07:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-29 14:22 - 2013-02-27 06:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-29 14:22 - 2013-02-27 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-29 14:22 - 2013-02-27 06:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-29 14:22 - 2013-02-27 06:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-29 14:22 - 2013-02-27 05:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-29 14:22 - 2013-02-27 05:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-29 14:22 - 2013-02-27 05:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-29 14:22 - 2013-02-15 07:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-05-29 14:22 - 2013-02-15 07:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-05-29 14:22 - 2013-02-15 07:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-05-29 14:22 - 2013-02-15 05:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-05-29 14:22 - 2013-02-15 05:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-05-29 14:22 - 2013-02-15 04:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-05-29 14:22 - 2011-02-03 12:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-29 14:21 - 2013-04-10 04:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-29 14:21 - 2013-03-19 07:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-05-29 14:21 - 2013-03-19 06:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-05-29 14:21 - 2013-03-19 06:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-05-29 14:21 - 2013-03-19 06:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-05-29 14:21 - 2013-03-19 05:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-05-29 14:21 - 2013-03-19 04:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-05-29 14:21 - 2013-02-12 05:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-05-29 14:21 - 2013-01-04 06:46 - 00215040 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-05-29 14:21 - 2013-01-04 05:51 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-05-29 14:21 - 2013-01-04 03:47 - 00025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-05-29 14:21 - 2013-01-04 03:47 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-05-29 14:21 - 2013-01-04 03:47 - 00007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-05-29 14:21 - 2013-01-04 03:47 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-05-29 14:21 - 2013-01-03 07:00 - 01913192 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-05-29 14:21 - 2013-01-03 07:00 - 00288088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
==================== One Month Modified Files and Folders =======
2013-06-11 00:48 - 2013-06-11 00:48 - 00000000 ____D C:\FRST
2013-06-10 23:02 - 2012-04-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-10 23:02 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-10 23:02 - 2009-07-14 05:51 - 00096939 ____A C:\Windows\setupact.log
2013-06-10 23:00 - 2010-02-01 14:57 - 01461175 ____A C:\Windows\WindowsUpdate.log
2013-06-10 22:53 - 2013-06-10 22:53 - 00163050 ____A C:\Users\flokke\AppData\Roaming\2433f433
2013-06-10 22:53 - 2013-06-10 22:53 - 00162995 ____A C:\Users\flokke\AppData\Local\2433f433
2013-06-10 22:53 - 2013-06-10 22:53 - 00162995 ____A C:\ProgramData\2433f433
2013-06-10 22:53 - 2013-06-10 22:53 - 00045056 ____A (Adobe Systems Incorporated) C:\Users\flokke\5515292.exe
2013-06-10 22:53 - 2010-02-01 14:57 - 00000000 ____D C:\users\flokke
2013-06-10 22:30 - 2012-01-24 18:35 - 00000000 ____D C:\Users\flokke\AppData\Roaming\Skype
2013-06-10 22:29 - 2010-02-01 15:29 - 00000000 ____D C:\Users\flokke\AppData\Roaming\foobar2000
2013-06-10 20:06 - 2009-07-14 05:45 - 00014752 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-10 20:06 - 2009-07-14 05:45 - 00014752 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-10 20:04 - 2013-06-10 20:04 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-10 20:04 - 2012-01-24 18:34 - 00000000 ____D C:\ProgramData\Skype
2013-06-10 20:03 - 2009-07-14 18:58 - 00696620 ____A C:\Windows\System32\perfh007.dat
2013-06-10 20:03 - 2009-07-14 18:58 - 00147916 ____A C:\Windows\System32\perfc007.dat
2013-06-10 20:03 - 2009-07-14 06:13 - 01612484 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-10 20:00 - 2011-04-09 14:06 - 00000000 ___RD C:\Users\flokke\Dropbox
2013-06-10 20:00 - 2011-04-09 14:04 - 00000000 ____D C:\Users\flokke\AppData\Roaming\Dropbox
2013-06-08 20:50 - 2010-03-04 14:12 - 00000000 ____D C:\Users\flokke\AppData\Roaming\Nettalk
2013-06-08 12:23 - 2013-01-25 18:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-08 12:23 - 2009-07-14 06:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-07 22:11 - 2013-06-06 18:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-06-05 16:55 - 2013-06-05 16:55 - 00000000 ____D C:\Users\flokke\Desktop\Datenbanken_VL-Neue_Dokumente
2013-06-04 12:11 - 2013-06-04 12:11 - 00000000 ____D C:\Users\flokke\Desktop\AmazingSQL
2013-05-31 00:11 - 2011-01-13 16:50 - 00000000 ____D C:\Users\flokke\Documents\StarCraft II
2013-05-30 23:52 - 2011-01-26 14:32 - 00000719 ____A C:\Users\Public\Desktop\StarCraft II.lnk
2013-05-30 23:39 - 2010-02-01 15:02 - 00000000 ____D C:\Program Files (x86)\Opera
2013-05-30 23:37 - 2010-02-01 16:05 - 00094184 ____A C:\Users\flokke\AppData\Local\GDIPFONTCACHEV1.DAT
2013-05-29 20:45 - 2013-05-29 20:45 - 00000000 ____D C:\Poker
2013-05-29 20:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-05-29 19:48 - 2009-07-14 05:45 - 02975136 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-29 19:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-05-29 19:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-05-29 19:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\zh-HK
2013-05-29 19:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\tr-TR
2013-05-29 19:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-05-29 19:31 - 2011-05-26 20:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-29 19:28 - 2013-05-29 19:20 - 00010795 ____A C:\Windows\IE10_main.log
2013-05-29 19:23 - 2013-05-29 19:23 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-05-29 19:23 - 2013-05-29 19:23 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-29 19:23 - 2013-05-29 19:23 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-29 19:23 - 2013-05-29 19:23 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-29 19:23 - 2013-05-29 19:23 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-29 19:23 - 2013-05-29 19:23 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-29 19:23 - 2013-05-29 19:23 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-29 19:23 - 2013-05-29 19:23 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-29 19:23 - 2013-05-29 19:23 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-29 19:23 - 2013-05-29 19:23 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-29 19:23 - 2013-05-29 19:23 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-29 19:23 - 2013-05-29 19:23 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-29 19:23 - 2013-05-29 19:23 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-05-29 19:22 - 2013-05-29 19:22 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-29 19:22 - 2013-05-29 19:22 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-29 19:18 - 2011-05-26 20:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-05-29 19:07 - 2013-05-29 19:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-05-29 19:07 - 2013-05-29 19:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-05-29 19:06 - 2010-04-11 21:40 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-05-29 19:05 - 2012-04-23 13:04 - 00000000 ____D C:\Program Files\NVIDIA Corporation
Files to move or delete:
====================
C:\Users\flokke\5515292.exe
C:\ProgramData\install.dat
==================== Known DLLs (Whitelisted) ================
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== EXE ASSOCIATION =====================
HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK
==================== Restore Points =========================
==================== Memory info ===========================
Percentage of memory in use: 15%
Total physical RAM: 4094.49 MB
Available physical RAM: 3465.83 MB
Total Pagefile: 4092.64 MB
Available Pagefile: 3461.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:75 GB) (Free:3.59 GB) NTFS (Disk=0 Partition=1) ==>[Drive with boot components (obtained from BCD)]
Drive d: (Media) (Fixed) (Total:200 GB) (Free:38.09 GB) NTFS (Disk=0 Partition=2)
Drive e: (Daten) (Fixed) (Total:100 GB) (Free:35.31 GB) NTFS (Disk=0 Partition=3)
Drive g: () (Removable) (Total:3.76 GB) (Free:3.43 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 2EBE2EBE)
Partition 1: (Active) - (Size=75 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=391 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 2C6B7369)
Partition 1: (Not Active) - (Size=883 GB) - (Type=68)
Partition 2: (Not Active) - (Size=257 GB) - (Type=79)
Partition 3: (Not Active) - (Size=667 GB) - (Type=53)
Partition 4: (Not Active) - (Size=10 MB) - (Type=49)
LastRegBack: 2013-06-04 13:19
==================== End Of Log ============================
Geändert von heath (11.06.2013 um 00:39 Uhr) |
| Themen zu Bundespolizei Trojaner WIN7 64bit mit FRST Log |
| acrobat, adobe, association, desktop, dll, explorer, explorer.exe, farbar, farbar recovery scan tool, free, frst log, frst.txt, log, logfile, microsoft, mozilla, registry, rundll, rundll32.exe, scan, secure, server, services.exe, svchost.exe, system, system32, temp, trojaner, win7 64bit, winlogon, winlogon.exe |
Baum-Darstellung