|
Plagegeister aller Art und deren Bekämpfung: ominöses DOS ProgrammWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
29.06.2013, 14:47 | #16 | |
/// the machine /// TB-Ausbilder | ominöses DOS Programm LyricsFinder deinstallieren. Zitat:
Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. und noch den Rest von obiger Anleitung
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
29.06.2013, 14:47 | #17 |
| ominöses DOS Programm ähmmm...wenn ich sechuritycheck ausführen will kommt das:
__________________Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED! |
29.06.2013, 15:07 | #18 |
/// the machine /// TB-Ausbilder | ominöses DOS Programm Securitycheck weg lassen. Welche exe?
__________________
__________________ |
29.06.2013, 15:11 | #19 |
| ominöses DOS Programm ok...habs hinbekommen...blöd wenn man blöd ist... freigabe war gesperrt ok dann las ich SC weg und mach das nächste Was meinst du mit lyrics Finder löschen? hier die FRST log: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-06-2013 01 Ran by tinamaus (administrator) on 29-06-2013 16:28:24 Running from C:\Users\tinamaus\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [446392 2012-04-04] (Adobe Systems Incorporated) HKCU\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18705664 2013-01-08] (Skype Technologies S.A.) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 HKLM-x32\...\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2011-05-25] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [341360 2011-09-20] (Egis Technology Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-11-28] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [151952 2012-11-29] (Apple Inc.) HKU\Default\...\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [154144 2010-07-29] () HKU\Default User\...\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [154144 2010-07-29] () Startup: C:\ProgramData\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\Users\tinamaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\tinamaus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\tinamaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 10.74.210.210 10.74.210.211 Tcpip\..\Interfaces\{0B44FE12-ED72-465A-9D24-042393202C71}: [NameServer]10.74.210.210 10.74.210.211 Tcpip\..\Interfaces\{0B5B798A-2325-4082-9B6A-ECF6C8816202}: [NameServer] Tcpip\..\Interfaces\{B0AEB63A-0F27-4AB8-A0EA-F21149054941}: [NameServer] FireFox: ======== FF ProfilePath: C:\Users\tinamaus\AppData\Roaming\Mozilla\Firefox\Profiles\8ufo3dgu.default FF SelectedSearchEngine: Google FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Users\tinamaus\AppData\Roaming\Mozilla\Firefox\Profiles\8ufo3dgu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor Chrome: ======= CHR Extension: (Google Docs) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Gmail) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] () R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [x] ==================== Drivers (Whitelisted) ==================== S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-06-29 16:27 - 2013-06-29 16:27 - 01933592 ____A (Farbar) C:\Users\tinamaus\Desktop\FRST64.exe 2013-06-29 16:22 - 2013-06-29 16:22 - 00448512 ____A (OldTimer Tools) C:\Users\tinamaus\Desktop\TFC.exe 2013-06-29 15:44 - 2013-06-29 15:44 - 00890988 ____A C:\Users\tinamaus\Downloads\SecurityCheck(1).exe 2013-06-29 15:39 - 2013-06-29 15:39 - 00000868 ____A C:\Users\tinamaus\Desktop\eset.txt 2013-06-29 12:00 - 2013-06-29 12:00 - 02347384 ____A (ESET) C:\Users\tinamaus\Downloads\esetsmartinstaller_enu.exe 2013-06-29 12:00 - 2013-06-29 12:00 - 00890988 ____A C:\Users\tinamaus\Desktop\SecurityCheck.exe 2013-06-29 11:57 - 2013-06-29 11:57 - 00001253 ____A C:\Users\tinamaus\Desktop\JRT.txt 2013-06-29 11:45 - 2013-06-29 11:45 - 00000000 ____D C:\Windows\ERUNT 2013-06-29 11:44 - 2013-06-29 11:45 - 00000000 ____D C:\JRT 2013-06-29 11:31 - 2013-06-29 11:31 - 00003048 ____A C:\AdwCleaner[S1].txt 2013-06-29 11:22 - 2013-06-29 11:22 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\tinamaus\Downloads\JRT.exe 2013-06-29 11:21 - 2013-06-29 11:22 - 00648201 ____A C:\Users\tinamaus\Downloads\adwcleaner.exe 2013-06-29 11:18 - 2013-06-29 11:35 - 00000418 ____A C:\Windows\Tasks\Lyrics Finder Update.job 2013-06-29 11:18 - 2013-06-29 11:18 - 00000000 ____D C:\Program Files (x86)\LyricsFinder 2013-06-27 22:09 - 2013-06-27 22:09 - 00025172 ____A C:\ComboFix.txt 2013-06-27 21:41 - 2013-06-27 21:41 - 05084314 ____R (Swearware) C:\Users\tinamaus\Desktop\ComboFix.exe 2013-06-27 21:40 - 2013-06-27 21:41 - 05084314 ____A (Swearware) C:\Users\tinamaus\Downloads\ComboFix.exe 2013-06-27 17:41 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe 2013-06-27 17:41 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe 2013-06-27 17:41 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe 2013-06-27 17:40 - 2013-06-27 22:09 - 00000000 ____D C:\Qoobox 2013-06-27 17:40 - 2013-06-27 17:58 - 00000000 ____D C:\Windows\erdnt 2013-06-27 15:15 - 2013-06-27 15:15 - 00000000 ____D C:\FRST 2013-06-27 14:52 - 2010-11-12 08:23 - 00252712 ____A (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll 2013-06-27 14:32 - 2013-06-27 14:33 - 20896392 ____A (Microsoft Corporation) C:\Users\tinamaus\Downloads\Windows-KB890830-x64-V5.1.exe 2013-06-17 18:21 - 2013-06-17 18:21 - 09089416 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-06-13 11:58 - 2013-04-05 08:52 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-13 11:58 - 2013-04-05 08:52 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-13 11:58 - 2013-04-05 08:52 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-13 11:58 - 2013-04-05 08:50 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-13 11:58 - 2013-04-05 07:28 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-13 11:58 - 2013-04-05 07:28 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-13 11:58 - 2013-04-05 06:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-13 11:58 - 2013-04-05 06:29 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-13 11:58 - 2013-04-05 05:51 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-13 11:58 - 2013-04-05 05:38 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-13 11:57 - 2013-04-05 08:50 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-13 11:57 - 2013-04-05 08:50 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-13 11:57 - 2013-04-05 07:26 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-13 11:27 - 2013-06-13 11:50 - 00000000 ____D C:\Users\tinamaus\Desktop\fuers album 2013-06-08 20:37 - 2013-06-10 21:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-06-06 21:02 - 2013-06-06 21:02 - 00000000 ____D C:\Users\tinamaus\Desktop\Bilder für die Füchse 2013-06-06 20:52 - 2013-06-06 20:52 - 00035207 ____A C:\Users\tinamaus\Desktop\Urkunde.odt 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2013-06-06 11:19 - 2013-06-06 11:19 - 00001209 ____A C:\Users\Public\Desktop\Internet Manager.lnk 2013-06-06 11:18 - 2013-06-06 11:19 - 00000000 ____D C:\ProgramData\Internet Manager 2013-06-06 11:18 - 2013-06-06 11:18 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2013-06-06 11:18 - 2012-04-26 05:04 - 00450048 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbwwan.sys 2013-06-06 11:18 - 2012-04-23 03:58 - 00238080 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juwwanecm.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00104448 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcacm.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00090112 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jubusenum.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00076800 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcecm.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00030720 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juextctrl.sys 2013-06-06 11:18 - 2011-12-31 03:20 - 00225920 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbmdm.sys 2013-06-06 11:18 - 2011-08-16 10:40 - 01490656 ____A (Microsoft Corporation) C:\Windows\System32\WdfCoInstaller01007.dll 2013-06-06 11:18 - 2011-08-16 10:40 - 01490656 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WdfCoInstaller01007.dll 2013-06-06 11:18 - 2010-10-08 10:59 - 00032768 ____A (Huawei Tech. Co., Ltd.) C:\Windows\System32\Drivers\ewdcsc.sys 2013-06-06 11:18 - 2010-09-26 12:09 - 00022016 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwupgrade.sys 2013-06-06 11:18 - 2010-08-06 01:43 - 01001472 ____A (DiBcom SA) C:\Windows\System32\Drivers\mod7700.sys 2013-06-06 11:18 - 2010-07-27 03:52 - 00117248 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwusbdev.sys 2013-06-06 11:18 - 2010-03-20 06:06 - 00013952 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_usbenumfilter.sys 2013-06-06 11:16 - 2013-06-06 11:19 - 00000000 ____D C:\ProgramData\DatacardService 2013-06-06 11:16 - 2013-06-06 11:16 - 00000000 ____D C:\Program Files (x86)\T-Mobile 2013-06-05 11:17 - 2013-06-05 11:17 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-06-05 10:54 - 2013-06-05 10:54 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-05 10:48 - 2013-06-05 11:32 - 00011403 ____A C:\Windows\IE10_main.log 2013-06-02 20:53 - 2013-06-29 16:21 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-05-30 15:14 - 2013-05-30 15:14 - 00000000 ____D C:\f0b88792f4b5a72112 ==================== One Month Modified Files and Folders ======= 2013-06-29 16:27 - 2013-06-29 16:27 - 01933592 ____A (Farbar) C:\Users\tinamaus\Desktop\FRST64.exe 2013-06-29 16:22 - 2013-06-29 16:22 - 00448512 ____A (OldTimer Tools) C:\Users\tinamaus\Desktop\TFC.exe 2013-06-29 16:21 - 2013-06-02 20:53 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-06-29 16:09 - 2009-07-14 06:45 - 00016752 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-06-29 16:09 - 2009-07-14 06:45 - 00016752 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-06-29 16:06 - 2013-04-20 18:12 - 00001114 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-06-29 15:44 - 2013-06-29 15:44 - 00890988 ____A C:\Users\tinamaus\Downloads\SecurityCheck(1).exe 2013-06-29 15:39 - 2013-06-29 15:39 - 00000868 ____A C:\Users\tinamaus\Desktop\eset.txt 2013-06-29 14:06 - 2013-04-20 18:12 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-06-29 13:08 - 2012-02-10 09:35 - 01894712 ____A C:\Windows\WindowsUpdate.log 2013-06-29 12:00 - 2013-06-29 12:00 - 02347384 ____A (ESET) C:\Users\tinamaus\Downloads\esetsmartinstaller_enu.exe 2013-06-29 12:00 - 2013-06-29 12:00 - 00890988 ____A C:\Users\tinamaus\Desktop\SecurityCheck.exe 2013-06-29 11:57 - 2013-06-29 11:57 - 00001253 ____A C:\Users\tinamaus\Desktop\JRT.txt 2013-06-29 11:45 - 2013-06-29 11:45 - 00000000 ____D C:\Windows\ERUNT 2013-06-29 11:45 - 2013-06-29 11:44 - 00000000 ____D C:\JRT 2013-06-29 11:38 - 2012-10-14 18:06 - 00000000 ____D C:\Users\tinamaus\AppData\Roaming\Skype 2013-06-29 11:38 - 2012-02-10 18:22 - 00654802 ____A C:\Windows\System32\perfh007.dat 2013-06-29 11:38 - 2012-02-10 18:22 - 00130384 ____A C:\Windows\System32\perfc007.dat 2013-06-29 11:38 - 2009-07-14 07:13 - 01500074 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-29 11:35 - 2013-06-29 11:18 - 00000418 ____A C:\Windows\Tasks\Lyrics Finder Update.job 2013-06-29 11:35 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-06-29 11:34 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-29 11:33 - 2012-11-19 11:21 - 00000000 ____D C:\Users\tinamaus\AppData\Roaming\Dropbox 2013-06-29 11:33 - 2010-11-21 05:47 - 00025924 ____A C:\Windows\PFRO.log 2013-06-29 11:33 - 2009-07-14 06:51 - 00076146 ____A C:\Windows\setupact.log 2013-06-29 11:31 - 2013-06-29 11:31 - 00003048 ____A C:\AdwCleaner[S1].txt 2013-06-29 11:22 - 2013-06-29 11:22 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\tinamaus\Downloads\JRT.exe 2013-06-29 11:22 - 2013-06-29 11:21 - 00648201 ____A C:\Users\tinamaus\Downloads\adwcleaner.exe 2013-06-29 11:18 - 2013-06-29 11:18 - 00000000 ____D C:\Program Files (x86)\LyricsFinder 2013-06-29 11:13 - 2012-10-14 14:13 - 00000000 ____D C:\Users\tinamaus\AppData\Local\Adobe 2013-06-27 22:09 - 2013-06-27 22:09 - 00025172 ____A C:\ComboFix.txt 2013-06-27 22:09 - 2013-06-27 17:40 - 00000000 ____D C:\Qoobox 2013-06-27 22:04 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini 2013-06-27 21:41 - 2013-06-27 21:41 - 05084314 ____R (Swearware) C:\Users\tinamaus\Desktop\ComboFix.exe 2013-06-27 21:41 - 2013-06-27 21:40 - 05084314 ____A (Swearware) C:\Users\tinamaus\Downloads\ComboFix.exe 2013-06-27 18:02 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default 2013-06-27 17:58 - 2013-06-27 17:40 - 00000000 ____D C:\Windows\erdnt 2013-06-27 15:15 - 2013-06-27 15:15 - 00000000 ____D C:\FRST 2013-06-27 14:33 - 2013-06-27 14:32 - 20896392 ____A (Microsoft Corporation) C:\Users\tinamaus\Downloads\Windows-KB890830-x64-V5.1.exe 2013-06-27 14:02 - 2012-11-19 11:24 - 00000000 ___RD C:\Users\tinamaus\Dropbox 2013-06-27 14:01 - 2012-11-21 11:32 - 00000000 ____D C:\Users\tinamaus\Tracing 2013-06-17 18:22 - 2012-10-13 21:47 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-17 18:22 - 2011-10-19 19:05 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-17 18:21 - 2013-06-17 18:21 - 09089416 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-06-13 11:50 - 2013-06-13 11:27 - 00000000 ____D C:\Users\tinamaus\Desktop\fuers album 2013-06-11 08:05 - 2012-12-10 10:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-06-10 21:46 - 2013-06-08 20:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-06-10 21:37 - 2012-11-21 10:41 - 00000000 ____D C:\Users\tinamaus\AppData\Local\Windows Live 2013-06-06 22:17 - 2013-04-20 18:12 - 00000000 ____D C:\Program Files (x86)\Google 2013-06-06 21:34 - 2012-11-05 21:47 - 00000000 ____D C:\Users\tinamaus\AppData\Roaming\SoftGrid Client 2013-06-06 21:02 - 2013-06-06 21:02 - 00000000 ____D C:\Users\tinamaus\Desktop\Bilder für die Füchse 2013-06-06 20:52 - 2013-06-06 20:52 - 00035207 ____A C:\Users\tinamaus\Desktop\Urkunde.odt 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2013-06-06 11:19 - 2013-06-06 11:19 - 00001209 ____A C:\Users\Public\Desktop\Internet Manager.lnk 2013-06-06 11:19 - 2013-06-06 11:18 - 00000000 ____D C:\ProgramData\Internet Manager 2013-06-06 11:19 - 2013-06-06 11:16 - 00000000 ____D C:\ProgramData\DatacardService 2013-06-06 11:18 - 2013-06-06 11:18 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2013-06-06 11:16 - 2013-06-06 11:16 - 00000000 ____D C:\Program Files (x86)\T-Mobile 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-06-05 11:32 - 2013-06-05 10:48 - 00011403 ____A C:\Windows\IE10_main.log 2013-06-05 11:17 - 2013-06-05 11:17 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-06-05 10:54 - 2013-06-05 10:54 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-03 18:16 - 2012-10-14 11:43 - 75898224 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-01 17:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF 2013-06-01 17:11 - 2009-07-14 06:45 - 04917912 ____A C:\Windows\System32\FNTCACHE.DAT 2013-05-30 15:14 - 2013-05-30 15:14 - 00000000 ____D C:\f0b88792f4b5a72112 ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-06-07 21:53 ==================== End Of Log ============================ --- --- --- Geändert von medic911 (29.06.2013 um 15:24 Uhr) |
29.06.2013, 18:02 | #20 |
/// the machine /// TB-Ausbilder | ominöses DOS Programm Schau mal bitte bei installierte Programme, findest Du da Lyrics Finder? Wenn ja deinstallieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
29.06.2013, 18:39 | #21 |
| ominöses DOS Programm Gefunden und gelöscht Was meinst...is der rotz jetzt weg? |
29.06.2013, 19:18 | #22 |
/// the machine /// TB-Ausbilder | ominöses DOS Programm Poste mal ein frisches FRST
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
29.06.2013, 19:21 | #23 |
| ominöses DOS Programm Kommt sofort |
29.06.2013, 19:22 | #24 |
/// the machine /// TB-Ausbilder | ominöses DOS Programm jup
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
29.06.2013, 20:01 | #25 |
| ominöses DOS Programm und da is es FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-06-2013 01 Ran by tinamaus (administrator) on 29-06-2013 20:20:39 Running from C:\Users\tinamaus\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [446392 2012-04-04] (Adobe Systems Incorporated) HKCU\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [18705664 2013-01-08] (Skype Technologies S.A.) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKLM-x32\...\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [336384 2011-05-25] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [341360 2011-09-20] (Egis Technology Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-11-28] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [151952 2012-11-29] (Apple Inc.) HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [356968 2012-12-20] (Kaspersky Lab ZAO) HKU\Default\...\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [154144 2010-07-29] () HKU\Default User\...\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [154144 2010-07-29] () Startup: C:\ProgramData\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\Users\tinamaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\tinamaus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\tinamaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\..\Interfaces\{0B44FE12-ED72-465A-9D24-042393202C71}: [NameServer]10.74.210.210 10.74.210.211 Tcpip\..\Interfaces\{0B5B798A-2325-4082-9B6A-ECF6C8816202}: [NameServer] Tcpip\..\Interfaces\{B0AEB63A-0F27-4AB8-A0EA-F21149054941}: [NameServer] FireFox: ======== FF ProfilePath: C:\Users\tinamaus\AppData\Roaming\Mozilla\Firefox\Profiles\8ufo3dgu.default FF SelectedSearchEngine: Google FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: No Name - C:\Users\tinamaus\AppData\Roaming\Mozilla\Firefox\Profiles\8ufo3dgu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: <?xml version="1.0" encoding="UTF-8"?> <RDF xmlns="hxxp://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="hxxp://www.mozilla.org/2004/em-rdf#"> <Description about="urn:mozilla:install-manifest"> <em:localized> <Description> <em:locale>en</em:locale> <em:name>Content Blocker</em:name> <em:creator>Kaspersky Lab</em:creator> <em:homepageURL>hxxp://www.kaspersky.com</em:homepageURL> </Description> </em:localized> <em:id>content_blocker@kaspersky.com</em:id> <em:version>13.0.2.558</em:version> <em:iconURL>chrome://content_blocker/skin/content_blocker_extension_icon.png</em:iconURL> <em:targetApplication> <Description> <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id> <em:minVersion>9.0</em:minVersion> <em:maxVersion>18.*</em:maxVersion> </Description> </em:targetApplication> </Description> </RDF> - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com Chrome: ======= CHR Extension: (Google Docs) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Gmail) - C:\Users\tinamaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] () R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [x] ==================== Drivers (Whitelisted) ==================== R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2012-11-02] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2012-10-18] (Kaspersky Lab) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178008 2012-08-13] (Kaspersky Lab) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-06-29 18:21 - 2013-06-29 18:21 - 00000000 ____A C:\Windows\SysWOW64\shoF3B8.tmp 2013-06-29 17:44 - 2013-06-29 17:44 - 00000000 ___SD C:\ComboFix 2013-06-29 17:37 - 2013-06-29 17:37 - 00002184 ____A C:\Users\tinamaus\Desktop\Sicherer Zahlungsverkehr.lnk 2013-06-29 17:36 - 2013-06-29 20:20 - 00000000 ____D C:\Users\tinamaus\Desktop\secure 2013-06-29 17:34 - 2013-06-29 17:33 - 00001042 ____A C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk 2013-06-29 17:33 - 2012-07-11 17:09 - 00064856 ____A (Kaspersky Lab) C:\Windows\System32\klfphc.dll 2013-06-29 17:32 - 2011-06-02 14:39 - 00084536 ____A (Infowatch) C:\Windows\System32\Drivers\CSCrySec.sys 2013-06-29 17:32 - 2011-06-02 14:39 - 00066616 ____A (Infowatch) C:\Windows\System32\Drivers\CSVirtualDiskDrv.sys 2013-06-29 17:31 - 2013-06-29 18:24 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-06-29 17:31 - 2013-06-29 17:31 - 00000000 ____D C:\Windows\ELAMBKUP 2013-06-29 17:31 - 2013-06-29 17:31 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-06-29 17:30 - 2012-11-02 15:48 - 00613720 ____A (Kaspersky Lab) C:\Windows\System32\Drivers\klif.sys 2013-06-29 17:30 - 2012-11-02 15:48 - 00089944 ____A (Kaspersky Lab) C:\Windows\System32\Drivers\klflt.sys 2013-06-29 17:14 - 2013-06-29 17:23 - 188740896 ____A (Kaspersky Lab) C:\Users\tinamaus\Downloads\pure13.0.2.558DE_4340.exe 2013-06-29 16:27 - 2013-06-29 16:27 - 01933592 ____A (Farbar) C:\Users\tinamaus\Desktop\FRST64.exe 2013-06-29 15:44 - 2013-06-29 15:44 - 00890988 ____A C:\Users\tinamaus\Downloads\SecurityCheck(1).exe 2013-06-29 12:00 - 2013-06-29 12:00 - 02347384 ____A (ESET) C:\Users\tinamaus\Downloads\esetsmartinstaller_enu.exe 2013-06-29 11:45 - 2013-06-29 11:45 - 00000000 ____D C:\Windows\ERUNT 2013-06-29 11:44 - 2013-06-29 11:45 - 00000000 ____D C:\JRT 2013-06-29 11:31 - 2013-06-29 11:31 - 00003048 ____A C:\AdwCleaner[S1].txt 2013-06-29 11:22 - 2013-06-29 11:22 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\tinamaus\Downloads\JRT.exe 2013-06-29 11:21 - 2013-06-29 11:22 - 00648201 ____A C:\Users\tinamaus\Downloads\adwcleaner.exe 2013-06-29 11:18 - 2013-06-29 19:40 - 00000000 ____D C:\Program Files (x86)\LyricsFinder 2013-06-27 22:09 - 2013-06-27 22:09 - 00025172 ____A C:\ComboFix.txt 2013-06-27 21:40 - 2013-06-27 21:41 - 05084314 ____A (Swearware) C:\Users\tinamaus\Downloads\ComboFix.exe 2013-06-27 17:41 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe 2013-06-27 17:41 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe 2013-06-27 17:41 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe 2013-06-27 17:41 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe 2013-06-27 17:40 - 2013-06-29 17:44 - 00000000 ____D C:\Windows\erdnt 2013-06-27 15:15 - 2013-06-27 15:15 - 00000000 ____D C:\FRST 2013-06-27 14:52 - 2010-11-12 08:23 - 00252712 ____A (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll 2013-06-27 14:32 - 2013-06-27 14:33 - 20896392 ____A (Microsoft Corporation) C:\Users\tinamaus\Downloads\Windows-KB890830-x64-V5.1.exe 2013-06-17 18:21 - 2013-06-17 18:21 - 09089416 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-06-13 11:58 - 2013-04-05 08:52 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-13 11:58 - 2013-04-05 08:52 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-13 11:58 - 2013-04-05 08:52 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-13 11:58 - 2013-04-05 08:50 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-13 11:58 - 2013-04-05 08:50 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-13 11:58 - 2013-04-05 07:28 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-13 11:58 - 2013-04-05 07:28 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-13 11:58 - 2013-04-05 07:26 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-13 11:58 - 2013-04-05 06:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-13 11:58 - 2013-04-05 06:29 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-13 11:58 - 2013-04-05 05:51 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-13 11:58 - 2013-04-05 05:38 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-13 11:57 - 2013-04-05 08:50 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-13 11:57 - 2013-04-05 08:50 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-13 11:57 - 2013-04-05 07:26 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-13 11:27 - 2013-06-13 11:50 - 00000000 ____D C:\Users\tinamaus\Desktop\fuers album 2013-06-08 20:37 - 2013-06-10 21:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-06-06 21:02 - 2013-06-06 21:02 - 00000000 ____D C:\Users\tinamaus\Desktop\Bilder für die Füchse 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2013-06-06 11:19 - 2013-06-06 11:19 - 00001209 ____A C:\Users\Public\Desktop\Internet Manager.lnk 2013-06-06 11:18 - 2013-06-06 11:19 - 00000000 ____D C:\ProgramData\Internet Manager 2013-06-06 11:18 - 2013-06-06 11:18 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2013-06-06 11:18 - 2012-04-26 05:04 - 00450048 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbwwan.sys 2013-06-06 11:18 - 2012-04-23 03:58 - 00238080 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juwwanecm.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00104448 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcacm.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00090112 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jubusenum.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00076800 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcecm.sys 2013-06-06 11:18 - 2012-04-23 03:57 - 00030720 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juextctrl.sys 2013-06-06 11:18 - 2011-12-31 03:20 - 00225920 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbmdm.sys 2013-06-06 11:18 - 2011-08-16 10:40 - 01490656 ____A (Microsoft Corporation) C:\Windows\System32\WdfCoInstaller01007.dll 2013-06-06 11:18 - 2011-08-16 10:40 - 01490656 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WdfCoInstaller01007.dll 2013-06-06 11:18 - 2010-10-08 10:59 - 00032768 ____A (Huawei Tech. Co., Ltd.) C:\Windows\System32\Drivers\ewdcsc.sys 2013-06-06 11:18 - 2010-09-26 12:09 - 00022016 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwupgrade.sys 2013-06-06 11:18 - 2010-08-06 01:43 - 01001472 ____A (DiBcom SA) C:\Windows\System32\Drivers\mod7700.sys 2013-06-06 11:18 - 2010-07-27 03:52 - 00117248 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwusbdev.sys 2013-06-06 11:18 - 2010-03-20 06:06 - 00013952 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_usbenumfilter.sys 2013-06-06 11:16 - 2013-06-06 11:19 - 00000000 ____D C:\ProgramData\DatacardService 2013-06-06 11:16 - 2013-06-06 11:16 - 00000000 ____D C:\Program Files (x86)\T-Mobile 2013-06-05 11:17 - 2013-06-05 11:17 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-06-05 10:54 - 2013-06-05 10:54 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-05 10:48 - 2013-06-05 11:32 - 00011403 ____A C:\Windows\IE10_main.log 2013-06-02 20:53 - 2013-06-29 20:21 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-05-30 15:14 - 2013-05-30 15:14 - 00000000 ____D C:\f0b88792f4b5a72112 ==================== One Month Modified Files and Folders ======= 2013-06-29 20:21 - 2013-06-02 20:53 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-06-29 20:20 - 2013-06-29 17:36 - 00000000 ____D C:\Users\tinamaus\Desktop\secure 2013-06-29 20:06 - 2013-04-20 18:12 - 00001114 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-06-29 19:40 - 2013-06-29 11:18 - 00000000 ____D C:\Program Files (x86)\LyricsFinder 2013-06-29 18:32 - 2009-07-14 06:45 - 00016752 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-06-29 18:32 - 2009-07-14 06:45 - 00016752 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-06-29 18:30 - 2012-10-14 18:06 - 00000000 ____D C:\Users\tinamaus\AppData\Roaming\Skype 2013-06-29 18:30 - 2012-02-10 18:22 - 00654802 ____A C:\Windows\System32\perfh007.dat 2013-06-29 18:30 - 2012-02-10 18:22 - 00130384 ____A C:\Windows\System32\perfc007.dat 2013-06-29 18:30 - 2009-07-14 07:13 - 01500074 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-29 18:29 - 2012-02-10 09:35 - 01905969 ____A C:\Windows\WindowsUpdate.log 2013-06-29 18:24 - 2013-06-29 17:31 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-06-29 18:22 - 2013-04-20 18:12 - 00001110 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-06-29 18:22 - 2012-11-19 11:21 - 00000000 ____D C:\Users\tinamaus\AppData\Roaming\Dropbox 2013-06-29 18:22 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-06-29 18:22 - 2009-07-14 06:51 - 00076202 ____A C:\Windows\setupact.log 2013-06-29 18:21 - 2013-06-29 18:21 - 00000000 ____A C:\Windows\SysWOW64\shoF3B8.tmp 2013-06-29 18:21 - 2010-11-21 05:47 - 00026758 ____A C:\Windows\PFRO.log 2013-06-29 17:44 - 2013-06-29 17:44 - 00000000 ___SD C:\ComboFix 2013-06-29 17:44 - 2013-06-27 17:40 - 00000000 ____D C:\Windows\erdnt 2013-06-29 17:37 - 2013-06-29 17:37 - 00002184 ____A C:\Users\tinamaus\Desktop\Sicherer Zahlungsverkehr.lnk 2013-06-29 17:33 - 2013-06-29 17:34 - 00001042 ____A C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk 2013-06-29 17:31 - 2013-06-29 17:31 - 00000000 ____D C:\Windows\ELAMBKUP 2013-06-29 17:31 - 2013-06-29 17:31 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-06-29 17:29 - 2013-04-18 19:31 - 00000000 ____D C:\Users\tinamaus\Desktop\Fußball 2013-06-29 17:23 - 2013-06-29 17:14 - 188740896 ____A (Kaspersky Lab) C:\Users\tinamaus\Downloads\pure13.0.2.558DE_4340.exe 2013-06-29 16:27 - 2013-06-29 16:27 - 01933592 ____A (Farbar) C:\Users\tinamaus\Desktop\FRST64.exe 2013-06-29 15:44 - 2013-06-29 15:44 - 00890988 ____A C:\Users\tinamaus\Downloads\SecurityCheck(1).exe 2013-06-29 12:00 - 2013-06-29 12:00 - 02347384 ____A (ESET) C:\Users\tinamaus\Downloads\esetsmartinstaller_enu.exe 2013-06-29 11:45 - 2013-06-29 11:45 - 00000000 ____D C:\Windows\ERUNT 2013-06-29 11:45 - 2013-06-29 11:44 - 00000000 ____D C:\JRT 2013-06-29 11:34 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-29 11:31 - 2013-06-29 11:31 - 00003048 ____A C:\AdwCleaner[S1].txt 2013-06-29 11:22 - 2013-06-29 11:22 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\tinamaus\Downloads\JRT.exe 2013-06-29 11:22 - 2013-06-29 11:21 - 00648201 ____A C:\Users\tinamaus\Downloads\adwcleaner.exe 2013-06-29 11:13 - 2012-10-14 14:13 - 00000000 ____D C:\Users\tinamaus\AppData\Local\Adobe 2013-06-27 22:09 - 2013-06-27 22:09 - 00025172 ____A C:\ComboFix.txt 2013-06-27 22:04 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini 2013-06-27 21:41 - 2013-06-27 21:40 - 05084314 ____A (Swearware) C:\Users\tinamaus\Downloads\ComboFix.exe 2013-06-27 18:02 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default 2013-06-27 15:15 - 2013-06-27 15:15 - 00000000 ____D C:\FRST 2013-06-27 14:33 - 2013-06-27 14:32 - 20896392 ____A (Microsoft Corporation) C:\Users\tinamaus\Downloads\Windows-KB890830-x64-V5.1.exe 2013-06-27 14:02 - 2012-11-19 11:24 - 00000000 ___RD C:\Users\tinamaus\Dropbox 2013-06-27 14:01 - 2012-11-21 11:32 - 00000000 ____D C:\Users\tinamaus\Tracing 2013-06-17 18:22 - 2012-10-13 21:47 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-17 18:22 - 2011-10-19 19:05 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-17 18:21 - 2013-06-17 18:21 - 09089416 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-06-13 11:50 - 2013-06-13 11:27 - 00000000 ____D C:\Users\tinamaus\Desktop\fuers album 2013-06-11 08:05 - 2012-12-10 10:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-06-10 21:46 - 2013-06-08 20:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-06-10 21:37 - 2012-11-21 10:41 - 00000000 ____D C:\Users\tinamaus\AppData\Local\Windows Live 2013-06-06 22:17 - 2013-04-20 18:12 - 00000000 ____D C:\Program Files (x86)\Google 2013-06-06 21:34 - 2012-11-05 21:47 - 00000000 ____D C:\Users\tinamaus\AppData\Roaming\SoftGrid Client 2013-06-06 21:02 - 2013-06-06 21:02 - 00000000 ____D C:\Users\tinamaus\Desktop\Bilder für die Füchse 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf 2013-06-06 11:20 - 2013-06-06 11:20 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf 2013-06-06 11:19 - 2013-06-06 11:19 - 00001209 ____A C:\Users\Public\Desktop\Internet Manager.lnk 2013-06-06 11:19 - 2013-06-06 11:18 - 00000000 ____D C:\ProgramData\Internet Manager 2013-06-06 11:19 - 2013-06-06 11:16 - 00000000 ____D C:\ProgramData\DatacardService 2013-06-06 11:18 - 2013-06-06 11:18 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2013-06-06 11:16 - 2013-06-06 11:16 - 00000000 ____D C:\Program Files (x86)\T-Mobile 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\zh-HK 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\tr-TR 2013-06-06 11:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-06-05 11:32 - 2013-06-05 10:48 - 00011403 ____A C:\Windows\IE10_main.log 2013-06-05 11:17 - 2013-06-05 11:17 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat 2013-06-05 11:17 - 2013-06-05 11:17 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-06-05 11:17 - 2013-06-05 11:17 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-06-05 11:17 - 2013-06-05 11:17 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-06-05 11:17 - 2013-06-05 11:17 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe 2013-06-05 11:17 - 2013-06-05 11:17 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-06-05 10:54 - 2013-06-05 10:54 - 03928064 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 03419136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02776576 ____A (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02565120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 02284544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01988096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01682432 ____A (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01643520 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01504768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01247744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01238528 ____A (Microsoft Corporation) C:\Windows\System32\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01175552 ____A (Microsoft Corporation) C:\Windows\System32\FntCache.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01158144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 01080832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00648192 ____A (Microsoft Corporation) C:\Windows\System32\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00604160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00522752 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00465920 ____A (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00417792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00363008 ____A (Microsoft Corporation) C:\Windows\System32\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00333312 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00296960 ____A (Microsoft Corporation) C:\Windows\System32\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00293376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00249856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00245248 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00221184 ____A (Microsoft Corporation) C:\Windows\System32\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00207872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00194560 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00187392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00010752 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00009728 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00005632 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-05 10:54 - 2013-06-05 10:54 - 00002560 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-06-03 18:16 - 2012-10-14 11:43 - 75898224 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-01 17:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF 2013-06-01 17:11 - 2009-07-14 06:45 - 04917912 ____A C:\Windows\System32\FNTCACHE.DAT 2013-05-30 15:14 - 2013-05-30 15:14 - 00000000 ____D C:\f0b88792f4b5a72112 ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-06-29 17:11 ==================== End Of Log ============================ |
29.06.2013, 20:05 | #26 |
| ominöses DOS Programm doppelpost^^ |
29.06.2013, 21:38 | #27 |
/// the machine /// TB-Ausbilder | ominöses DOS Programm Alles gut Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu ominöses DOS Programm |
anwalt, beschreibung, blöd, dankbar, doppelklick, dos, email, firma, heute, inhalt, komisch, lauter, meldung, pdf, problem, program, programm, schei, tan, verknüpfung, wissen, womit, worddokume, worddokument, zip-datei |