| |
| |||||||
Log-Analyse und Auswertung: HEUR:Exploit.Java.CVE-2013-2423.genWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
21.07.2013, 22:16
| #1 | |||||
 |  HEUR:Exploit.Java.CVE-2013-2423.gen Hallo Trojaner board, mich hat es erwischt. Kaspersky Internet Security 2013 (Testversion) hat bei mir das Tjojanische Pferd HEUR:Exploit.Java.CVE-2013-2423.gen gefunden und kann es nicht löschen oder reparieren. Ich hatte vorher immer microsoft essential drauf, der hat nie was gefunden. Kaspersky: Zitat:
Zitat:
Zitat:
Zitat:
Zitat:
MFG Xplosion |
|
21.07.2013, 23:18
| #2 |
| /// the machine /// TB-Ausbilder    | HEUR:Exploit.Java.CVE-2013-2423.gen Hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
22.07.2013, 07:34
| #3 |
| | HEUR:Exploit.Java.CVE-2013-2423.gen Danke Schrauber!
__________________Ich bin heute ca. 18-18:30 Uhr wieder online und werde dann die Sachen posten! |
|
22.07.2013, 09:22
| #4 |
| /// the machine /// TB-Ausbilder | HEUR:Exploit.Java.CVE-2013-2423.gen ok 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.07.2013, 16:51
| #5 |
| | HEUR:Exploit.Java.CVE-2013-2423.gen Hi Schrauber, hier wie gewünscht die beiden log. dateien MFG Xplosion |
|
22.07.2013, 17:45
| #6 |
| /// the machine /// TB-Ausbilder | HEUR:Exploit.Java.CVE-2013-2423.gen Hi, Logs bitte immer in den Thread posten  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ --> HEUR:Exploit.Java.CVE-2013-2423.gen |
|
22.07.2013, 17:54
| #7 | |
| | HEUR:Exploit.Java.CVE-2013-2423.gen Ok sorry! Addition.txt: Zitat:
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2013
Ran by Xplosion (administrator) on 22-07-2013 17:49:47
Running from C:\Users\Xplosion\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brsvc01a.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brss01a.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [AVP] - "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [356376 2013-05-16] (Kaspersky Lab ZAO)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Xplosion\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx
==================== Services (Whitelisted) =================
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
R2 Brother XP spl Service; C:\Windows\SysWow64\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-10-31] ()
==================== Drivers (Whitelisted) ====================
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-05-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2013-05-16] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2013-05-16] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-21] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-05-16] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-22 17:45 - 2013-07-22 17:49 - 00000000 _____ C:\Users\Xplosion\Desktop\Addition.txt
2013-07-22 17:44 - 2013-07-22 17:44 - 00000000 ____D C:\FRST
2013-07-22 17:42 - 2013-07-22 17:42 - 01779363 _____ (Farbar) C:\Users\Xplosion\Desktop\FRST64.exe
2013-07-21 23:05 - 2013-07-21 23:05 - 00000746 _____ C:\Users\Xplosion\Desktop\Kaspersky.txt
2013-07-21 23:00 - 2013-07-21 23:00 - 00002761 _____ C:\Users\Xplosion\Desktop\Gmer.txt
2013-07-21 22:31 - 2013-07-21 22:31 - 00043718 _____ C:\Users\Xplosion\Desktop\Extras.Txt
2013-07-21 22:30 - 2013-07-21 22:30 - 00377856 _____ C:\Users\Xplosion\Desktop\gmer_2.1.19163.exe
2013-07-21 22:30 - 2013-07-21 22:30 - 00071480 _____ C:\Users\Xplosion\Desktop\OTL.Txt
2013-07-21 22:24 - 2013-07-21 22:24 - 00000478 _____ C:\Users\Xplosion\Desktop\defogger_disable.log
2013-07-21 22:24 - 2013-07-21 22:24 - 00000000 _____ C:\Users\Xplosion\defogger_reenable
2013-07-21 22:22 - 2013-07-21 22:22 - 00050477 _____ C:\Users\Xplosion\Desktop\Defogger.exe
2013-07-21 22:11 - 2013-07-21 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\Xplosion\Desktop\OTL.exe
2013-07-21 15:05 - 2013-07-21 15:05 - 00002336 _____ C:\Users\Xplosion\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-21 15:04 - 2013-07-21 15:04 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-21 15:04 - 2013-05-16 07:27 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-21 15:02 - 2013-07-22 17:42 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-21 15:02 - 2013-05-16 07:27 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-07-21 15:02 - 2013-05-16 07:27 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-07-17 18:31 - 2013-07-17 18:31 - 00001242 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-17 18:29 - 2013-07-17 18:30 - 00017627 _____ C:\Windows\DirectX.log
2013-07-16 21:58 - 2013-07-16 22:50 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-07-16 21:58 - 2013-07-16 22:49 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\Origin
2013-07-16 21:58 - 2013-07-16 22:37 - 00000000 ____D C:\Users\Xplosion\AppData\Local\Origin
2013-07-16 21:56 - 2013-07-20 23:31 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-16 21:56 - 2013-07-17 18:35 - 00000000 ____D C:\ProgramData\Origin
2013-07-16 21:56 - 2013-07-17 18:35 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-07-16 21:56 - 2013-07-16 21:56 - 00000975 _____ C:\Users\Public\Desktop\Origin.lnk
2013-07-16 21:55 - 2013-07-16 21:55 - 00000000 ____D C:\Users\Xplosion\Desktop\FIFA 13
2013-07-16 20:57 - 2013-07-22 17:39 - 00000784 _____ C:\Windows\setupact.log
2013-07-16 20:57 - 2013-07-16 20:57 - 00000000 _____ C:\Windows\setuperr.log
2013-07-16 20:56 - 2013-07-17 16:36 - 00002592 _____ C:\Windows\PFRO.log
2013-07-14 17:58 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-14 17:58 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-14 17:58 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-14 17:58 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-14 17:58 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-14 17:58 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-14 15:59 - 2013-07-14 15:59 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\dvdcss
2013-07-14 15:41 - 2012-11-07 14:36 - 733327360 _____ C:\Users\Xplosion\Desktop\Winnie_Puuh-Honigsuesse_Abenteuer-Die_kleinen_Entdecker-German-2004-AC3-DVDRiP-XviD-oNePiEcE.avi
2013-07-14 15:41 - 2012-11-07 11:35 - 733898752 _____ C:\Users\Xplosion\Desktop\Winnie_Puuh-Unzertrennliche_Freunde-German-2004-AC3-DVDRiP-XviD-oNePiEcE.avi
2013-07-14 15:41 - 2009-01-11 05:21 - 698928204 _____ C:\Users\Xplosion\Desktop\Winnie.Puuh.auf.großer.Reise.German.2006.MP3.DVDRip.DivX.-.iND.avi
2013-07-14 15:38 - 2013-07-14 15:38 - 00000000 ____D C:\Users\Xplosion\Desktop\Die.vielen.Abenteuer.von.Winnie.Pooh.1977.German.DL.Untouched.DVD9
2013-07-14 15:06 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-14 15:06 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-14 15:06 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-14 15:06 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-14 15:05 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-14 15:05 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-14 15:05 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-08 20:50 - 2013-07-08 20:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-07-01 21:25 - 2013-07-01 21:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-01 21:17 - 2013-06-21 14:06 - 27781920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 21102368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 15144928 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 13411896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 11235104 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-07-01 21:17 - 2013-06-21 14:06 - 09239344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 07687592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02953504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02777888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432049.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432049.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00572704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00570656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00467232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00465184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-01 21:06 - 2013-07-01 21:06 - 00000000 ____D C:\Users\Xplosion\AppData\Local\NVIDIA
2013-06-29 10:43 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-29 10:43 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-27 22:23 - 2013-06-27 22:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
==================== One Month Modified Files and Folders =======
2013-07-22 17:49 - 2013-07-22 17:45 - 00000000 _____ C:\Users\Xplosion\Desktop\Addition.txt
2013-07-22 17:47 - 2009-07-14 19:58 - 00696832 _____ C:\Windows\system32\perfh007.dat
2013-07-22 17:47 - 2009-07-14 19:58 - 00148128 _____ C:\Windows\system32\perfc007.dat
2013-07-22 17:47 - 2009-07-14 07:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-22 17:47 - 2009-07-14 06:45 - 00018608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-22 17:47 - 2009-07-14 06:45 - 00018608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-22 17:44 - 2013-07-22 17:44 - 00000000 ____D C:\FRST
2013-07-22 17:44 - 2012-10-27 23:22 - 01065854 _____ C:\Windows\WindowsUpdate.log
2013-07-22 17:42 - 2013-07-22 17:42 - 01779363 _____ (Farbar) C:\Users\Xplosion\Desktop\FRST64.exe
2013-07-22 17:42 - 2013-07-21 15:02 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-22 17:40 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-22 17:39 - 2013-07-16 20:57 - 00000784 _____ C:\Windows\setupact.log
2013-07-22 17:39 - 2012-10-28 01:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-21 23:11 - 2013-03-13 22:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-21 23:05 - 2013-07-21 23:05 - 00000746 _____ C:\Users\Xplosion\Desktop\Kaspersky.txt
2013-07-21 23:00 - 2013-07-21 23:00 - 00002761 _____ C:\Users\Xplosion\Desktop\Gmer.txt
2013-07-21 22:31 - 2013-07-21 22:31 - 00043718 _____ C:\Users\Xplosion\Desktop\Extras.Txt
2013-07-21 22:30 - 2013-07-21 22:30 - 00377856 _____ C:\Users\Xplosion\Desktop\gmer_2.1.19163.exe
2013-07-21 22:30 - 2013-07-21 22:30 - 00071480 _____ C:\Users\Xplosion\Desktop\OTL.Txt
2013-07-21 22:24 - 2013-07-21 22:24 - 00000478 _____ C:\Users\Xplosion\Desktop\defogger_disable.log
2013-07-21 22:24 - 2013-07-21 22:24 - 00000000 _____ C:\Users\Xplosion\defogger_reenable
2013-07-21 22:24 - 2012-10-27 23:31 - 00000000 ____D C:\Users\Xplosion
2013-07-21 22:22 - 2013-07-21 22:22 - 00050477 _____ C:\Users\Xplosion\Desktop\Defogger.exe
2013-07-21 22:11 - 2013-07-21 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\Xplosion\Desktop\OTL.exe
2013-07-21 22:03 - 2012-10-28 02:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-21 15:12 - 2013-05-16 07:27 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-07-21 15:05 - 2013-07-21 15:05 - 00002336 _____ C:\Users\Xplosion\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-21 15:04 - 2013-07-21 15:04 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-21 14:58 - 2012-10-28 01:48 - 00001912 _____ C:\Windows\epplauncher.mif
2013-07-20 23:44 - 2012-10-28 03:48 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\.purple
2013-07-20 23:40 - 2012-10-28 02:04 - 00000000 ____D C:\Users\Xplosion\Documents\FIFA 13
2013-07-20 23:31 - 2013-07-16 21:56 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-17 18:35 - 2013-07-16 21:56 - 00000000 ____D C:\ProgramData\Origin
2013-07-17 18:35 - 2013-07-16 21:56 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-07-17 18:31 - 2013-07-17 18:31 - 00001242 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-17 18:30 - 2013-07-17 18:29 - 00017627 _____ C:\Windows\DirectX.log
2013-07-17 16:36 - 2013-07-16 20:56 - 00002592 _____ C:\Windows\PFRO.log
2013-07-16 22:50 - 2013-07-16 21:58 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-07-16 22:49 - 2013-07-16 21:58 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\Origin
2013-07-16 22:37 - 2013-07-16 21:58 - 00000000 ____D C:\Users\Xplosion\AppData\Local\Origin
2013-07-16 21:56 - 2013-07-16 21:56 - 00000975 _____ C:\Users\Public\Desktop\Origin.lnk
2013-07-16 21:55 - 2013-07-16 21:55 - 00000000 ____D C:\Users\Xplosion\Desktop\FIFA 13
2013-07-16 20:57 - 2013-07-16 20:57 - 00000000 _____ C:\Windows\setuperr.log
2013-07-16 20:57 - 2012-10-28 00:18 - 00000000 ____D C:\Windows\Panther
2013-07-16 20:57 - 2009-07-14 06:45 - 00294848 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-16 20:56 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-16 20:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-16 20:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-14 17:59 - 2012-10-31 18:58 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-14 17:52 - 2012-10-28 01:57 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\AIMP3
2013-07-14 16:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-14 16:01 - 2013-03-16 01:52 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\vlc
2013-07-14 15:59 - 2013-07-14 15:59 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\dvdcss
2013-07-14 15:38 - 2013-07-14 15:38 - 00000000 ____D C:\Users\Xplosion\Desktop\Die.vielen.Abenteuer.von.Winnie.Pooh.1977.German.DL.Untouched.DVD9
2013-07-14 14:54 - 2012-10-28 02:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-08 22:24 - 2012-10-30 22:58 - 00000000 ____D C:\Program Files\CCleaner
2013-07-08 22:21 - 2012-10-28 02:16 - 00000000 ____D C:\Program Files (x86)\Opera
2013-07-08 20:51 - 2013-07-08 20:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-07-01 21:25 - 2013-07-01 21:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-01 21:25 - 2012-10-28 01:04 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-07-01 21:09 - 2013-07-01 21:09 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-01 21:09 - 2013-01-22 22:47 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-07-01 21:09 - 2013-01-22 22:47 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-07-01 21:06 - 2013-07-01 21:06 - 00000000 ____D C:\Users\Xplosion\AppData\Local\NVIDIA
2013-07-01 21:01 - 2012-10-28 01:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-29 10:38 - 2012-10-27 23:32 - 00001405 _____ C:\Users\Xplosion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-27 22:24 - 2013-06-27 22:24 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-27 22:23 - 2013-06-27 22:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-24 21:34 - 2012-10-28 01:57 - 00000000 ____D C:\Program Files (x86)\AIMP3
2013-06-24 21:30 - 2012-10-31 22:13 - 00268952 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-06-24 21:30 - 2012-10-31 22:12 - 00268952 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-14 16:47
==================== End Of Log ============================
--- --- --- |
|
22.07.2013, 20:16
| #8 | |
| /// the machine /// TB-Ausbilder | HEUR:Exploit.Java.CVE-2013-2423.genCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.07.2013, 15:58
| #9 |
| | HEUR:Exploit.Java.CVE-2013-2423.gen Hi Schrauber, hier die gewünschte Combofix.log Combofix Logfile: Code:
ATTFilter ComboFix 13-07-23.01 - Xplosion 23.07.2013 16:51:29.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8191.6449 [GMT 2:00]
ausgeführt von:: c:\users\Xplosion\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky Internet Security *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky Internet Security *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Public\sdelevURL.tmp
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-06-23 bis 2013-07-23 ))))))))))))))))))))))))))))))
.
.
2013-07-23 14:55 . 2013-07-23 14:55 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-07-23 14:55 . 2013-07-23 14:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-23 14:48 . 2013-07-02 08:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{810F6243-2D93-4ED9-9DA3-7A6E24561BD9}\mpengine.dll
2013-07-22 15:44 . 2013-07-22 15:44 -------- d-----w- C:\FRST
2013-07-21 20:03 . 2013-07-21 20:03 -------- d-----w- c:\users\Xplosion\AppData\Local\Programs
2013-07-21 13:04 . 2013-05-16 05:27 64856 ----a-w- c:\windows\system32\klfphc.dll
2013-07-21 13:02 . 2013-07-21 13:02 -------- d-----w- c:\windows\ELAMBKUP
2013-07-21 13:02 . 2013-07-23 14:47 -------- d-----w- c:\programdata\Kaspersky Lab
2013-07-21 13:02 . 2013-07-21 13:02 -------- d-----w- c:\program files (x86)\Kaspersky Lab
2013-07-21 13:02 . 2013-05-16 05:27 90208 ----a-w- c:\windows\system32\drivers\klflt.sys
2013-07-21 13:02 . 2013-05-16 05:27 620128 ----a-w- c:\windows\system32\drivers\klif.sys
2013-07-16 19:58 . 2013-07-16 20:50 -------- d-----w- c:\program files (x86)\Origin Games
2013-07-16 19:58 . 2013-07-16 20:49 -------- d-----w- c:\users\Xplosion\AppData\Roaming\Origin
2013-07-16 19:58 . 2013-07-16 20:37 -------- d-----w- c:\users\Xplosion\AppData\Local\Origin
2013-07-16 19:56 . 2013-07-17 16:35 -------- d-----w- c:\programdata\Origin
2013-07-16 19:56 . 2013-07-17 16:35 -------- d-----w- c:\programdata\Electronic Arts
2013-07-16 19:56 . 2013-07-22 17:58 -------- d-----w- c:\program files (x86)\Origin
2013-07-14 13:59 . 2013-07-14 13:59 -------- d-----w- c:\users\Xplosion\AppData\Roaming\dvdcss
2013-07-14 13:06 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-14 13:06 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-14 13:06 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-14 13:06 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
2013-07-14 13:06 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
2013-07-14 13:06 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
2013-07-14 13:06 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
2013-07-14 13:06 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
2013-07-14 13:06 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-14 13:06 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-14 13:06 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-14 13:05 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-07-14 13:05 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-14 13:05 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-14 13:05 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-14 13:05 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 13:05 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 13:05 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-07-14 13:05 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-07-08 18:50 . 2013-07-08 18:51 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2013-07-01 19:25 . 2013-07-01 19:25 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-07-01 19:09 . 2013-07-01 19:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-01 19:09 . 2013-07-01 19:09 -------- d-----w- c:\program files (x86)\Java
2013-07-01 19:06 . 2013-07-01 19:06 -------- d-----w- c:\users\Xplosion\AppData\Local\NVIDIA
2013-06-29 08:43 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-29 08:43 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-27 20:23 . 2013-06-27 20:23 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-21 13:12 . 2013-05-16 05:27 54368 ----a-w- c:\windows\system32\drivers\kltdi.sys
2013-07-14 15:59 . 2012-10-31 16:58 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-07-01 19:09 . 2013-01-22 20:47 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-07-01 19:09 . 2013-01-22 20:47 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-06-24 19:30 . 2012-10-31 20:13 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2013-06-24 19:30 . 2012-10-31 20:12 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2013-06-21 12:06 . 2013-03-29 22:35 12427240 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-06-21 12:06 . 2013-03-29 22:35 2597856 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-06-21 12:06 . 2012-10-27 23:03 61216 ----a-w- c:\windows\system32\OpenCL.dll
2013-06-21 12:06 . 2012-10-27 23:03 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-06-21 12:06 . 2012-10-27 23:02 2936208 ----a-w- c:\windows\system32\nvapi64.dll
2013-06-21 12:06 . 2009-07-13 21:59 15920536 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-06-21 10:23 . 2012-10-27 23:03 6496544 ----a-w- c:\windows\system32\nvcpl.dll
2013-06-21 10:23 . 2012-10-27 23:03 3514656 ----a-w- c:\windows\system32\nvsvc64.dll
2013-06-21 10:23 . 2012-10-27 23:03 884512 ----a-w- c:\windows\system32\nvvsvc.exe
2013-06-21 10:23 . 2012-10-27 23:03 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-06-21 10:23 . 2012-10-27 23:03 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-06-21 10:23 . 2012-10-27 23:03 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-06-21 03:16 . 2013-06-21 03:16 566048 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2013-06-16 14:59 . 2012-10-31 20:13 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2013-06-16 14:11 . 2012-10-27 22:55 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-16 14:11 . 2012-10-27 22:55 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-16 05:27 . 2013-05-16 05:27 29528 ----a-w- c:\windows\system32\drivers\klmouflt.sys
2013-05-16 05:27 . 2013-05-16 05:27 29016 ----a-w- c:\windows\system32\drivers\klkbdflt.sys
2013-05-16 05:27 . 2013-05-16 05:27 178448 ----a-w- c:\windows\system32\drivers\kneps.sys
2013-05-13 05:51 . 2013-06-16 13:08 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-05-13 05:51 . 2013-06-16 13:08 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-05-13 05:51 . 2013-06-16 13:08 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-05-13 05:50 . 2013-06-16 13:08 52224 ----a-w- c:\windows\system32\certenc.dll
2013-05-13 04:45 . 2013-06-16 13:08 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-05-13 04:45 . 2013-06-16 13:08 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-05-13 04:45 . 2013-06-16 13:08 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-05-13 03:43 . 2013-06-16 13:08 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-05-13 03:08 . 2013-06-16 13:08 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-05-13 03:08 . 2013-06-16 13:08 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-05-12 21:42 . 2013-05-24 19:29 1832224 ----a-w- c:\windows\system32\nvdispco6432018.dll
2013-05-12 21:42 . 2013-05-24 19:29 1511712 ----a-w- c:\windows\system32\nvdispgenco6432018.dll
2013-05-10 05:49 . 2013-06-16 13:08 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-05-10 03:20 . 2013-06-16 13:08 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-05-08 06:39 . 2013-06-16 13:08 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-02 00:06 . 2012-10-27 22:41 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-26 05:51 . 2013-06-16 13:08 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-04-26 04:55 . 2013-06-16 13:08 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-04-25 23:30 . 2013-06-16 13:08 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [2013-05-16 356376]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys;c:\windows\SYSNATIVE\DRIVERS\BrSerIb.sys [x]
R3 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys;c:\windows\SYSNATIVE\DRIVERS\BrUsbSIb.sys [x]
R3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
R3 yukonw7;NDIS6.2-Miniporttreiber für Marvell Yukon-Ethernet-Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe;c:\program files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT-Treiber;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtl8187.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8187.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-27 14:11]
.
.
--------- X64 Entries -----------
.
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Mit PDF Viewer Plus öffnen - c:\program files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-23 16:56:40
ComboFix-quarantined-files.txt 2013-07-23 14:56
.
Vor Suchlauf: 12 Verzeichnis(se), 325.637.410.816 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 325.624.459.264 Bytes frei
.
- - End Of File - - C1045139E4F8461D1FBE314693E598F9
A36C5E4F47E84449FF07ED3517B43A31 [/QUOTE] |
|
23.07.2013, 18:53
| #10 |
| /// the machine /// TB-Ausbilder | HEUR:Exploit.Java.CVE-2013-2423.gen Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.07.2013, 21:29
| #11 | |
| | HEUR:Exploit.Java.CVE-2013-2423.gen Hi Schrauber, hier die logs: JRT: Zitat:
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.306 - Datei am 23/07/2013 um 22:10:48 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Xplosion - XPLOSION-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Xplosion\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\Softonic
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16635
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v [Version kann nicht ermittelt werden]
Datei : C:\Users\Xplosion\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
-\\ Opera v12.16.1860.0
Datei : C:\Users\Xplosion\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [928 octets] - [23/07/2013 22:10:48]
########## EOF - C:\AdwCleaner[S1].txt - [987 octets] ##########
[/QUOTE] Frst: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2013
Ran by Xplosion (administrator) on 23-07-2013 22:21:35
Running from C:\Users\Xplosion\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brsvc01a.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brss01a.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Opera Software) C:\Program Files (x86)\Opera\Opera.exe
(Oleg N. Scherbakov) C:\Users\Xplosion\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [AVP] - "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [356376 2013-05-16] (Kaspersky Lab ZAO)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Xplosion\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx
==================== Services (Whitelisted) =================
S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
R2 Brother XP spl Service; C:\Windows\SysWow64\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-10-31] ()
==================== Drivers (Whitelisted) ====================
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-05-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2013-05-16] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2013-05-16] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-21] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-05-16] (Kaspersky Lab ZAO)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-23 22:20 - 2013-07-23 22:20 - 00000832 _____ C:\Users\Xplosion\Desktop\JRT.txt
2013-07-23 22:15 - 2013-07-23 22:15 - 00000000 ____D C:\Windows\ERUNT
2013-07-23 22:14 - 2013-07-23 22:14 - 00560934 _____ (Oleg N. Scherbakov) C:\Users\Xplosion\Desktop\JRT.exe
2013-07-23 22:10 - 2013-07-23 22:11 - 00001055 _____ C:\AdwCleaner[S1].txt
2013-07-23 22:09 - 2013-07-23 22:09 - 00666633 _____ C:\Users\Xplosion\Desktop\adwcleaner.exe
2013-07-23 16:56 - 2013-07-23 16:56 - 00019710 _____ C:\ComboFix.txt
2013-07-23 16:50 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-23 16:50 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-23 16:50 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-23 16:48 - 2013-07-23 16:56 - 00000000 ____D C:\Qoobox
2013-07-23 16:48 - 2013-07-23 16:55 - 00000000 ____D C:\Windows\erdnt
2013-07-23 16:47 - 2013-07-23 16:48 - 05092552 ____R (Swearware) C:\Users\Xplosion\Desktop\ComboFix.exe
2013-07-22 17:45 - 2013-07-22 17:50 - 00017044 _____ C:\Users\Xplosion\Desktop\Addition.txt
2013-07-22 17:44 - 2013-07-22 17:44 - 00000000 ____D C:\FRST
2013-07-22 17:42 - 2013-07-22 17:42 - 01779363 _____ (Farbar) C:\Users\Xplosion\Desktop\FRST64.exe
2013-07-21 23:05 - 2013-07-21 23:05 - 00000746 _____ C:\Users\Xplosion\Desktop\Kaspersky.txt
2013-07-21 23:00 - 2013-07-21 23:00 - 00002761 _____ C:\Users\Xplosion\Desktop\Gmer.txt
2013-07-21 22:31 - 2013-07-21 22:31 - 00043718 _____ C:\Users\Xplosion\Desktop\Extras.Txt
2013-07-21 22:30 - 2013-07-21 22:30 - 00377856 _____ C:\Users\Xplosion\Desktop\gmer_2.1.19163.exe
2013-07-21 22:30 - 2013-07-21 22:30 - 00071480 _____ C:\Users\Xplosion\Desktop\OTL.Txt
2013-07-21 22:24 - 2013-07-21 22:24 - 00000478 _____ C:\Users\Xplosion\Desktop\defogger_disable.log
2013-07-21 22:24 - 2013-07-21 22:24 - 00000000 _____ C:\Users\Xplosion\defogger_reenable
2013-07-21 22:22 - 2013-07-21 22:22 - 00050477 _____ C:\Users\Xplosion\Desktop\Defogger.exe
2013-07-21 22:11 - 2013-07-21 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\Xplosion\Desktop\OTL.exe
2013-07-21 15:05 - 2013-07-21 15:05 - 00002336 _____ C:\Users\Xplosion\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-21 15:04 - 2013-07-21 15:04 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-21 15:04 - 2013-05-16 07:27 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-21 15:02 - 2013-07-23 22:13 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-21 15:02 - 2013-05-16 07:27 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-07-21 15:02 - 2013-05-16 07:27 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-07-17 18:31 - 2013-07-17 18:31 - 00001242 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-17 18:29 - 2013-07-17 18:30 - 00017627 _____ C:\Windows\DirectX.log
2013-07-16 21:58 - 2013-07-16 22:50 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-07-16 21:58 - 2013-07-16 22:49 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\Origin
2013-07-16 21:58 - 2013-07-16 22:37 - 00000000 ____D C:\Users\Xplosion\AppData\Local\Origin
2013-07-16 21:56 - 2013-07-22 19:58 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-16 21:56 - 2013-07-17 18:35 - 00000000 ____D C:\ProgramData\Origin
2013-07-16 21:56 - 2013-07-17 18:35 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-07-16 21:56 - 2013-07-16 21:56 - 00000975 _____ C:\Users\Public\Desktop\Origin.lnk
2013-07-16 21:55 - 2013-07-16 21:55 - 00000000 ____D C:\Users\Xplosion\Desktop\FIFA 13
2013-07-16 20:57 - 2013-07-23 22:12 - 00001064 _____ C:\Windows\setupact.log
2013-07-16 20:57 - 2013-07-16 20:57 - 00000000 _____ C:\Windows\setuperr.log
2013-07-16 20:56 - 2013-07-23 22:06 - 00003138 _____ C:\Windows\PFRO.log
2013-07-14 17:58 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-14 17:58 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-14 17:58 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-14 17:58 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-14 17:58 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-14 17:58 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-14 15:59 - 2013-07-14 15:59 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\dvdcss
2013-07-14 15:41 - 2012-11-07 14:36 - 733327360 _____ C:\Users\Xplosion\Desktop\Winnie_Puuh-Honigsuesse_Abenteuer-Die_kleinen_Entdecker-German-2004-AC3-DVDRiP-XviD-oNePiEcE.avi
2013-07-14 15:41 - 2012-11-07 11:35 - 733898752 _____ C:\Users\Xplosion\Desktop\Winnie_Puuh-Unzertrennliche_Freunde-German-2004-AC3-DVDRiP-XviD-oNePiEcE.avi
2013-07-14 15:41 - 2009-01-11 05:21 - 698928204 _____ C:\Users\Xplosion\Desktop\Winnie.Puuh.auf.großer.Reise.German.2006.MP3.DVDRip.DivX.-.iND.avi
2013-07-14 15:38 - 2013-07-14 15:38 - 00000000 ____D C:\Users\Xplosion\Desktop\Die.vielen.Abenteuer.von.Winnie.Pooh.1977.German.DL.Untouched.DVD9
2013-07-14 15:06 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-14 15:06 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-14 15:06 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-14 15:06 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-14 15:05 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-14 15:05 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-14 15:05 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-08 20:50 - 2013-07-08 20:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-07-01 21:25 - 2013-07-01 21:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-01 21:17 - 2013-06-21 14:06 - 27781920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 21102368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 15144928 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 13411896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 11235104 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-07-01 21:17 - 2013-06-21 14:06 - 09239344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 07687592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02953504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02777888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432049.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432049.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00572704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00570656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00467232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00465184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-01 21:06 - 2013-07-01 21:06 - 00000000 ____D C:\Users\Xplosion\AppData\Local\NVIDIA
2013-06-29 10:43 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-29 10:43 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-27 22:23 - 2013-06-27 22:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
==================== One Month Modified Files and Folders =======
2013-07-23 22:20 - 2013-07-23 22:20 - 00000832 _____ C:\Users\Xplosion\Desktop\JRT.txt
2013-07-23 22:19 - 2009-07-14 19:58 - 00696832 _____ C:\Windows\system32\perfh007.dat
2013-07-23 22:19 - 2009-07-14 19:58 - 00148128 _____ C:\Windows\system32\perfc007.dat
2013-07-23 22:19 - 2009-07-14 07:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-23 22:19 - 2009-07-14 06:45 - 00018608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-23 22:19 - 2009-07-14 06:45 - 00018608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-23 22:16 - 2012-10-27 23:22 - 01159261 _____ C:\Windows\WindowsUpdate.log
2013-07-23 22:15 - 2013-07-23 22:15 - 00000000 ____D C:\Windows\ERUNT
2013-07-23 22:14 - 2013-07-23 22:14 - 00560934 _____ (Oleg N. Scherbakov) C:\Users\Xplosion\Desktop\JRT.exe
2013-07-23 22:13 - 2013-07-21 15:02 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-23 22:12 - 2013-07-16 20:57 - 00001064 _____ C:\Windows\setupact.log
2013-07-23 22:12 - 2012-10-28 01:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-23 22:12 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-23 22:11 - 2013-07-23 22:10 - 00001055 _____ C:\AdwCleaner[S1].txt
2013-07-23 22:11 - 2013-03-13 22:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-23 22:09 - 2013-07-23 22:09 - 00666633 _____ C:\Users\Xplosion\Desktop\adwcleaner.exe
2013-07-23 22:06 - 2013-07-16 20:56 - 00003138 _____ C:\Windows\PFRO.log
2013-07-23 16:56 - 2013-07-23 16:56 - 00019710 _____ C:\ComboFix.txt
2013-07-23 16:56 - 2013-07-23 16:48 - 00000000 ____D C:\Qoobox
2013-07-23 16:55 - 2013-07-23 16:48 - 00000000 ____D C:\Windows\erdnt
2013-07-23 16:55 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-23 16:48 - 2013-07-23 16:47 - 05092552 ____R (Swearware) C:\Users\Xplosion\Desktop\ComboFix.exe
2013-07-22 20:00 - 2012-10-28 02:04 - 00000000 ____D C:\Users\Xplosion\Documents\FIFA 13
2013-07-22 19:58 - 2013-07-16 21:56 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-22 17:50 - 2013-07-22 17:45 - 00017044 _____ C:\Users\Xplosion\Desktop\Addition.txt
2013-07-22 17:44 - 2013-07-22 17:44 - 00000000 ____D C:\FRST
2013-07-22 17:42 - 2013-07-22 17:42 - 01779363 _____ (Farbar) C:\Users\Xplosion\Desktop\FRST64.exe
2013-07-21 23:05 - 2013-07-21 23:05 - 00000746 _____ C:\Users\Xplosion\Desktop\Kaspersky.txt
2013-07-21 23:00 - 2013-07-21 23:00 - 00002761 _____ C:\Users\Xplosion\Desktop\Gmer.txt
2013-07-21 22:31 - 2013-07-21 22:31 - 00043718 _____ C:\Users\Xplosion\Desktop\Extras.Txt
2013-07-21 22:30 - 2013-07-21 22:30 - 00377856 _____ C:\Users\Xplosion\Desktop\gmer_2.1.19163.exe
2013-07-21 22:30 - 2013-07-21 22:30 - 00071480 _____ C:\Users\Xplosion\Desktop\OTL.Txt
2013-07-21 22:24 - 2013-07-21 22:24 - 00000478 _____ C:\Users\Xplosion\Desktop\defogger_disable.log
2013-07-21 22:24 - 2013-07-21 22:24 - 00000000 _____ C:\Users\Xplosion\defogger_reenable
2013-07-21 22:24 - 2012-10-27 23:31 - 00000000 ____D C:\Users\Xplosion
2013-07-21 22:22 - 2013-07-21 22:22 - 00050477 _____ C:\Users\Xplosion\Desktop\Defogger.exe
2013-07-21 22:11 - 2013-07-21 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\Xplosion\Desktop\OTL.exe
2013-07-21 22:03 - 2012-10-28 02:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-21 15:12 - 2013-05-16 07:27 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-07-21 15:05 - 2013-07-21 15:05 - 00002336 _____ C:\Users\Xplosion\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-21 15:04 - 2013-07-21 15:04 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-21 14:58 - 2012-10-28 01:48 - 00001912 _____ C:\Windows\epplauncher.mif
2013-07-20 23:44 - 2012-10-28 03:48 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\.purple
2013-07-17 18:35 - 2013-07-16 21:56 - 00000000 ____D C:\ProgramData\Origin
2013-07-17 18:35 - 2013-07-16 21:56 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-07-17 18:31 - 2013-07-17 18:31 - 00001242 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-17 18:30 - 2013-07-17 18:29 - 00017627 _____ C:\Windows\DirectX.log
2013-07-16 22:50 - 2013-07-16 21:58 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-07-16 22:49 - 2013-07-16 21:58 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\Origin
2013-07-16 22:37 - 2013-07-16 21:58 - 00000000 ____D C:\Users\Xplosion\AppData\Local\Origin
2013-07-16 21:56 - 2013-07-16 21:56 - 00000975 _____ C:\Users\Public\Desktop\Origin.lnk
2013-07-16 21:55 - 2013-07-16 21:55 - 00000000 ____D C:\Users\Xplosion\Desktop\FIFA 13
2013-07-16 20:57 - 2013-07-16 20:57 - 00000000 _____ C:\Windows\setuperr.log
2013-07-16 20:57 - 2012-10-28 00:18 - 00000000 ____D C:\Windows\Panther
2013-07-16 20:57 - 2009-07-14 06:45 - 00294848 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-16 20:56 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-16 20:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-16 20:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-14 17:59 - 2012-10-31 18:58 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-14 17:52 - 2012-10-28 01:57 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\AIMP3
2013-07-14 16:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-14 16:01 - 2013-03-16 01:52 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\vlc
2013-07-14 15:59 - 2013-07-14 15:59 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\dvdcss
2013-07-14 15:38 - 2013-07-14 15:38 - 00000000 ____D C:\Users\Xplosion\Desktop\Die.vielen.Abenteuer.von.Winnie.Pooh.1977.German.DL.Untouched.DVD9
2013-07-14 14:54 - 2012-10-28 02:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-08 22:24 - 2012-10-30 22:58 - 00000000 ____D C:\Program Files\CCleaner
2013-07-08 22:21 - 2012-10-28 02:16 - 00000000 ____D C:\Program Files (x86)\Opera
2013-07-08 20:51 - 2013-07-08 20:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-07-01 21:25 - 2013-07-01 21:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-01 21:25 - 2012-10-28 01:04 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-07-01 21:09 - 2013-07-01 21:09 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-01 21:09 - 2013-01-22 22:47 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-07-01 21:09 - 2013-01-22 22:47 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-07-01 21:06 - 2013-07-01 21:06 - 00000000 ____D C:\Users\Xplosion\AppData\Local\NVIDIA
2013-07-01 21:01 - 2012-10-28 01:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-29 10:38 - 2012-10-27 23:32 - 00001405 _____ C:\Users\Xplosion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-27 22:24 - 2013-06-27 22:24 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-27 22:23 - 2013-06-27 22:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-24 21:34 - 2012-10-28 01:57 - 00000000 ____D C:\Program Files (x86)\AIMP3
2013-06-24 21:30 - 2012-10-31 22:13 - 00268952 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-06-24 21:30 - 2012-10-31 22:12 - 00268952 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-14 16:47
==================== End Of Log ============================
--- --- --- Bevor ich diese o.g. Proggis von dir starte und Kaspersky beende sagt er mir immer es sind 16 oder 8 Netzwerkverbindung aktiv, diese werden nach so und so vielen Sekunden automatisch getrennt oder man kann sie sofort trennen? Was hat das auf sich? Warum gibt es jetzt bei Frst keine Addition.log ??? Danke im voraus! MFG Xplosion |
|
24.07.2013, 10:40
| #12 |
| /// the machine /// TB-Ausbilder | HEUR:Exploit.Java.CVE-2013-2423.gen Die wird nur beim ersten Mal erstellt. ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.07.2013, 20:01
| #13 | ||
| | HEUR:Exploit.Java.CVE-2013-2423.gen Hi Schrauber, hier die logs! Eset online scanner: Zitat:
Zitat:
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2013
Ran by Xplosion (administrator) on 24-07-2013 20:52:44
Running from C:\Users\Xplosion\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brsvc01a.exe
(brother Industries Ltd) C:\Windows\SysWOW64\brss01a.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [AVP] - "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [356376 2013-05-16] (Kaspersky Lab ZAO)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (YouTube) - C:\Users\Xplosion\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx
==================== Services (Whitelisted) =================
S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-05-16] (Kaspersky Lab ZAO)
R2 Brother XP spl Service; C:\Windows\SysWow64\brsvc01a.exe [57344 2002-04-12] (brother Industries Ltd)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-09] (Nuance Communications, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2012-10-31] ()
==================== Drivers (Whitelisted) ====================
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-05-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2013-05-16] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2013-05-16] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-21] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-05-16] (Kaspersky Lab ZAO)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-24 18:40 - 2013-07-24 18:40 - 00891062 _____ C:\Users\Xplosion\Desktop\SecurityCheck.exe
2013-07-24 17:55 - 2013-07-24 17:55 - 02347384 _____ (ESET) C:\Users\Xplosion\Desktop\esetsmartinstaller_enu.exe
2013-07-23 22:20 - 2013-07-23 22:20 - 00000832 _____ C:\Users\Xplosion\Desktop\JRT.txt
2013-07-23 22:15 - 2013-07-23 22:15 - 00000000 ____D C:\Windows\ERUNT
2013-07-23 22:14 - 2013-07-23 22:14 - 00560934 _____ (Oleg N. Scherbakov) C:\Users\Xplosion\Desktop\JRT.exe
2013-07-23 22:10 - 2013-07-23 22:11 - 00001055 _____ C:\AdwCleaner[S1].txt
2013-07-23 22:09 - 2013-07-23 22:09 - 00666633 _____ C:\Users\Xplosion\Desktop\adwcleaner.exe
2013-07-23 16:56 - 2013-07-23 16:56 - 00019710 _____ C:\ComboFix.txt
2013-07-23 16:50 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-23 16:50 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-23 16:50 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-23 16:50 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-23 16:48 - 2013-07-23 16:56 - 00000000 ____D C:\Qoobox
2013-07-23 16:48 - 2013-07-23 16:55 - 00000000 ____D C:\Windows\erdnt
2013-07-23 16:47 - 2013-07-23 16:48 - 05092552 ____R (Swearware) C:\Users\Xplosion\Desktop\ComboFix.exe
2013-07-22 17:45 - 2013-07-22 17:50 - 00017044 _____ C:\Users\Xplosion\Desktop\Addition.txt
2013-07-22 17:44 - 2013-07-22 17:44 - 00000000 ____D C:\FRST
2013-07-22 17:42 - 2013-07-22 17:42 - 01779363 _____ (Farbar) C:\Users\Xplosion\Desktop\FRST64.exe
2013-07-21 23:05 - 2013-07-21 23:05 - 00000746 _____ C:\Users\Xplosion\Desktop\Kaspersky.txt
2013-07-21 23:00 - 2013-07-21 23:00 - 00002761 _____ C:\Users\Xplosion\Desktop\Gmer.txt
2013-07-21 22:31 - 2013-07-21 22:31 - 00043718 _____ C:\Users\Xplosion\Desktop\Extras.Txt
2013-07-21 22:30 - 2013-07-21 22:30 - 00377856 _____ C:\Users\Xplosion\Desktop\gmer_2.1.19163.exe
2013-07-21 22:30 - 2013-07-21 22:30 - 00071480 _____ C:\Users\Xplosion\Desktop\OTL.Txt
2013-07-21 22:24 - 2013-07-21 22:24 - 00000478 _____ C:\Users\Xplosion\Desktop\defogger_disable.log
2013-07-21 22:24 - 2013-07-21 22:24 - 00000000 _____ C:\Users\Xplosion\defogger_reenable
2013-07-21 22:22 - 2013-07-21 22:22 - 00050477 _____ C:\Users\Xplosion\Desktop\Defogger.exe
2013-07-21 22:11 - 2013-07-21 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\Xplosion\Desktop\OTL.exe
2013-07-21 15:05 - 2013-07-21 15:05 - 00002336 _____ C:\Users\Xplosion\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-21 15:04 - 2013-07-21 15:04 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-21 15:04 - 2013-05-16 07:27 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-07-21 15:02 - 2013-07-24 17:52 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-21 15:02 - 2013-05-16 07:27 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-07-21 15:02 - 2013-05-16 07:27 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-07-17 18:31 - 2013-07-17 18:31 - 00001242 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-17 18:29 - 2013-07-17 18:30 - 00017627 _____ C:\Windows\DirectX.log
2013-07-16 21:58 - 2013-07-16 22:50 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-07-16 21:58 - 2013-07-16 22:49 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\Origin
2013-07-16 21:58 - 2013-07-16 22:37 - 00000000 ____D C:\Users\Xplosion\AppData\Local\Origin
2013-07-16 21:56 - 2013-07-22 19:58 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-16 21:56 - 2013-07-17 18:35 - 00000000 ____D C:\ProgramData\Origin
2013-07-16 21:56 - 2013-07-17 18:35 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-07-16 21:56 - 2013-07-16 21:56 - 00000975 _____ C:\Users\Public\Desktop\Origin.lnk
2013-07-16 21:55 - 2013-07-16 21:55 - 00000000 ____D C:\Users\Xplosion\Desktop\FIFA 13
2013-07-16 20:57 - 2013-07-24 20:26 - 00001344 _____ C:\Windows\setupact.log
2013-07-16 20:57 - 2013-07-16 20:57 - 00000000 _____ C:\Windows\setuperr.log
2013-07-16 20:56 - 2013-07-23 22:06 - 00003138 _____ C:\Windows\PFRO.log
2013-07-14 17:58 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-14 17:58 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-14 17:58 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-14 17:58 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-14 17:58 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-14 17:58 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-14 17:58 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-14 17:58 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-14 17:58 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-14 17:58 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-14 15:59 - 2013-07-14 15:59 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\dvdcss
2013-07-14 15:41 - 2012-11-07 14:36 - 733327360 _____ C:\Users\Xplosion\Desktop\Winnie_Puuh-Honigsuesse_Abenteuer-Die_kleinen_Entdecker-German-2004-AC3-DVDRiP-XviD-oNePiEcE.avi
2013-07-14 15:41 - 2012-11-07 11:35 - 733898752 _____ C:\Users\Xplosion\Desktop\Winnie_Puuh-Unzertrennliche_Freunde-German-2004-AC3-DVDRiP-XviD-oNePiEcE.avi
2013-07-14 15:41 - 2009-01-11 05:21 - 698928204 _____ C:\Users\Xplosion\Desktop\Winnie.Puuh.auf.großer.Reise.German.2006.MP3.DVDRip.DivX.-.iND.avi
2013-07-14 15:38 - 2013-07-14 15:38 - 00000000 ____D C:\Users\Xplosion\Desktop\Die.vielen.Abenteuer.von.Winnie.Pooh.1977.German.DL.Untouched.DVD9
2013-07-14 15:06 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-14 15:06 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-14 15:06 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-14 15:06 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-14 15:05 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-14 15:05 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-14 15:05 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-08 20:50 - 2013-07-08 20:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-07-01 21:25 - 2013-07-01 21:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-01 21:17 - 2013-06-21 14:06 - 27781920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 21102368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 15144928 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 13411896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 11235104 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-07-01 21:17 - 2013-06-21 14:06 - 09239344 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 07687592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 07641832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 06324360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02953504 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02777888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02363680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 02002720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 01832224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432049.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432049.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00572704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00570656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00467232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-07-01 21:17 - 2013-06-21 14:06 - 00465184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-01 21:06 - 2013-07-01 21:06 - 00000000 ____D C:\Users\Xplosion\AppData\Local\NVIDIA
2013-06-29 10:43 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-29 10:43 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-27 22:23 - 2013-06-27 22:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
==================== One Month Modified Files and Folders =======
2013-07-24 20:27 - 2013-03-13 22:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-24 20:27 - 2012-10-27 23:22 - 01191304 _____ C:\Windows\WindowsUpdate.log
2013-07-24 20:26 - 2013-07-16 20:57 - 00001344 _____ C:\Windows\setupact.log
2013-07-24 18:47 - 2009-07-14 19:58 - 00696832 _____ C:\Windows\system32\perfh007.dat
2013-07-24 18:47 - 2009-07-14 19:58 - 00148128 _____ C:\Windows\system32\perfc007.dat
2013-07-24 18:47 - 2009-07-14 07:13 - 01613340 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-24 18:40 - 2013-07-24 18:40 - 00891062 _____ C:\Users\Xplosion\Desktop\SecurityCheck.exe
2013-07-24 17:59 - 2009-07-14 06:45 - 00018608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-24 17:59 - 2009-07-14 06:45 - 00018608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-24 17:55 - 2013-07-24 17:55 - 02347384 _____ (ESET) C:\Users\Xplosion\Desktop\esetsmartinstaller_enu.exe
2013-07-24 17:52 - 2013-07-21 15:02 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-07-24 17:51 - 2012-10-28 01:03 - 00000000 ____D C:\ProgramData\NVIDIA
2013-07-24 17:51 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-23 22:20 - 2013-07-23 22:20 - 00000832 _____ C:\Users\Xplosion\Desktop\JRT.txt
2013-07-23 22:15 - 2013-07-23 22:15 - 00000000 ____D C:\Windows\ERUNT
2013-07-23 22:14 - 2013-07-23 22:14 - 00560934 _____ (Oleg N. Scherbakov) C:\Users\Xplosion\Desktop\JRT.exe
2013-07-23 22:11 - 2013-07-23 22:10 - 00001055 _____ C:\AdwCleaner[S1].txt
2013-07-23 22:09 - 2013-07-23 22:09 - 00666633 _____ C:\Users\Xplosion\Desktop\adwcleaner.exe
2013-07-23 22:06 - 2013-07-16 20:56 - 00003138 _____ C:\Windows\PFRO.log
2013-07-23 16:56 - 2013-07-23 16:56 - 00019710 _____ C:\ComboFix.txt
2013-07-23 16:56 - 2013-07-23 16:48 - 00000000 ____D C:\Qoobox
2013-07-23 16:55 - 2013-07-23 16:48 - 00000000 ____D C:\Windows\erdnt
2013-07-23 16:55 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-23 16:48 - 2013-07-23 16:47 - 05092552 ____R (Swearware) C:\Users\Xplosion\Desktop\ComboFix.exe
2013-07-22 20:00 - 2012-10-28 02:04 - 00000000 ____D C:\Users\Xplosion\Documents\FIFA 13
2013-07-22 19:58 - 2013-07-16 21:56 - 00000000 ____D C:\Program Files (x86)\Origin
2013-07-22 17:50 - 2013-07-22 17:45 - 00017044 _____ C:\Users\Xplosion\Desktop\Addition.txt
2013-07-22 17:44 - 2013-07-22 17:44 - 00000000 ____D C:\FRST
2013-07-22 17:42 - 2013-07-22 17:42 - 01779363 _____ (Farbar) C:\Users\Xplosion\Desktop\FRST64.exe
2013-07-21 23:05 - 2013-07-21 23:05 - 00000746 _____ C:\Users\Xplosion\Desktop\Kaspersky.txt
2013-07-21 23:00 - 2013-07-21 23:00 - 00002761 _____ C:\Users\Xplosion\Desktop\Gmer.txt
2013-07-21 22:31 - 2013-07-21 22:31 - 00043718 _____ C:\Users\Xplosion\Desktop\Extras.Txt
2013-07-21 22:30 - 2013-07-21 22:30 - 00377856 _____ C:\Users\Xplosion\Desktop\gmer_2.1.19163.exe
2013-07-21 22:30 - 2013-07-21 22:30 - 00071480 _____ C:\Users\Xplosion\Desktop\OTL.Txt
2013-07-21 22:24 - 2013-07-21 22:24 - 00000478 _____ C:\Users\Xplosion\Desktop\defogger_disable.log
2013-07-21 22:24 - 2013-07-21 22:24 - 00000000 _____ C:\Users\Xplosion\defogger_reenable
2013-07-21 22:24 - 2012-10-27 23:31 - 00000000 ____D C:\Users\Xplosion
2013-07-21 22:22 - 2013-07-21 22:22 - 00050477 _____ C:\Users\Xplosion\Desktop\Defogger.exe
2013-07-21 22:11 - 2013-07-21 22:11 - 00602112 _____ (OldTimer Tools) C:\Users\Xplosion\Desktop\OTL.exe
2013-07-21 22:03 - 2012-10-28 02:14 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-21 15:12 - 2013-05-16 07:27 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-07-21 15:05 - 2013-07-21 15:05 - 00002336 _____ C:\Users\Xplosion\Desktop\Sicherer Zahlungsverkehr.lnk
2013-07-21 15:04 - 2013-07-21 15:04 - 00001146 _____ C:\Users\Public\Desktop\Kaspersky Internet Security 2013.lnk
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Windows\ELAMBKUP
2013-07-21 15:02 - 2013-07-21 15:02 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-07-21 14:58 - 2012-10-28 01:48 - 00001912 _____ C:\Windows\epplauncher.mif
2013-07-20 23:44 - 2012-10-28 03:48 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\.purple
2013-07-17 18:35 - 2013-07-16 21:56 - 00000000 ____D C:\ProgramData\Origin
2013-07-17 18:35 - 2013-07-16 21:56 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-07-17 18:31 - 2013-07-17 18:31 - 00001242 _____ C:\Users\Public\Desktop\FIFA 13.lnk
2013-07-17 18:30 - 2013-07-17 18:29 - 00017627 _____ C:\Windows\DirectX.log
2013-07-16 22:50 - 2013-07-16 21:58 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-07-16 22:49 - 2013-07-16 21:58 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\Origin
2013-07-16 22:37 - 2013-07-16 21:58 - 00000000 ____D C:\Users\Xplosion\AppData\Local\Origin
2013-07-16 21:56 - 2013-07-16 21:56 - 00000975 _____ C:\Users\Public\Desktop\Origin.lnk
2013-07-16 21:55 - 2013-07-16 21:55 - 00000000 ____D C:\Users\Xplosion\Desktop\FIFA 13
2013-07-16 20:57 - 2013-07-16 20:57 - 00000000 _____ C:\Windows\setuperr.log
2013-07-16 20:57 - 2012-10-28 00:18 - 00000000 ____D C:\Windows\Panther
2013-07-16 20:57 - 2009-07-14 06:45 - 00294848 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-16 20:56 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-16 20:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-16 20:56 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-14 17:59 - 2012-10-31 18:58 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-14 17:52 - 2012-10-28 01:57 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\AIMP3
2013-07-14 16:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-07-14 16:01 - 2013-03-16 01:52 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\vlc
2013-07-14 15:59 - 2013-07-14 15:59 - 00000000 ____D C:\Users\Xplosion\AppData\Roaming\dvdcss
2013-07-14 15:38 - 2013-07-14 15:38 - 00000000 ____D C:\Users\Xplosion\Desktop\Die.vielen.Abenteuer.von.Winnie.Pooh.1977.German.DL.Untouched.DVD9
2013-07-14 14:54 - 2012-10-28 02:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-08 22:24 - 2012-10-30 22:58 - 00000000 ____D C:\Program Files\CCleaner
2013-07-08 22:21 - 2012-10-28 02:16 - 00000000 ____D C:\Program Files (x86)\Opera
2013-07-08 20:51 - 2013-07-08 20:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-07-01 21:25 - 2013-07-01 21:25 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-07-01 21:25 - 2012-10-28 01:04 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-07-01 21:09 - 2013-07-01 21:09 - 00263592 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-07-01 21:09 - 2013-07-01 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-07-01 21:09 - 2013-07-01 21:09 - 00000000 ____D C:\Program Files (x86)\Java
2013-07-01 21:09 - 2013-01-22 22:47 - 00867240 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-07-01 21:09 - 2013-01-22 22:47 - 00789416 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-07-01 21:06 - 2013-07-01 21:06 - 00000000 ____D C:\Users\Xplosion\AppData\Local\NVIDIA
2013-07-01 21:01 - 2012-10-28 01:02 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-29 10:38 - 2012-10-27 23:32 - 00001405 _____ C:\Users\Xplosion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-06-29 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-27 22:24 - 2013-06-27 22:24 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-06-27 22:24 - 2013-06-27 22:24 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-27 22:24 - 2013-06-27 22:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-27 22:24 - 2013-06-27 22:24 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-27 22:24 - 2013-06-27 22:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-06-27 22:24 - 2013-06-27 22:24 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-27 22:23 - 2013-06-27 22:23 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-27 22:23 - 2013-06-27 22:23 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-24 21:34 - 2012-10-28 01:57 - 00000000 ____D C:\Program Files (x86)\AIMP3
2013-06-24 21:30 - 2012-10-31 22:13 - 00268952 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-06-24 21:30 - 2012-10-31 22:12 - 00268952 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-14 16:47
==================== End Of Log ============================
--- --- --- Anbei einmal ein Bild was auftaucht, sofern ich Kaspersky beende, ist das normal mit den ganzen Netzwerkverbindungen? Gruß Xplosion |
|
25.07.2013, 07:27
| #14 |
| /// the machine /// TB-Ausbilder | HEUR:Exploit.Java.CVE-2013-2423.gen Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Normal nicht. Deinstalliere mal KAV und installiere es neu. Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool Setze einen Haken bei folgenden Einträgen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.07.2013, 18:41
| #15 | |
| | HEUR:Exploit.Java.CVE-2013-2423.gen Hier die log Zitat:
|
|
| Themen zu HEUR:Exploit.Java.CVE-2013-2423.gen |
| 7-zip, adobe reader xi, bho, ebanking, error, fehler, firefox, flash player, google, helper, heur, home, homepage, iexplore.exe, install.exe, logfile, mozilla, object, origin, plug-in, programm, realtek, registry, scan, security, software, svchost.exe, taskhost.exe, tastatur, trojaner, trojaner board, windows |
Linear-Darstellung
