Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Telekom e-mail Zeus/ZBot

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 15.11.2013, 18:10   #1
Rasheel
 
Telekom e-mail Zeus/ZBot - Standard

Telekom e-mail Zeus/ZBot



Hallo Schädlingsbekämpfer ich bzw. meine Eltern erhielt diese Woche eine email der Telekom bzw. des Abuse-Teams von meinem Internetanschluss aus werde ein Computer betrieben der mit dem Zeus/ZBot -Trojaner infiziert sei. Vor kurzem hab ich den Virenschutz von der Bezahlversion von Avira auf Avast! gewechselt weil Avira ständig Virenmeldungen brachte sie aber nicht löschen konnte, seit Avast! einmal nach dem scan gemeldet hatte und alles gelöscht nichts mehr. Falls ich wieder auf Avira wechseln sollte bitte bescheid sagen.
So und jetzt zu den logs.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-11-2013
Ran by Computer (administrator) on COMPUTER-PC on 15-11-2013 17:45:05
Running from C:\Users\Computer\Desktop
Microsoft Windows 7 Ultimate (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Geek Software GmbH) C:\Program Files\pdf24\pdf24.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
(Geek Software GmbH) C:\Program Files\pdf24\pdf24-Assistant.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\Run: [NBAgent] - C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248 2010-09-03] (Nero AG)
HKLM\...\Run: [PDFPrint] - C:\Program Files\pdf24\pdf24.exe [220552 2011-06-27] (Geek Software GmbH)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [EPSON Stylus DX4200 Series] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /F "C:\Windows\TEMP\E_SEC1D.tmp" /EF "HKLM"
HKLM\...\Run: [EPSON Stylus DX4200 Series (Kopie 1)] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /F "C:\Windows\TEMP\E_SD311.tmp" /EF "HKLM"
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-07] (AVAST Software)
Startup: C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x81BE1674593BCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM - DefaultScope {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=886B4A40-384E-486C-9EBB-32DA57CEF61A&ind=2013073014&n=77fd0e76&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKLM - {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=886B4A40-384E-486C-9EBB-32DA57CEF61A&ind=2013073014&n=77fd0e76&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=886B4A40-384E-486C-9EBB-32DA57CEF61A&ind=2013073014&n=77fd0e76&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {A447CA04-D881-4D0E-8761-3FB7E7C0861D} URL = hxxp://avira.search.ask.com/web?p2=%5EB0Q%5EYYYYYY%5EYY%5EDE&gct=sb&itbv=12.2.2.663&o=APN11074&tpid=AVIRA-V7&apn_uid=5F65C982-54AD-43FA-A0D6-1289E73CC8DB&apn_ptnrs=%5EB0Q&apn_dtid=%5EYYYYYY%5EYY%5EDE&apn_dbr=ie_8.0.7600.16385&doi=2013-08-11&trgb=ALL&q={searchTerms}&psv=
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-26] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\gmi8sv07.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Computer\AppData\Roaming\Mozilla\Firefox\Profiles\gmi8sv07.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-07] (AVAST Software)

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [35656 2013-11-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2013-11-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2013-11-07] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-11-07] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [774392 2013-11-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [403440 2013-11-08] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2013-11-07] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178304 2013-11-07] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-11] (Avira GmbH)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-15 17:45 - 2013-11-15 17:45 - 00008954 _____ C:\Users\Computer\Desktop\FRST.txt
2013-11-15 17:44 - 2013-11-15 17:44 - 00000000 ____D C:\FRST
2013-11-15 17:43 - 2013-11-15 17:43 - 01090529 _____ (Farbar) C:\Users\Computer\Downloads\FRST.exe
2013-11-15 17:43 - 2013-11-15 17:43 - 01090529 _____ (Farbar) C:\Users\Computer\Desktop\FRST.exe
2013-11-15 17:42 - 2013-11-15 17:43 - 00000478 _____ C:\Users\Computer\Desktop\defogger_disable.log
2013-11-15 17:42 - 2013-11-15 17:42 - 00050477 _____ C:\Users\Computer\Downloads\Defogger.exe
2013-11-15 17:42 - 2013-11-15 17:42 - 00000000 _____ C:\Users\Computer\defogger_reenable
2013-11-07 21:29 - 2013-11-07 21:29 - 00001750 _____ C:\Users\Public\Desktop\Browserwahl.lnk
2013-11-07 20:16 - 2013-11-07 20:20 - 00000000 ____D C:\Windows\system32\MRT
2013-11-07 20:16 - 2013-09-26 02:19 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-07 20:06 - 2012-03-01 06:53 - 00019312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-11-07 20:06 - 2012-03-01 06:49 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-11-07 20:06 - 2012-03-01 06:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-11-07 20:05 - 2012-03-01 06:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-07 20:03 - 2013-11-07 20:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-07 20:03 - 2013-11-07 20:03 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-07 20:03 - 2013-11-07 20:03 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-07 20:03 - 2013-11-07 20:03 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-07 20:03 - 2013-11-07 20:03 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-07 20:02 - 2013-11-07 20:02 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 01619456 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-11-07 20:02 - 2013-11-07 20:02 - 01495040 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00801792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00728448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-11-07 20:02 - 2013-11-07 20:02 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00219008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-11-07 20:02 - 2013-11-07 20:02 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-11-07 20:00 - 2013-11-07 20:05 - 00004610 _____ C:\Windows\IE9_main.log
2013-11-07 20:00 - 2010-02-11 08:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-11-07 19:55 - 2013-11-07 19:56 - 00293702 _____ C:\Windows\msxml4-KB954430-enu.LOG
2013-11-07 19:55 - 2013-11-07 19:55 - 00296580 _____ C:\Windows\msxml4-KB973688-enu.LOG
2013-11-07 19:55 - 2013-11-07 19:55 - 00000000 ____D C:\Program Files\MSXML 4.0
2013-11-07 19:51 - 2013-02-12 16:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-07 19:51 - 2013-02-12 16:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-11-07 19:51 - 2013-02-12 14:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-07 19:50 - 2011-10-26 05:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-11-07 19:50 - 2011-10-26 05:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-11-07 19:48 - 2012-04-02 05:46 - 03958128 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-11-07 19:48 - 2012-04-02 05:46 - 03902320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-11-07 19:48 - 2012-04-02 03:43 - 02342400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-11-07 19:48 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-11-07 19:48 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-11-07 19:48 - 2009-09-03 08:04 - 01320960 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2013-11-07 19:48 - 2009-08-19 08:20 - 00507568 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-11-07 19:48 - 2009-08-19 08:20 - 00442920 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-11-07 19:48 - 2009-08-03 06:35 - 02613248 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-11-07 19:47 - 2013-01-04 05:55 - 01287528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-11-07 19:47 - 2013-01-04 05:55 - 00187240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-11-07 19:47 - 2012-06-09 05:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-11-07 19:47 - 2012-03-03 06:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-11-07 19:47 - 2012-03-03 06:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-11-07 19:47 - 2012-03-03 06:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-11-07 19:47 - 2012-03-03 06:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-11-07 19:47 - 2012-03-03 06:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-11-07 19:47 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-11-07 19:47 - 2012-02-15 05:22 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-11-07 19:47 - 2012-02-15 05:22 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-11-07 19:47 - 2011-12-16 08:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-11-07 19:47 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2013-11-07 19:47 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2013-11-07 19:46 - 2012-08-11 00:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-11-07 19:46 - 2012-07-04 22:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-11-07 19:46 - 2012-07-04 22:23 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-11-07 19:46 - 2012-07-04 22:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-11-07 19:46 - 2011-06-15 10:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2013-11-07 19:46 - 2011-06-15 10:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-11-07 19:46 - 2011-06-15 10:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-11-07 19:46 - 2011-06-15 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-11-07 19:46 - 2011-06-15 10:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-11-07 19:46 - 2011-04-27 03:33 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2013-11-07 19:46 - 2010-12-23 06:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-11-07 19:46 - 2010-12-23 06:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-11-07 19:46 - 2010-12-23 06:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-11-07 19:46 - 2009-12-19 10:02 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2013-11-07 19:46 - 2009-12-19 10:02 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2013-11-07 19:46 - 2009-12-19 10:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2013-11-07 19:46 - 2009-12-19 10:02 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2013-11-07 19:46 - 2009-12-19 10:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2013-11-07 19:46 - 2009-12-19 10:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2013-11-07 19:46 - 2009-12-19 10:02 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2013-11-07 19:45 - 2012-11-20 06:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-07 19:45 - 2012-11-02 05:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-11-07 19:45 - 2012-09-06 17:48 - 00245616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2013-11-07 19:45 - 2012-05-14 05:37 - 00768512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-11-07 19:45 - 2011-11-17 06:48 - 00134000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-07 19:45 - 2011-11-17 06:48 - 00067440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-07 19:45 - 2011-11-17 06:42 - 00369352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-07 19:45 - 2011-11-17 06:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-11-07 19:45 - 2011-11-17 06:39 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-07 19:45 - 2011-11-17 06:39 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-07 19:45 - 2011-11-17 06:39 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-07 19:45 - 2011-11-17 06:39 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-07 19:45 - 2011-11-17 06:38 - 01037312 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-07 19:45 - 2011-11-17 06:36 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-07 19:45 - 2011-05-03 05:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-11-07 19:45 - 2011-02-23 06:05 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-11-07 19:45 - 2011-02-23 06:05 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-11-07 19:45 - 2011-02-23 06:05 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-11-07 19:45 - 2011-02-23 06:05 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-11-07 19:45 - 2010-10-27 05:40 - 01289536 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-11-07 19:44 - 2012-11-09 05:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-11-07 19:44 - 2011-02-12 06:30 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-11-07 19:44 - 2010-12-18 06:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-07 19:44 - 2010-08-21 06:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2013-11-07 19:44 - 2010-08-21 06:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-11-07 19:44 - 2010-05-05 07:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2013-11-07 19:44 - 2009-12-08 12:32 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2013-11-07 19:44 - 2009-10-19 15:10 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2013-11-07 19:44 - 2009-10-19 15:10 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-11-07 19:44 - 2009-07-30 05:44 - 00293888 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-11-07 19:43 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-11-07 19:43 - 2012-04-26 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-11-07 19:43 - 2012-04-26 05:48 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-11-07 19:43 - 2012-04-26 05:43 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-11-07 19:43 - 2012-03-17 08:20 - 00056688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-11-07 19:43 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-11-07 19:43 - 2011-10-15 06:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-11-07 19:43 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-11-07 19:43 - 2011-03-11 06:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-11-07 19:43 - 2011-03-11 06:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-11-07 19:43 - 2010-10-16 05:41 - 00101760 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-11-07 19:43 - 2010-08-27 06:46 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2013-11-07 19:43 - 2010-08-27 04:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-11-07 19:43 - 2010-08-27 04:30 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-11-07 19:43 - 2010-08-27 04:30 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-11-07 19:43 - 2010-03-05 08:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2013-11-07 19:43 - 2010-01-09 07:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-11-07 19:24 - 2013-01-04 05:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-11-07 19:24 - 2013-01-04 05:46 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-11-07 19:24 - 2013-01-04 05:46 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 03:59 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-11-07 19:24 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-11-07 19:24 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-11-07 19:10 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-11-07 19:10 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-11-07 19:10 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-11-07 19:10 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-11-07 19:10 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-11-07 19:10 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-11-07 19:10 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-11-07 19:10 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-11-07 19:10 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-11-07 19:08 - 2013-11-07 19:08 - 00002119 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-07 19:08 - 2013-11-07 19:08 - 00000000 ____D C:\Users\Computer\AppData\Roaming\AVAST Software
2013-11-07 19:07 - 2013-11-08 08:43 - 00403440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00774392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00269216 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-07 19:07 - 2013-11-07 19:07 - 00178304 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-11-07 19:07 - 2013-11-07 19:07 - 00035656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-07 19:06 - 2013-11-07 19:06 - 00000000 ____D C:\Program Files\AVAST Software
2013-11-07 18:59 - 2013-11-07 19:00 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-07 18:57 - 2013-11-07 18:57 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-07 18:55 - 2013-11-07 18:56 - 87227720 _____ (AVAST Software) C:\Users\Computer\Downloads\avast_free_antivirus_setup(1).exe
2013-11-07 18:54 - 2013-11-07 18:57 - 87227720 _____ (AVAST Software) C:\Users\Computer\Downloads\avast_free_antivirus_setup.exe
2013-11-03 12:56 - 2013-11-03 12:56 - 00000000 ____D C:\Users\Computer\AppData\Local\RapidSolution

==================== One Month Modified Files and Folders =======

2013-11-15 17:45 - 2013-11-15 17:45 - 00008954 _____ C:\Users\Computer\Desktop\FRST.txt
2013-11-15 17:44 - 2013-11-15 17:44 - 00000000 ____D C:\FRST
2013-11-15 17:43 - 2013-11-15 17:43 - 01090529 _____ (Farbar) C:\Users\Computer\Downloads\FRST.exe
2013-11-15 17:43 - 2013-11-15 17:43 - 01090529 _____ (Farbar) C:\Users\Computer\Desktop\FRST.exe
2013-11-15 17:43 - 2013-11-15 17:42 - 00000478 _____ C:\Users\Computer\Desktop\defogger_disable.log
2013-11-15 17:42 - 2013-11-15 17:42 - 00050477 _____ C:\Users\Computer\Downloads\Defogger.exe
2013-11-15 17:42 - 2013-11-15 17:42 - 00000000 _____ C:\Users\Computer\defogger_reenable
2013-11-15 17:42 - 2011-07-04 17:09 - 00000000 ____D C:\Users\Computer
2013-11-15 17:38 - 2011-07-04 16:49 - 01804797 _____ C:\Windows\WindowsUpdate.log
2013-11-15 17:27 - 2011-07-05 15:43 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-15 16:53 - 2012-07-20 16:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-15 15:25 - 2009-07-14 05:34 - 00010480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-15 15:25 - 2009-07-14 05:34 - 00010480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-15 15:20 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-15 15:20 - 2009-07-14 05:39 - 00151274 _____ C:\Windows\setupact.log
2013-11-12 18:02 - 2011-07-04 17:13 - 01480602 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-12 18:01 - 2012-07-23 20:31 - 00000000 ____D C:\Users\Computer\Documents\Helga
2013-11-11 15:33 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-08 11:40 - 2011-07-09 22:12 - 00000000 ____D C:\Users\Computer\Documents\Allgemein
2013-11-08 08:43 - 2013-11-07 19:07 - 00403440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2013-11-07 22:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-11-07 21:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-07 21:30 - 2011-07-04 17:09 - 00001409 _____ C:\Users\Computer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-07 21:29 - 2013-11-07 21:29 - 00001750 _____ C:\Users\Public\Desktop\Browserwahl.lnk
2013-11-07 21:28 - 2009-07-14 05:33 - 00450080 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-07 21:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-11-07 20:23 - 2011-07-07 22:32 - 00000000 ____D C:\Users\Computer\AppData\Roaming\Juti
2013-11-07 20:20 - 2013-11-07 20:16 - 00000000 ____D C:\Windows\system32\MRT
2013-11-07 20:05 - 2013-11-07 20:00 - 00004610 _____ C:\Windows\IE9_main.log
2013-11-07 20:03 - 2013-11-07 20:03 - 12336128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-07 20:03 - 2013-11-07 20:03 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-07 20:03 - 2013-11-07 20:03 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-07 20:03 - 2013-11-07 20:03 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 01104896 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-07 20:03 - 2013-11-07 20:03 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-07 20:03 - 2013-11-07 20:03 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-07 20:03 - 2013-11-07 20:03 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-07 20:03 - 2013-11-07 20:03 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-07 20:02 - 2013-11-07 20:02 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 01619456 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-11-07 20:02 - 2013-11-07 20:02 - 01495040 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00801792 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00728448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-11-07 20:02 - 2013-11-07 20:02 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00219008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-11-07 20:02 - 2013-11-07 20:02 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2013-11-07 20:02 - 2013-11-07 20:02 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-11-07 19:56 - 2013-11-07 19:55 - 00293702 _____ C:\Windows\msxml4-KB954430-enu.LOG
2013-11-07 19:55 - 2013-11-07 19:55 - 00296580 _____ C:\Windows\msxml4-KB973688-enu.LOG
2013-11-07 19:55 - 2013-11-07 19:55 - 00000000 ____D C:\Program Files\MSXML 4.0
2013-11-07 19:08 - 2013-11-07 19:08 - 00002119 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-07 19:08 - 2013-11-07 19:08 - 00000000 ____D C:\Users\Computer\AppData\Roaming\AVAST Software
2013-11-07 19:07 - 2013-11-07 19:07 - 00774392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00269216 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-07 19:07 - 2013-11-07 19:07 - 00178304 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00070384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00057672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00049944 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-11-07 19:07 - 2013-11-07 19:07 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-11-07 19:07 - 2013-11-07 19:07 - 00035656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-07 19:06 - 2013-11-07 19:06 - 00000000 ____D C:\Program Files\AVAST Software
2013-11-07 19:05 - 2011-07-04 23:49 - 00026444 _____ C:\Windows\PFRO.log
2013-11-07 19:04 - 2011-07-05 22:12 - 00000000 ____D C:\ProgramData\Avira
2013-11-07 19:00 - 2013-11-07 18:59 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-07 18:57 - 2013-11-07 18:57 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-07 18:57 - 2013-11-07 18:54 - 87227720 _____ (AVAST Software) C:\Users\Computer\Downloads\avast_free_antivirus_setup.exe
2013-11-07 18:56 - 2013-11-07 18:55 - 87227720 _____ (AVAST Software) C:\Users\Computer\Downloads\avast_free_antivirus_setup(1).exe
2013-11-03 12:56 - 2013-11-03 12:56 - 00000000 ____D C:\Users\Computer\AppData\Local\RapidSolution
2013-11-03 00:43 - 2011-07-10 13:07 - 00000000 ____D C:\ProgramData\tmp
2013-11-03 00:42 - 2011-07-10 13:07 - 00000000 ____D C:\ProgramData\hps

Some content of TEMP:
====================
C:\Users\Computer\AppData\Local\Temp\avgnt.exe
C:\Users\Computer\AppData\Local\Temp\ICReinstall_Firefox_Setup.exe
C:\Users\Computer\AppData\Local\Temp\pdf24-creator-update.exe
C:\Users\Computer\AppData\Local\Temp\setup.exe
C:\Users\Computer\AppData\Local\Temp\update.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2013-11-07 19:48] - [2009-08-03 06:35] - 2613248 ____A (Microsoft Corporation) B95EEB0F4E5EFBF1038A35B3351CF047

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!


LastRegBack: 2013-11-10 11:21

==================== End Of Log ============================



Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-11-2013
Ran by Computer at 2013-11-15 17:45:42
Running from C:\Users\Computer\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (Version: 11.9.900.117)
Adobe Reader 9 - Deutsch (Version: 9.0.0)
Apple Application Support (Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (Version: 2.1.3.127)
avast! Free Antivirus (Version: 9.0.2007)
Bonjour (Version: 3.0.0.10)
Corel Graphics - Windows Shell Extension (Version: 15.0.0.487)
Corel Graphics - Windows Shell Extension (Version: 15.0.487)
CorelDRAW Graphics Suite X5 - Capture (Version: 15.0)
CorelDRAW Graphics Suite X5 - Common (Version: 15.0)
CorelDRAW Graphics Suite X5 - Connect (Version: 15.0)
CorelDRAW Graphics Suite X5 - Custom Data (Version: 15.0)
CorelDRAW Graphics Suite X5 - DE (Version: 15.0)
CorelDRAW Graphics Suite X5 - Draw (Version: 15.0)
CorelDRAW Graphics Suite X5 - Filters (Version: 15.0)
CorelDRAW Graphics Suite X5 - FontNav (Version: 15.0)
CorelDRAW Graphics Suite X5 - IPM (Version: 15.0)
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (Version: 15.0)
CorelDRAW Graphics Suite X5 - Photozoom Plugin (Version: 15.0)
CorelDRAW Graphics Suite X5 - Redist (Version: 15.0)
CorelDRAW Graphics Suite X5 - Setup Files (Version: 15.0)
CorelDRAW Graphics Suite X5 - VBA (Version: 15.0)
CorelDRAW Graphics Suite X5 - VideoBrowser (Version: 15.0)
CorelDRAW Graphics Suite X5 - VSTA (Version: 15.0)
CorelDRAW Graphics Suite X5 - WT (Version: 15.0)
CorelDRAW Graphics Suite X5 (Version: 15.0)
CorelDRAW(R) Graphics Suite X5 (Version: 15.0.0.486)
Epson Easy Photo Print 2 (Version: 2.2.3.1)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (Version: 1.00.0000)
EPSON Scan
EPSON-Drucker-Software
High-Definition Video Playback (Version: 7.1.12500.33.0)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (Version: 1)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1892)
Intel(R) TV Wizard
iTunes (Version: 11.1.1.11)
Mein CEWE FOTOBUCH
Microsoft AutoRoute 2005 (Version: 12.00.07.1200)
Microsoft Digital Image Library 9 - Blocker (Version: 9.00.0000)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Picture It! Foto Premium 10 (Version: 10.0.0715)
Microsoft Picture It!-Bibliothek 10 (Version: 10.0.0715)
Microsoft Silverlight (Version: 4.1.10329.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (Version: 9.0.30729)
Microsoft Works (Version: 08.04.0702)
Mozilla Firefox 24.0 (x86 de) (Version: 24.0)
Mozilla Maintenance Service (Version: 24.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Müller Foto (Version: 5.0.4)
Nero 10 ClipartPack (Version: 10.2.10000.11.0)
Nero 10 Menu TemplatePack 1 (Version: 10.2.10000.0.0)
Nero 10 Menu TemplatePack 2 (Version: 10.2.10000.0.0)
Nero 10 Menu TemplatePack 3 (Version: 10.2.10000.0.0)
Nero 10 Menu TemplatePack Basic (Version: 10.2.10000.0.0)
Nero 10 Movie ThemePack 1 (Version: 10.2.10000.11.0)
Nero 10 Movie ThemePack 2 (Version: 10.2.10000.12.0)
Nero 10 Movie ThemePack 3 (Version: 10.2.10000.0.0)
Nero 10 Movie ThemePack 4 (Version: 10.2.10000.11.0)
Nero 10 Movie ThemePack Basic (Version: 10.2.10000.0.0)
Nero 10 PiP EffectPack 1 (Version: 10.2.10000.0.0)
Nero 10 Sample ImagePack (Version: 10.2.10000.11.0)
Nero 10 Sample Videos (Version: 10.2.10000.11.0)
Nero 10 Video TransitionPack 1 (Version: 10.2.10000.0.0)
Nero BackItUp 10 (Version: 5.6.10600.6.100)
Nero BackItUp 10 Help (CHM) (Version: 10.2.10800)
Nero Burning ROM 10 (Version: 10.2.10500.7.100)
Nero BurningROM 10 Help (CHM) (Version: 10.2.10600)
Nero BurnRights 10 (Version: 4.2.10300.0.102)
Nero BurnRights 10 Help (CHM) (Version: 10.2.10700)
Nero Control Center 10 (Version: 10.2.0.0.0)
Nero ControlCenter 10 Help (CHM) (Version: 10.2.10600)
Nero Core Components 10 (Version: 2.0.17200.8.0)
Nero CoverDesigner 10 (Version: 5.2.10400.4.100)
Nero CoverDesigner 10 Help (CHM) (Version: 10.2.10600)
Nero DiscCopy Gadget 10 (Version: 3.2.10300.5.100)
Nero DiscCopyGadget 10 Help (CHM) (Version: 10.2.10500)
Nero DiscSpeed 10 (Version: 6.2.10200.0.100)
Nero DiscSpeed 10 Help (CHM) (Version: 10.2.10600)
Nero Dolby Files 10 (Version: 2.0.12001.0.10)
Nero Express 10 (Version: 10.2.10500.7.100)
Nero Express 10 Help (CHM) (Version: 10.2.10700)
Nero InfoTool 10 (Version: 7.2.10200.4.100)
Nero InfoTool 10 Help (CHM) (Version: 10.2.10700)
Nero MediaHub 10 (Version: 1.2.10800.14.100)
Nero MediaHub 10 Help (CHM) (Version: 10.2.10500)
Nero Multimedia Suite 10 Platinum HD (Version: 10.5.10000)
Nero Recode 10 (Version: 4.8.10400.3.100)
Nero Recode 10 Help (CHM) (Version: 10.2.10500)
Nero RescueAgent 10 (Version: 3.2.10300.3.100)
Nero RescueAgent 10 Help (CHM) (Version: 10.2.10700)
Nero SoundTrax 10 (Version: 4.8.10200.1.100)
Nero SoundTrax 10 Help (CHM) (Version: 10.2.10600)
Nero StartSmart 10 (Version: 10.2.10400.5.100)
Nero StartSmart 10 Help (CHM) (Version: 10.2.10700)
Nero Vision 10 (Version: 7.2.14000.4.100)
Nero Vision 10 Help (CHM) (Version: 10.2.10800)
Nero WaveEditor 10 (Version: 5.8.10200.1.100)
Nero WaveEditor 10 Help (CHM) (Version: 10.2.10600)
PDF24 Creator 3.2.0
QuickTime (Version: 7.69.80.9)
Setup-Start von Microsoft Works 2005
Ulead Photo Explorer 8.0 SE Basic (Version: 8.0)
Visual Basic for Applications (R) Core - English (Version: 6.4.99.69)
Visual Basic for Applications (R) Core - German (Version: 6.4.99.69)
Visual Basic for Applications (R) Core (Version: 6.4.99.69)
VLC media player 1.0.2 (Version: 1.0.2)
WinRAR Archivierer
Works Update (Version: 8.0.0.0000)
Xilisoft iPhone Kontakt Sichern (Version: 1.2.8.20130422)

==================== Restore Points =========================

25-09-2013 15:27:28 Geplanter Prüfpunkt
06-10-2013 12:47:30 Installed iTunes
17-10-2013 15:37:09 Geplanter Prüfpunkt
25-10-2013 10:59:55 Geplanter Prüfpunkt
05-11-2013 08:56:37 Geplanter Prüfpunkt
07-11-2013 18:06:42 avast! antivirus system restore point
07-11-2013 18:09:56 Windows Update
07-11-2013 18:52:28 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {6F5503FB-7858-4342-A6D0-180E3C3EFB04} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {807712D0-BD8C-43C1-A5AC-664E438F5533} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-07] (AVAST Software)
Task: {DC93FEC6-44F2-4F45-9503-DAAD6C1F3636} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-11] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2011-07-05 22:11 - 2004-01-25 15:51 - 00121344 _____ () C:\Program Files\WinRAR\rarext.dll
2013-09-13 18:51 - 2013-09-13 18:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 18:51 - 2013-09-13 18:51 - 01242952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-07 19:07 - 2013-11-07 19:07 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2006-10-26 20:30 - 2006-10-26 20:30 - 00065312 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2006-10-27 14:35 - 2006-10-27 14:35 - 00436512 _____ () C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2006-10-27 14:16 - 2006-10-27 14:16 - 00138512 _____ () C:\Program Files\Microsoft Office\Office12\OUTLCTL.DLL
2006-10-26 12:56 - 2006-10-26 12:56 - 00757008 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2011-07-05 01:38 - 2011-06-27 07:28 - 00105352 _____ () C:\Program Files\pdf24\OperationUI.dll
2011-07-05 01:38 - 2011-06-27 07:28 - 00064392 _____ () C:\Program Files\pdf24\zlib1.dll
2008-06-12 01:47 - 2008-06-12 01:47 - 07323648 _____ () c:\program files\adobe\reader 9.0\reader\rdlang32.deu
2008-06-12 01:22 - 2008-06-12 01:22 - 01708032 _____ () C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Annots.DEU
2008-06-11 23:00 - 2008-06-11 23:00 - 00237568 _____ () C:\Program Files\Adobe\Reader 9.0\Reader\sqlite.dll
2008-06-12 01:27 - 2008-06-12 01:27 - 00005120 _____ () C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.DEU
2008-06-12 01:22 - 2008-06-12 01:22 - 00102400 _____ () C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.DEU
2011-07-05 15:43 - 2013-09-11 03:26 - 03279768 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/15/2013 00:24:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 39985771

Error: (11/15/2013 00:24:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 39985771

Error: (11/15/2013 00:24:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/13/2013 04:03:57 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 9.0.8112.16514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: c84

Startzeit: 01cee081854ed777

Endzeit: 16

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID:

Error: (11/12/2013 01:05:02 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 48922

Error: (11/12/2013 01:05:02 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 48922

Error: (11/12/2013 01:05:02 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2013 01:05:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 47814

Error: (11/12/2013 01:05:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 47814

Error: (11/12/2013 01:05:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (11/12/2013 06:00:37 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (11/12/2013 06:00:37 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (11/12/2013 06:00:36 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (11/12/2013 06:00:36 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (11/07/2013 09:29:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet:
%%16405

Error: (11/07/2013 08:24:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB979687)

Error: (11/07/2013 08:24:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB2753842)

Error: (11/07/2013 08:24:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB2840149)

Error: (11/07/2013 08:24:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB2536275)

Error: (11/07/2013 08:24:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706ba fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB2503665)


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 50%
Total physical RAM: 1977.98 MB
Available physical RAM: 974.27 MB
Total Pagefile: 3955.95 MB
Available Pagefile: 2815.82 MB
Total Virtual: 2047.88 MB
Available Virtual: 1879.44 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:200.34 GB) (Free:155.31 GB) NTFS
Drive d: () (Fixed) (Total:97.66 GB) (Free:92.52 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: D0327A06)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=98 GB) - (Type=07 NTFS)

==================== End Of Log ============================



GMER hab ich nicht angehängt, da ich keine Meldung oder sonstiges erhalten habe nach start desselben. Mfg Rasheel

 

Themen zu Telekom e-mail Zeus/ZBot
adblock, adobe, antivirus, avg, avira, bonjour, browser, computer, defender, e-mail, email, excel, farbar recovery scan tool, firefox, flash player, homepage, icreinstall, iexplore.exe, mozilla, plug-in, registry, scan, schutz, security, services.exe, software, svchost.exe, system, windows




Ähnliche Themen: Telekom e-mail Zeus/ZBot


  1. Windows 7: Telekom Abuse-Team Mail wegen Zeus/ZBot
    Log-Analyse und Auswertung - 07.10.2015 (12)
  2. Windows 7: Telekom E-Mail betreffend Zeus/ZBot, AntiVir findet nichts
    Plagegeister aller Art und deren Bekämpfung - 30.06.2015 (9)
  3. Telekom Brief Zeus/Zbot
    Log-Analyse und Auswertung - 26.05.2015 (32)
  4. Telekom E-Mail 'zeuS' 'Zbot'
    Log-Analyse und Auswertung - 01.02.2014 (3)
  5. Telekom Brief - ZeuS/ZBot Infektion
    Log-Analyse und Auswertung - 26.11.2013 (9)
  6. Win7: telekom E-Mail / ZeuS/ZBot-Schadprogramm
    Log-Analyse und Auswertung - 31.10.2013 (13)
  7. Sicherheitswarnung Telekom ZeuS/ZBot
    Plagegeister aller Art und deren Bekämpfung - 04.10.2013 (9)
  8. Zeus/ZBot Telekom email
    Plagegeister aller Art und deren Bekämpfung - 12.09.2013 (29)
  9. Trojaner Zeus/ZBot Telekom Abuse Brief und Mail
    Log-Analyse und Auswertung - 06.09.2013 (13)
  10. ZeuS/ZBot Warnung von der Telekom
    Log-Analyse und Auswertung - 30.05.2013 (23)
  11. Verdacht auf ZeuS/ZBot aufgrund von Telekom-Mail
    Plagegeister aller Art und deren Bekämpfung - 24.05.2013 (14)
  12. Telekom Brief Zeus/Zbot
    Plagegeister aller Art und deren Bekämpfung - 14.04.2013 (22)
  13. Telekom Warnung vor ZeuS/ZBot
    Log-Analyse und Auswertung - 05.03.2013 (15)
  14. Telekom Brief, ZeuS/ZBot
    Plagegeister aller Art und deren Bekämpfung - 22.02.2013 (16)
  15. Telekom-Hinweis auf ZeuS/ZBot
    Log-Analyse und Auswertung - 18.02.2013 (7)
  16. Telekom verweist auf ZeuS/ZBot
    Plagegeister aller Art und deren Bekämpfung - 13.11.2012 (11)
  17. Telekom beanstandet ZeuS/ZBot
    Plagegeister aller Art und deren Bekämpfung - 03.10.2012 (7)

Zum Thema Telekom e-mail Zeus/ZBot - Hallo Schädlingsbekämpfer ich bzw. meine Eltern erhielt diese Woche eine email der Telekom bzw. des Abuse-Teams von meinem Internetanschluss aus werde ein Computer betrieben der mit dem Zeus/ZBot -Trojaner infiziert - Telekom e-mail Zeus/ZBot...
Archiv
Du betrachtest: Telekom e-mail Zeus/ZBot auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.