| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: MS Security Essentials durch Gruppenrichtlinie blockiertWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
26.07.2014, 08:30
| #1 |
| |  MS Security Essentials durch Gruppenrichtlinie blockiert Hallo trojaner-board, mir ist gestern aufgefallen, dass mein Virenschutz (Security Essentials) nicht lief. Beim manuellen Start erschien die Nachricht, dass die Anwendung durch die Gruppenrichtlinien geblockt ist. Hab durch googeln etliche Beiträge mit dem gleichen Problem hier bei euch auf dem Board gefunden und hoffe dass ihr mir auch weiterhelfen könnt. Wie lange der Virenschutz schon deaktiviert ist, kann ich nicht sagen. Hab bis jetzt die Finger still gehalten und keinen der Schritte die in den anderen Threads beschrieben sind auf eigene Faust ausgeführt. Wie in dem "Einführungsartikel" beschrieben habe ich zunächst defogger laufen lassen, anschließend Scans mit FRST und GMER durchgeführt. Hier die Logfiles (additions.txt liefer ich nach, sonst ist Beitrag zu lang): Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-07-2014
Ran by Niko (administrator) on NIKO-LAPTOP on 26-07-2014 08:36:33
Running from C:\Users\Niko\Downloads
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Nitro PDF Software) C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(PixArt Imaging Incorporation) C:\Windows\Pixart\Pac7302\Monitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Microsoft Security Client <====== ATTENTION
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [93696 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [93696 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-487331408-663725159-894583802-1000\...\MountPoints2: {151fccb9-29e2-11e3-87d2-000e35ed71e7} - E:\LGAutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files\WISO\Steuersoftware 2014\mshaktuell.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1822E4986495CA01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - DefaultScope {4A7FBD4C-D75A-44EA-99C4-2D9008CAA810} URL = hxxp://www.google.de/search?q={searchTerms}
SearchScopes: HKCU - {4A7FBD4C-D75A-44EA-99C4-2D9008CAA810} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Niko\AppData\Roaming\Mozilla\Firefox\Profiles\22zjr0rc.default
FF Homepage: user_pref("browser.startup.homepage", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX OVS Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @nitropdf.com/NitroPDF - C:\Program Files\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin: @sony.com/ReaderDesktop - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - C:\Users\Niko\AppData\Roaming\Mozilla\Firefox\Profiles\22zjr0rc.default\Extensions\2020Player@2020Technologies.com [2011-01-22]
FF Extension: Skype extension for Firefox - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2014-05-27]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-05-27]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-05-27]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011-01-17]
FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011-01-17]
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-10]
CHR Extension: (Google Drive) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-10]
CHR Extension: (YouTube) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-10]
CHR Extension: (Google-Suche) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-10]
CHR Extension: (DivX HiQ) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae [2014-07-10]
CHR Extension: (Google Wallet) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-10]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2014-07-10]
CHR Extension: (Google Mail) - C:\Users\Niko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-10]
CHR HKLM\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2010-12-08]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2010-12-08]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [279776 2014-03-11] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe [196624 2012-11-29] (Nitro PDF Software)
S3 Sony SCSI Helper Service; C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-11-26] (Sony Corporation) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [25856 2012-03-07] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag.sys [23040 2012-03-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem.sys [27776 2012-03-06] (LG Electronics Inc.)
R2 DOSMEMIO; C:\Windows\system32\MEMIO.SYS [4300 2000-08-23] () [File not signed]
S3 Dot4Scan; C:\Windows\System32\DRIVERS\Dot4Scan.sys [10752 2009-07-14] (Microsoft Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231960 2014-01-25] (Microsoft Corporation)
S3 NinjaUSB; C:\Windows\System32\drivers\NinjaUSB.sys [24704 2010-01-15] () [File not signed]
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [461824 2009-04-28] (PixArt Imaging Inc.)
R0 R592; C:\Windows\System32\DRIVERS\R592.sys [54912 2004-01-18] (REDC)
R3 w29n51; C:\Windows\System32\DRIVERS\w29n51.sys [2216064 2009-11-11] (Intel® Corporation)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-26 08:36 - 2014-07-26 08:37 - 00012299 _____ () C:\Users\Niko\Downloads\FRST.txt
2014-07-26 08:35 - 2014-07-26 08:36 - 00000000 ____D () C:\FRST
2014-07-26 08:34 - 2014-07-26 08:34 - 00000470 _____ () C:\Users\Niko\Desktop\defogger_disable.log
2014-07-26 08:34 - 2014-07-26 08:34 - 00000000 _____ () C:\Users\Niko\defogger_reenable
2014-07-26 08:33 - 2014-07-26 00:40 - 00050477 _____ () C:\Users\Niko\Desktop\Defogger.exe
2014-07-26 08:27 - 2014-07-26 08:27 - 02347384 _____ (ESET) C:\Users\Niko\Downloads\esetsmartinstaller_deu.exe
2014-07-26 08:25 - 2014-07-26 08:26 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Niko\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-26 08:23 - 2014-07-26 08:24 - 05563277 _____ (Swearware) C:\Users\Niko\Downloads\ComboFix.exe
2014-07-26 08:22 - 2014-07-26 08:22 - 01354223 _____ () C:\Users\Niko\Downloads\adwcleaner_3.216.exe
2014-07-26 08:18 - 2014-07-26 08:18 - 00380416 _____ () C:\Users\Niko\Downloads\Gmer-19357.exe
2014-07-26 00:42 - 2014-07-26 00:43 - 01084416 _____ (Farbar) C:\Users\Niko\Downloads\FRST.exe
2014-07-26 00:40 - 2014-07-26 00:40 - 00050477 _____ () C:\Users\Niko\Downloads\Defogger.exe
2014-07-25 23:44 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 23:43 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-07-25 23:43 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-07-25 21:57 - 2014-07-25 21:57 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-25 21:57 - 2014-07-25 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-25 21:57 - 2014-07-25 21:57 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-07-24 21:56 - 2014-07-24 21:56 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-07-24 21:23 - 2014-07-24 21:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-24 20:44 - 2014-07-24 20:44 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-24 20:44 - 2014-07-24 20:44 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-24 20:44 - 2014-07-24 20:44 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-07-24 20:44 - 2014-07-24 20:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-07-24 20:44 - 2014-07-24 20:44 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-07-24 20:44 - 2014-07-24 20:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-07-24 20:43 - 2014-07-24 20:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-07-24 20:41 - 2014-07-24 20:41 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-07-24 20:41 - 2014-07-24 20:41 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-07-24 20:41 - 2014-07-24 20:41 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-07-24 20:41 - 2014-07-24 20:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-07-24 20:41 - 2014-07-24 20:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-07-24 20:39 - 2014-07-24 20:39 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-07-24 20:31 - 2014-07-24 20:31 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-07-24 20:28 - 2014-07-24 20:53 - 00013843 _____ () C:\Windows\IE11_main.log
2014-07-24 19:35 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-07-24 19:35 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-07-24 19:35 - 2013-11-26 13:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-07-24 19:35 - 2013-04-12 15:45 - 01211752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-07-24 19:34 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-07-24 19:34 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-07-24 19:34 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-07-24 19:34 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-07-24 19:34 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-07-24 19:34 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-07-24 19:34 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-07-24 19:34 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-07-24 19:33 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-07-24 19:33 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-07-24 19:33 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-07-24 19:33 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-07-24 19:33 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-07-24 19:33 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-07-24 19:32 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-07-24 19:32 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-07-24 19:32 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-07-24 19:32 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-07-24 19:32 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-07-24 19:32 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-07-24 19:32 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-07-24 19:32 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-07-24 19:31 - 2013-10-05 21:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-07-24 19:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-07-24 19:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-07-24 19:31 - 2013-02-12 05:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-07-24 19:30 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-24 19:30 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-24 19:29 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-07-24 19:29 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-07-24 19:29 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-07-24 19:29 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-07-24 19:29 - 2013-08-01 13:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-07-24 19:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-07-24 19:29 - 2013-04-10 07:18 - 00218984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-07-24 19:28 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-24 19:28 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-07-24 19:28 - 2013-11-12 04:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-07-24 19:28 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-07-24 19:28 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-07-24 19:28 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-07-24 19:28 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-07-24 19:27 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-24 19:27 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-07-24 19:27 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-07-24 19:27 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-07-24 19:27 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-07-24 19:27 - 2013-06-06 06:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-07-24 19:27 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-07-24 19:27 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-07-24 19:02 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-07-24 19:02 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-07-24 19:02 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-07-24 19:02 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-07-24 19:01 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-07-24 19:01 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-07-24 19:01 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-07-24 19:01 - 2013-10-12 04:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-07-24 19:01 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-07-24 19:01 - 2013-10-04 03:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-07-24 19:01 - 2013-10-04 03:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-07-24 19:01 - 2013-10-03 03:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-07-24 19:01 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-07-24 19:01 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-07-24 19:01 - 2012-11-29 00:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-07-24 19:01 - 2012-11-29 00:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-07-24 19:01 - 2012-11-29 00:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-07-24 19:00 - 2013-11-27 03:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-07-24 19:00 - 2013-11-27 03:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-07-24 19:00 - 2013-11-27 03:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-07-24 19:00 - 2013-11-27 03:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-07-24 19:00 - 2013-11-27 03:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-07-24 19:00 - 2013-11-27 03:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-07-24 19:00 - 2013-11-27 03:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-07-24 19:00 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-07-24 19:00 - 2013-07-12 12:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2014-07-24 18:50 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-24 18:50 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-07-24 18:50 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-07-24 18:50 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-07-24 18:50 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-07-24 18:50 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-07-24 18:50 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-07-24 18:50 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-24 18:50 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-24 18:50 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-24 18:50 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-24 18:50 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-24 18:50 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-24 18:50 - 2013-09-25 03:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-24 18:50 - 2013-07-04 14:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-15 19:49 - 2014-07-15 19:49 - 00000308 _____ () C:\Windows\PFRO.log
2014-07-10 22:13 - 2014-07-10 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-10 22:11 - 2014-07-26 08:16 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-10 22:11 - 2014-07-26 00:30 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-10 22:11 - 2014-07-10 22:13 - 00000000 ____D () C:\Users\Niko\AppData\Local\Google
2014-07-10 22:11 - 2014-07-10 22:12 - 00000000 ____D () C:\Program Files\Google
2014-07-10 22:10 - 2014-07-10 22:10 - 00895120 _____ (Google Inc.) C:\Users\Niko\Downloads\ChromeSetup.exe
2014-07-01 23:32 - 2014-07-12 11:10 - 00000000 ____D () C:\Users\Niko\Documents\Immobilie
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-26 08:37 - 2014-07-26 08:36 - 00012299 _____ () C:\Users\Niko\Downloads\FRST.txt
2014-07-26 08:36 - 2014-07-26 08:35 - 00000000 ____D () C:\FRST
2014-07-26 08:34 - 2014-07-26 08:34 - 00000470 _____ () C:\Users\Niko\Desktop\defogger_disable.log
2014-07-26 08:34 - 2014-07-26 08:34 - 00000000 _____ () C:\Users\Niko\defogger_reenable
2014-07-26 08:34 - 2010-01-14 23:44 - 00000000 ____D () C:\Users\Niko
2014-07-26 08:27 - 2014-07-26 08:27 - 02347384 _____ (ESET) C:\Users\Niko\Downloads\esetsmartinstaller_deu.exe
2014-07-26 08:26 - 2014-07-26 08:25 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Niko\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-26 08:24 - 2014-07-26 08:23 - 05563277 _____ (Swearware) C:\Users\Niko\Downloads\ComboFix.exe
2014-07-26 08:24 - 2010-01-14 23:38 - 01188926 _____ () C:\Windows\WindowsUpdate.log
2014-07-26 08:22 - 2014-07-26 08:22 - 01354223 _____ () C:\Users\Niko\Downloads\adwcleaner_3.216.exe
2014-07-26 08:18 - 2014-07-26 08:18 - 00380416 _____ () C:\Users\Niko\Downloads\Gmer-19357.exe
2014-07-26 08:16 - 2014-07-10 22:11 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-26 08:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-07-26 00:46 - 2009-07-14 06:34 - 00013568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-26 00:46 - 2009-07-14 06:34 - 00013568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-26 00:43 - 2014-07-26 00:42 - 01084416 _____ (Farbar) C:\Users\Niko\Downloads\FRST.exe
2014-07-26 00:40 - 2014-07-26 08:33 - 00050477 _____ () C:\Users\Niko\Desktop\Defogger.exe
2014-07-26 00:40 - 2014-07-26 00:40 - 00050477 _____ () C:\Users\Niko\Downloads\Defogger.exe
2014-07-26 00:30 - 2014-07-10 22:11 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-26 00:29 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-26 00:28 - 2014-04-01 20:11 - 00002276 _____ () C:\Windows\setupact.log
2014-07-26 00:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-07-25 23:31 - 2010-01-14 23:48 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-25 23:25 - 2010-01-14 23:33 - 00000000 ____D () C:\Windows\Panther
2014-07-25 23:25 - 2009-07-14 06:33 - 00308792 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-25 23:23 - 2010-07-11 03:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 23:19 - 2009-07-14 10:57 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-25 23:18 - 2009-07-14 06:52 - 00000000 ____D () C:\Program Files\Windows Defender
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\it-IT
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-07-25 23:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\el-GR
2014-07-25 22:50 - 2010-11-06 21:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-25 21:57 - 2014-07-25 21:57 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-25 21:57 - 2014-07-25 21:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-25 21:57 - 2014-07-25 21:57 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-07-25 21:57 - 2010-03-06 21:50 - 00000000 ___RD () C:\Program Files\Skype
2014-07-25 21:57 - 2010-03-06 21:50 - 00000000 ____D () C:\ProgramData\Skype
2014-07-25 21:45 - 2011-01-27 13:35 - 00002057 _____ () C:\Windows\epplauncher.mif
2014-07-24 21:56 - 2014-07-24 21:56 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-07-24 21:44 - 2012-07-15 11:44 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-07-24 21:44 - 2011-01-27 13:33 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-07-24 21:27 - 2014-07-24 21:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-24 21:18 - 2010-07-11 03:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 20:53 - 2014-07-24 20:28 - 00013843 _____ () C:\Windows\IE11_main.log
2014-07-24 20:44 - 2014-07-24 20:44 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-24 20:44 - 2014-07-24 20:44 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-24 20:44 - 2014-07-24 20:44 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-07-24 20:44 - 2014-07-24 20:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-07-24 20:44 - 2014-07-24 20:44 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-07-24 20:44 - 2014-07-24 20:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-07-24 20:44 - 2014-07-24 20:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-07-24 20:44 - 2014-07-24 20:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-07-24 20:43 - 2014-07-24 20:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-07-24 20:43 - 2014-07-24 20:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-07-24 20:41 - 2014-07-24 20:41 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-07-24 20:41 - 2014-07-24 20:41 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-07-24 20:41 - 2014-07-24 20:41 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-07-24 20:41 - 2014-07-24 20:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-07-24 20:41 - 2014-07-24 20:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-07-24 20:39 - 2014-07-24 20:39 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-07-24 20:37 - 2014-07-24 20:37 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-07-24 20:31 - 2014-07-24 20:31 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-07-24 18:43 - 2012-03-23 22:30 - 00001984 _____ () C:\Users\Public\Desktop\Adobe Reader 9.lnk
2014-07-24 18:43 - 2012-03-23 22:29 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
2014-07-21 22:51 - 2013-09-20 09:55 - 00000000 ____D () C:\Users\Niko\Documents\Urlaub
2014-07-21 21:28 - 2010-10-23 14:10 - 00000000 ____D () C:\Users\Niko\AppData\Roaming\Winamp
2014-07-21 10:02 - 2012-01-30 11:52 - 00000000 ____D () C:\Users\Niko\Desktop\Arbeitspläne Flora
2014-07-20 17:01 - 2012-10-11 20:41 - 00000000 ____D () C:\Users\Niko\AppData\Roaming\LG Electronics
2014-07-20 16:59 - 2011-05-21 10:04 - 00000000 ____D () C:\Program Files\No23 Recorder
2014-07-15 19:49 - 2014-07-15 19:49 - 00000308 _____ () C:\Windows\PFRO.log
2014-07-12 11:10 - 2014-07-01 23:32 - 00000000 ____D () C:\Users\Niko\Documents\Immobilie
2014-07-10 22:13 - 2014-07-10 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-10 22:13 - 2014-07-10 22:11 - 00000000 ____D () C:\Users\Niko\AppData\Local\Google
2014-07-10 22:12 - 2014-07-10 22:11 - 00000000 ____D () C:\Program Files\Google
2014-07-10 22:10 - 2014-07-10 22:10 - 00895120 _____ (Google Inc.) C:\Users\Niko\Downloads\ChromeSetup.exe
2014-07-08 00:23 - 2011-03-28 22:42 - 00002591 _____ () C:\Users\Niko\Desktop\Neues Textdokument (2).txt
2014-07-03 21:13 - 2012-07-15 10:46 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-26 17:38 - 2010-01-15 00:39 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
Some content of TEMP:
====================
C:\Users\Niko\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-21 08:43
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-26 09:12:06
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_MP0804H rev.UE100-11 74,06GB
Running: Gmer-19357.exe; Driver: C:\Users\Niko\AppData\Local\Temp\kwliqpog.sys
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 82C49A15 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82C83212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0011f60bcde1
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0011f60bcde1 (not active ControlSet)
---- EOF - GMER 2.1 ----
Viele Grüße Niko |
| Themen zu MS Security Essentials durch Gruppenrichtlinie blockiert |
| administrator, adobe, blockiert, durch gruppenrichtlinie blockiert, explorer, google, gruppenrichtlinie blockiert, harddisk, helper, homepage, html, logfiles, malwarebytes, microsoft, mozilla, pdf, problem, registry, schutz, security, services.exe, software, svchost.exe, system, temp, windows, wiso |
Baum-Darstellung